M6426: Configuring and Troubleshooting Identity and Access Solutions with Windows Server 2008 Active Directory Version: B Length: 3 Days Published: November 05, 2009 Language(s): English Audience(s): IT Professionals Level: 300 Technology: Windows Server 2008 Type: Course Delivery Method: Instructor-led (classroom) About this Course This three-day instructor-led course provides in-depth knowledge on configuring and troubleshooting Identity and Access (IDA) solutions with Windows Server 2008 Active Directory. Audience Profile This course is intended for those who want to understand how IDA solutions are implemented in Windows Server 2008. This course provides a technology overview of IDA and PKI solutions, and details the implementation of each of the roles in Windows Server 2008 that implement the IDA solution. Also architects, IT professionals, and developers who are responsible for integrating applications and platforms with enterprise directory and security services would benefit from this course. At Course Completion After completing this course, students will be able to: oExplore Identity and Access (IDA) solutions. oDeploy and Manage Active Directory Certificate Services (AD CS). oDeploy and Manage Certificates. oConfigure Active Directory Lightweight Directory Services (AD LDS). oConfigure Active Directory Federation Services (AD FS). oConfigure Active Directory Rights Management Services (AD RMS). oMaintain access management solutions. oTroubleshoot IDA solutions. Before attending this course, students must have: Technical background knowledge and hands-on experience of Active Directory Domain Services (AD DS). This includes technical knowledge equivalent to 6425B: Configuring Windows Server 2008 Active Directory Domain Services. Course Outline Module 1: Exploring Identity and Access Solutions Exploring Identity and Access Solutions introduces Identity and Access Management (IDA Management) solutions. You will learn to identify Active Directory server roles in IDA Management. The module will also describe the concept of Identity Lifecycle Manager (ILM). Lessons oThe Business Case for Identity and Access Control oActive Directory Server Roles in IDA Management oOverview of Identity Lifecycle Manager 2007 Lab : Exploring IDA Solutions oExploring How Active Directory Server Roles Provide IDA Management Solutions After completing this module, students will be able to: oIdentify and define IDA Solutions oIdentify Active Directory Server Roles in IDA Management oIdentify the uses and features of ILM 2007 Module 2: Deploying and Managing Active Directory Certificate Services Deploying and Managing Active Directory Certificate Services explains the concepts of public key infrastructure (PKI). You will also learn to deploy a certification authority (CA) hierarchy and install AD CS. Finally, the module describes how to configure AD CS. Lessons oOverview of PKI oDeploying a CA Hierarchy oInstalling AD CS oManaging CAs Lab : Installing and Configuring AD CS oInstalling the AD CS Server Role oIssuing and Installing a Subordinate Certificate oPublishing the CRL After completing this module, students will be able to: oDescribe Public Key Infrastructure. oDeploy a Certification Authority hierarchy. oInstall Active Directory Certificate Services. oManage a Certification Authority. Module 3: Deploying and Managing Certificates Deploying and Managing Certificates describes the deployment of certificates by using AD CS. In addition, the module elaborates on usage of autoenrollment to deploy certificates, certificate revocation, and configuration of certificate template and certificate recovery. Lessons oConfiguring Certificate Templates oDeploying Certificates by Using AD CS oDeploying Certificates by Using Autoenrollment oRevoking Certificates oConfiguring Certificate Recovery Lab : Deploying and Managing Certificates oConfiguring AD CS Certificate Templates oConfiguring AD CS Web Enrollment oConfiguring Certificate Autoenrollment oConfiguring AD CS Certificate Revocation oManaging Key Archival and Recovery After completing this module, students will be able to: oDeploy certificates by using AD CS. oUse autoenrollment to deploy certificates. oRevoke certificates. oConfigure