Identity with Windows Server 2016

Description

MS-20742 – Identity with Windows Server 2016

This five-day instructor-led course teaches IT Pros how to deploy and configure Active Directory Domain Services (AD DS) in a distributed environment, how to implement Group Policy, how to perform backup and restore, and how to monitor and troubleshoot Active Directory–related issues with Windows Server 2016. Additionally, this course teaches how to deploy other Active Directory server roles such as Active Directory Federation Services (AD FS) and Active Directory Certificate Services (AD CS).

THIS COURSE USES ONLY DIGITAL CURRICULUM

PREREQUISITES

Before attending this course, students must have:

• Some exposure to and experience with AD DS concepts and technologies in Windows Server 2012 or Windows Server 2016.
• Experience working with and configuring Windows Server 2012 or Windows Server 2016
• Experience and an understanding of core networking technologies such as IP addressing, name resolution, and Dynamic Host Configuration Protocol (DHCP).
• Experience working with and an understanding of Microsoft Hyper-V and basic server virtualization concepts.
• An awareness of basic security best practices.
• Hands-on working experience with Windows client operating systems such as Windows 7, Windows 8, Windows 8.1, or Windows 10.
• Basic experience with the Windows PowerShell command-line interface.

DETAILED CLASS SYLLABUS

MODULE 1: INSTALLING AND CONFIGURING DCS

Overview of AD DS

Overview of AD DS DCs

Deploying DCs

MODULE 2: MANAGING OBJECTS IN AD DS

Managing user accounts

Managing groups in AD DS

Managing computer objects in AD DS

Using Windows PowerShell for AD DS administration

Implementing and managing OUs

MODULE 3: ADVANCED AD DS INFRASTRUCTURE MANAGEMENT

Overview of advanced AD DS deployments

Deploying a distributed AD DS environment

Configuring AD DS trusts

MODULE 4: IMPLEMENTING AND ADMINISTERING AD DS SITES AND REPLICATION

Overview of AD DS replication

Configuring AD DS sites

Configuring and monitoring AD DS replication

MODULE 5: IMPLEMENTING GROUP POLICY

Introducing Group Policy

Implementing and administering GPOs

Group Policy scope and Group Policy processing

Troubleshooting the application of GPOs

MODULE 6: MANAGING USER SETTINGS WITH GROUP POLICY

Implementing administrative templates

Configuring Folder Redirection, software installation, and scripts

Configuring Group Policy preferences

MODULE 7: SECURING ACTIVE DIRECTORY DOMAIN SERVICES

Securing domain controllers

Implementing account security

Implementing audit authentication

Configuring managed service accounts

MODULE 8: DEPLOYING AND MANAGING AD CS

Deploying CAs

Administering CAs

Troubleshooting and maintaining CAs

MODULE 9: DEPLOYING AND MANAGING CERTIFICATES

Deploying and managing certificate templates

Managing certificate deployment, revocation, and recovery

Using certificates in a business environment

Implementing and managing smart cards

MODULE 10: IMPLEMENTING AND ADMINISTERING AD FS

Overview of AD FS

AD FS requirements and planning

Deploying and configuring AD FS

Overview of Web Application Proxy

MODULE 11: IMPLEMENTING AND ADMINISTERING AD RMS

Overview of AD RMS

Deploying and managing an AD RMS infrastructure

Configuring AD RMS content protection

MODULE 12: IMPLEMENTING AD DS SYNCHRONIZATION WITH MICROSOFT AZURE AD

Planning and preparing for directory synchronization

Implementing directory synchronization by using Azure AD Connect

Managing identities with directory synchronization

MODULE 13: MONITORING, MANAGING, AND RECOVERING AD DS

Monitoring AD DS

Managing the Active Directory database

Active Directory backup and recovery options for AD DS and other identity and access solutions