In this course, you will learn how to design an Active Directory Infrastructure in Windows Server 2008 and Windows Server 2008 R2 operating systems. You'll go through the steps and processes related to the design elements of Active Directory forests, domain infrastructure, sites and replication, administrative structures, group policies, and Public Key Infrastructures. You will also learn how to design for security, high availability, disaster recovery, and migrations.

This course incorporates materials from the Official Microsoft Learning Product (OMLP) 6436: Designing a Windows Server 2008 Active Directory Infrastructure and Services.

Certification:

This course covers concepts addressed on Exam 70-647: Microsoft Certified IT Professional: Windows Server 2008, Enterprise Administrator.

What You'll Learn

• Design Active Directory Forest and Trusts
• Design an Active Directory Domain Services (AD DS) domain and Domain Name Service (DNS) integration
• Design AD DS sites and AD DS replication
• Create an AD DS domain controller deployment plan
• Create an AD DS domain administration design and partially implement the design
• Create an AD DS Group Policy design and implement components of that design
• Design and implement AD DS security policies that meet security requirements
• Design and implement a Public Key Infrastructure (PKI) deployment by using Active Directory Certificate Services (AD CS)
• Design an Active Directory Rights Management Services (AD RMS) solution and deploy RMS for internal users
• Create and implement an Active Directory Lightweight Directory Services (AD LDS) design
• Validate a federated web single sign-on (SSO) deployment
• Design and implement a domain restructure

Who Needs to Attend

• Windows Server 2008 administrators who want to become Windows Server 2008 enterprise administrators and move into the role of designing AD DS environments
• IT professionals, including Windows 2000 Server and Windows Server 2003 enterprise administrators who want to become Windows Server 2008 enterprise administrators
• Security architects who want to know more about how to integrate the Windows Server 2008 technology into enterprise directories
• Active Directory technology specialists who want to understand design decisions

Prerequisites

• System administrator-level working knowledge
• One year of experience implementing server plans
• Knowledge of client operating system

Follow-On Courses

• Managing Windows Environments with Group Policy (M50255)

Certification Programs and Certificate Tracks

This course is part of the following programs or tracks:

• MCITP: Enterprise Administrator

Course Outline

1. Active Directory Design

2. Preparing

3. Designing the Internal AD DS Infrastructure

4. Extending the Active Directory Design

5. Designing an Active Directory Forest Infrastructure in Windows Server 2008

6. Designing an Active Directory Forest

7. Designing Active Directory Forest Trusts

8. Managing the Active Directory Schema

9. Designing a Windows Time Service Deployment

10. Designing an Active Directory Domain Infrastructure

11. Designing Active Directory Domains

12. Designing DNS Namespaces in an AD DS Environment

13. Designing Active Directory Domain Trusts

14. Designing AD DS and Replication

15. Designing AD DS Sites

16. Designing AD DS Replication

17. Designing AD DS Domain Controllers

18. Designing Domain Controllers and Domain Controller Placement

19. Designing RODC Deployments

20. Designing Domain Controllers as Virtual Machines

21. Designing Domain Controller Availability

22. Designing AD DS Domain Administrative

23. Planning an AD DS Domain Administrative

24. Designing Organizational Unit Structures

25. Designing an Active Directory Group Strategy

26. Planning for User and Computer Account Management

27. Designing AD DS Group Policy

28. Gathering Information for Group Policy Deployment

29. Designing Group Policy Settings

30. Designing Group Policy Processing

31. Designing Group Policy Management

32. Designing AD DS Security

33. Preparing to Design AD DS Security

34. Designing Active Directory Domain Controller Security

35. Designing Administrator Security

36. Designing a Public Key Infrastructure (PKI)

37. PKI and Active Directory Certificate Services

38. Designing a Certification Authority Hierarchy

39. Designing Certificate Templates

40. Designing Certificate Distribution and Revocation

41. Designing and Deploying AD RMS

42. AD RMS

43. Designing an AD RMS Deployment

44. Extending the AD RMS Deployment Outside an Organization

45. Designing an AD LDS Infrastructure

46. AD LDS Deployment Scenarios

47. Designing an AD LDS Server Deployment

48. Designing AD LDS Replication

49. Integrating AD LDS with AD DS

50. Designing an AD FS Infrastructure

51. AD FS Design

52. Designing an AD FS Deployment

53. Designing AD FS Claims and Applications

54. Designing AD DS Transitions

55. Choosing an AD DS Transition Strategy

56. Designing a Domain-Upgrade Strategy

57. Designing a Domain-Restructure Strategy

58. Designing AD DS Domain Renaming

Labs

Lab 1: Explore the Lab Scenario

• Contoso Ltd. Scenario
• Additional Scenarios for Active Directory Designs

Lab 2: Design an AD DS Forest Infrastructure

• Create and Implement Forest Trusts

Lab 3: Design an AD DS Domain Infrastructure

• Design and Implement AD DS Domains
• Design and Implement DNS Integration
• Design and Implement Domain Trusts

Lab 4: Design AD DS Sites and Replication

• Design and Implement AD DS Sites
• Design and Implement AD DS Replication

Lab 5: Design AD DS Domain Controllers

• Design an AD DS Controller Deployment
• Design and Implement an RODC Deployment

Lab 6: Design AD DS Domain Administration

• Create and Implement an OU Design
• Create and Implement an AD DS Group Design
• Automate User and Group Management

Lab 7: Design AD DS Group Policy

• Design and Implement Group Policy Objects
• Design and Implement Group Policy Application

Lab 8: Design and Implement AD DS Security

• Design and Implement Security Policies for Accounts and Passwords
• Design and Implement Administrative Security Policies

Lab 9: Design and Implement a PKI Deployment

• Design and Implement a CA Hierarchy
• Design and Implement AD CS Certificate Templates

Lab 10: Design and Deploy AD RMS

• Design an AD RMS Deployment
• Implement an Internal AD RMS Deployment
• Verify the AD RMS Deployment

Lab 11: Design and Implement an AD LDS Infrastructure

• Design AD LDS Replication for Internal and External Applications
• Design Highly Available LDAP Services for Multiple Applications
• Implement an AD LDS Solution

Lab 12: Integrate AD FS and AD RMS

• Configure AD FS in the Account Partner
• Configure AD FS in the Resource Forest
• Add Resource and Account Partners
• Configure AD RMS to Work with AD FS
• Configure the AD FS Client
• Verify AD RMS and AD FS Functionality

Lab 13: Design and Implement an AD DS Domain Restructure

• Design an AD DS Domain Restructure
• Implement an AD DS Domain Restructure