certificate templates. oConfigure certificate recovery. Module 4: Configuring Active Directory Lightweight Directory Services Configuring Active Directory Lightweight Directory Services elaborates on the installation of AD LDS, and the configuration of AD LDS, its instances, replication, and integration with AD DS. Lessons oInstalling and Configuring AD LDS oConfiguring AD LDS Instances oConfiguring AD LDS Replication oConfiguring AD LDS Integration with AD DS Lab : Configuring AD LDS oConfiguring an AD LDS Instance and an Application Partition oConfiguring AD LDS Access Control oConfiguring AD LDS Replication oConfiguring AD DS and AD LDS Synchronization After completing this module, students will be able to: oInstall and configure AD LDS. oConfigure AD LDS instances. oConfigure AD LDS replication. oConfigure AD LDS integration with AD DS. Module 5: Configuring Active Directory Federation Services Configuring Active Directory Federation Services presents the concept of AD FS and its deployment scenarios. The module also describes how to deploy AD FS and implement AD FS claims. Lessons oOverview of AD FS oAD FS Deployment Scenarios oDeploying AD FS oImplementing AD FS Claims Lab : Configuring AD FS by Using the Federated Web SSO with Forest Trust Scenario oInstalling the AD FS Server Role oConfiguring Certificate Requirements oInstalling the AD FS Web Agent oConfiguring the Web Server Application on the 6426B-NWTDC01 Virtual Computer oConfiguring the Forest Trust and the Federated Trust Policies oConfiguring the Federation Service Within the Internal Network oConfiguring the Federation Service Within the Extranet oTesting the AD FS Implementation Lab : Configuring AD FS by Using the Federated Web SSO Scenario oInstalling the AD FS Server Role oConfiguring Certificate Requirements oConfiguring the AD FS Web Agent oConfiguring the Web Server Application on the 6426B-NWTDC01 Virtual Computer oConfiguring the Federation Trust Policies oConfiguring the Account Partner Federation Service oConfiguring the Resource Partner Federation Service oTesting the AD FS Implementation After completing this module, students will be able to: oIdentify the key aspects of AD FS. oExplore AD FS deployment scenarios. oDeploy AD FS. oImplement AD FS claims. Module 6: Configuring Active Directory Rights Management Services Configuring Active Directory Rights Management Services explains the concept of AD RMS. The module describes how to install and configure AD RMS server components. The module also explains the administration of AD RMS and implementation of AD RMS trust policies. Lessons oOverview of AD RMS oInstalling and Configuring AD RMS Server Components oAdministering AD RMS oImplementing AD RMS Trust Policies Lab : Configuring AD RMS oInstalling the AD RMS Server Role oManaging AD RMS Rights Policy Templates oConfiguring Trust Policies oTesting AD RMS Functionality After completing this module, students will be able to: oIdentify the key aspects of AD RMS. oInstall and configure AD RMS server components. oAdminister AD RMS. oImplement AD RMS Trust Policies. Module 7: Maintaining Access Management Solutions Maintaining Access Management Solutions explains the maintenance of AD CS, AD LDS, AD FS, and AD RMS. Lessons oSupporting AD CS oMaintaining AD LDS oMaintaining AD FS oMaintaining AD RMS Lab : Maintaining Access Management Solutions oConfiguring CA Event Auditing oImplementing Role-Based Administration in AD CS oBacking Up a CA oReconfiguring AD RMS Cluster Settings oGenerating AD RMS Reports oConfiguring AD RMS Logging After completing this module, students will be able to: oSupport AD CS. oMaintain AD LDS. oMaintain and Monitor AD FS. oMaintain AD RMS. Module 8: Troubleshooting Identity and Access Solutions Troubleshooting Identity and Access Solutions describes how to troubleshoot AD CS, AD LDS, AD FS, and AD RMS. Lessons oTroubleshooting AD CS oTroubleshooting AD LDS oResolving AD FS Issues oSolving AD RMS Issues Lab : Troubleshooting IDA Solutions oIdentifying Tools and Troubleshooting Techniques of IDA Solutions After completing this module, students will be able to: oTroubleshoot AD CS. oTroubleshoot AD LDS. oResolve AD FS issues. oSolve AD RMS issues.