| Managing and Maintaining Windows Server 2008 Active Directory | |
| Duration | 2 Days |
| Fees | 6,000 |
| Module 1: Managing an Active Directory Server Lifecycle This module explains how to support and maintain Active Directory servers to meet changing business requirements in an enterprise environment. Lessons • Planning an Active Directory Server Deployment • Using Active Directory Server Deployment Technologies • Adding AD DS Server Roles • Removing AD DS Server Roles Lab : Managing and Maintaining a Windows Server 2008 Domain Controller • Evaluating the Need for AD DS Promotion • Meeting the Need by Adding a Role • Managing a Change Request for an RODC by Using the Command Line • Developing a Management and Maintenance Plan • Evaluating the Management and Maintenance Plan After completing this module, students will be able to: • Plan an Active Directory server deployment. • Identify different approaches to Active Directory server deployment. • Add an AD DS server role. • Remove an AD DS server role. Module 2: Creating Baselines for Active Directory Servers This module explains how to create baselines using the WRPM and through analysis, make decisions to improve server performance. Lessons • Baseline Methodologies for Active Directory Servers • WRPM Overview • Using Metrics to Create Baselines for Active Directory Servers Lab : Creating Baselines for Active Directory Servers • Involving Users in Baseline Development • Choosing Relevant WRPM Counters and Durations • Evaluating and Revising a Baseline Document in the Face of Business Changes After completing this module, students will be able to: • Define strategies for developing baselines. • Explain the use of the WRPM as a baseline creation and revision tool. • Describe some of the specific metrics that may be relevant for the different Active Directory roles. Module 3: Monitoring the System Health of Active Directory Servers This module explains how to create and evaluate a monitoring plan based on business needs and environments. It also explains how to determine the health of Active Directory servers using performance monitoring and even log triggers. Lessons • System Health Overview • Using Long-Term Monitoring to Identify Trends • Setting Thresholds and Alerts for Short-Term Monitoring • Choosing the Appropriate Windows Server 2008 Monitoring Tools Lab : Monitoring the Active Directory Server Roles • Setting a Performance Alert to Meet a Business Goal • Discussing Alert Response Strategies • Building a Case for Configuration Change After completing this module, students will be able to: • Define system health, server health, and Active Directory health. • Define the best procedures to ensure system health and optimal performance for Active Directory servers. • Set thresholds and alerts that are used for short-term monitoring. • Describe the Windows Server 2008 monitoring tools and how to decide when the different tools are appropriate in different business situations. Module 4: Managing Active Directory Domain Services This module explains how to implement the methodology of maintaining Windows Server 2008 AD DS. Lessons • Restarting and Restoring Active Directory • Overview of the Flexible Single Master Operations (FSMO) Roles • Planning Sites and Replication • Managing RODCs • Methods of Managing Windows Server Core • Best Practices for GPOs and Links • Delegating Active Directory Administration Lab : Managing AD DS • Offline Defragging of the Active Directory Database • Evaluating an RODC with Read-Only DNS Solution • Making Site Replication Decisions • Group Policy Link Strategies After completing this module, students will be able to: • Describe the impact of Windows Server 2008 methods for restarting Active Directory without rebooting. • Define the FSMO roles and the Global Catalog pseudo-role. • Explain the importance of site definitions and how to optimize the AD DS replication activity. • Explain the functionality of RODCs and the key benefits with RODCs deployed. • Explain the methods of managing Windows Server Core. • Identify the best practices for Group Policy Objects (GPOs) and links. • State the pros and cons of delegating administration of Active Directory. Module 5: Maintaining Security for Active Directory Servers This module explains how to deploy proven methods to harden the Active Directory servers. Lessons • Server Hardening Techniques • Using the MBSA to Discover and Remove Security Holes • Using Fine-Grained Password Policies to Simplify Network Organization • Planning Security Auditing • Enhancing Physical Security Lab : Maintaining Security for the Active Directory Servers • Manually Implementing AD DS Server Hardening • Assessing Ongoing Security Requirements • Deploying Fine-Grained Password Policies After completing this module, students will be able to: • Describe the techniques used for manual server hardening. • Use the MBSA to discover and remove security holes. • Explain why you would use fine-grained password policies and how to maintain them. • Explain when to perform security auditing and how to define a proper security baseline. • Explain how to solve physical security problems and the ramifications of lax security policies. Module 6: Managing Active Directory Service Roles This module explains how to add non-AD-DS service roles to a Windows Server 2008 network and manage those roles with supplied tools. Lessons • Using Windows Server 2008 Tools for AD CS • Implementing AD LDS • AD FS Overview • AD RMS Overview Lab : Managing Active Directory Service Roles • Installing the AD LDS Role • Identifying Ongoing Management Concerns • Using Windows Server 2008 Tools for Managing AD LDS After completing this module, students will be able to: • Use the Windows Server 2008 tools to operate Certificate Services. • Explain when to use AD LDS. • Identify management concerns with Active Directory Federation Services (AD FS). • Identify management concerns with Active Directory Rights Management Services (AD RMS). |


