M6436: Designing a Windows Server 2008 Active Directory Infrastructure and Services Version: A Length: 5 Days Published: August 18, 2008 Language(s): English, Chinese (Simplified), Japanese Audience(s): IT Professionals Level: 400 Technology: Windows Server 2008 Type: Course Delivery Method: Instructor-led (classroom) About this Course At the end of this five-day course, students will learn how to design an Active Directory Infrastructure in Windows Server 2008. Students will learn how to design Active Directory forests, domain infrastructure, sites and replication, administrative structures, group policies, and Public Key Infrastructures. Students will also learn how to design for security, high availability, disaster recovery, and migrations. Audience Profile This course is intended for Windows Server 2008 IT professionals who want to become Windows Server 2008 enterprise administrators and move into the role of designing Active Directory Domain Services (AD DS) environments. At Course Completion After completing this course, students will be able to design an Active Directory infrastructure and services in Windows Server 2008. Before attending this course, students must have: oCompletion of Microsoft Certified Technology Specialist (MCTS) Windows Server 2008 curriculum or equivalent knowledge and skills. oKnowledge of Windows Vista Terminal Services or Deployment Terminal Services Course Outline Module 1: Designing an Active Directory Forest Infrastructure in Windows Server 2008 This module explains how to design an Active Directory forest based on business and technical requirements. Lessons oDetermining Active Directory Forest Design Requirements oDesigning an Active Directory Forest oDesigning Active Directory Forest Trusts oManaging the Active Directory Schema oUnderstanding Windows Time Service Lab : Designing an Active Directory Forest Infrastructure in Windows Server 2008 oDesigning an Active Directory Forest oDesigning and Implementing Active Directory Forest Trusts oDesigning and Implementing Active Directory Schema Changes oDiscussions About Exercise 1-3 Design Decisions After completing this module, students will be able to: oDetermine Active Directory Forest Design Requirements oDesign an Active Directory Forest oDesign Active Directory Forest Trusts oManage the Active Directory Schema oUnderstand Windows Time Service Module 2: Designing an Active Directory Domain Infrastructure in Windows Server 2008 This module explains how to design an Active Directory domain infrastructure based on business and technical requirements. Lessons oDesigning Active Directory Domains oDesigning the Integration of DNS Namespaces oDesigning the Placement of Domain Controllers oDesigning Active Directory Domain Trusts Lab : Designing an Active Directory Domain Infrastructure in Windows Server 2008 oDesigning Active Directory Domains oDesigning and Implementing DNS Namespace Integration oDesigning and Implementing Read-Only Domain Controller Security oDesigning and Implementing Active Directory Domain Trusts oDiscussions About Exercise 1-4 Design Decisions After completing this module, students will be able to: oDesign Active Directory domains oDesign the integration of DNS namespaces oDesign the placement of domain controllers oDesign Active Directory domain trusts Module 3: Designing Active Directory Sites and Replication in Windows Server 2008 This module explains how to design Active Directory sites and replication roles. Lessons oDesigning Active Directory Sites oDesigning AD DS Replication oDesigning the Placement of Domain Controllers in AD DS Sites Lab : Designing AD DS Sites and Replication in Windows Server 2008 oDesigning and Implementing AD DS Sites oDesigning and Implementing AD DS Replication oDesigning the Placement of Domain Controllers oDiscussions About Exercise 1-3 Design Decisions After completing this module, students will be able to: oDesign Active Directory sites oDesign Active Directory replication oDesign the placement of domain controllers in Active Directory sites Module 4: Designing Active Directory Domain Administrative Structures in Windows Server 2008 This module explains how to design Active Directory domain administrative structures in Windows Server 2008. Lessons oPlanning an Active Directory Domain Administrative Structure oDesigning Organizational Unit Structures oDesigning an Active Directory Group Strategy oPlanning for User and Computer Account Management Lab : Designing AD DS Administrative Structures in Windows Server 2008 oDesigning and Implementing Organizational Units oDesigning and Implementing Active Directory Group Strategies oAutomating User Account Management by using Windows PowerShell oDiscussions About Exercise 1-3 Design Decisions After completing this module, students will be able to: oPlan an Active Directory domain administrative structure oDesign organizational unit structures oDesign an Active Directory group strategy oPlan for User and Computer Account management Module 5: Designing Active Directory Group Policy in Windows Server 2008 This module explains how to design Active Directory Group Policies in Windows Server 2008. Lessons oGathering Information for Group Policy Deployment oDesigning Group Policy Settings oDesigning Group Policy Processing oDesigning Group Policy Management Lab : Designing Active Directory Administrative Structures in Windows Server 2008 oDesigning and Implementing Group Policy Settings oDesigning and Implementing Group Policy Application oDesigning and Implementing Group Policy Management oDiscussions About Exercise 1-3 Design Decisions After completing this module, students will be able to: oGather information for designing the Group Policy deployment. oDesign Group Policy settings oDesign Group Policy processing oDesign Group Policy management Module 6: Designing AD DS Security in Windows Server 2008 This module explains how to design AD DS security in Windows Server 2008. Lessons oDesigning Active Directory Security Policies oDesigning Active Directory Domain Controller Security oDesigning Administrator Security and Delegation Lab : Designing AD DS Security in Windows Server 2008 oDesigning and Implementing Domain Security Policies oDesigning and Implementing Domain Controller Security Policies oDesigning and Implementing Administrator Security and Delegation oDiscussions About Exercise 1-3 Design Decisions After completing this module, students will be able to: oDesign Active Directory security policies oDesign Active Directory domain controller security oDesign administrator security and delegation Module 7: Designing Active Directory High Availability in Windows Server 2008 This module explains how to design Active Directory high availability and disaster recovery in Windows Server 2008. Lessons oUnderstanding AD DS High Availability oDesigning an AD DS High Availability Strategy Lab : Designing AD DS Availability in Windows Server 2008 oDesigning a High Availability Plan for AD DS oDiscussions About Exercise 1 Design Decisions After completing this module, students will be able to: oUnderstand AD DS high availability oDesign an AD DS high availability strategy Module 8: Designing AD DS Disaster Recovery in Windows Server 2008 This module explains how to design AD DS disaster recovery in Windows Server 2008. Lessons oDesigning an Active Directory Database Maintenance Strategy oDesigning an Active Directory Backup and Recovery Strategy oDesigning an AD DS Monitoring Strategy Lab : Designing Active Directory Disaster Recovery in Windows Server 2008 oDesigning and Implementing a Domain Controller Maintenance Plan oDesigning and Implementing a Domain Controller Monitoring Plan oDiscussions About Exercise 1-2 Design Decisions After completing this module, students will be able to: oDesign an Active Directory database maintenance strategy oDesign an Active Directory backup and recovery strategy oDesign an Active Directory monitoring strategy Module 9: Designing Public Key Infrastructure in Windows Server 2008 This module explains how to design Public Key Infrastructure in Windows Server 2008. Lessons oOverview of PKI and Active Directory Certificate Services oDesigning a Certification Authority Hierarchy oDesigning Certificate Template oDesigning Certificate Distribution and Revocation Lab : Designing Public Key Infrastructure in Windows Server 2008 oDesigning and Implementing a CA Hierarchy oDesigning and Implementing AD CS Certificate Templates oDesigning and Implementing Certificate Enrollment and Revocation oDiscussions About Exercises 1-3 Design Decisions After completing this module, students will be able to: oDescribe PKI and Active Directory Certificate Services oDesign a Certification Authority hierarchy oDesign certificate template oDesign certificate distribution and revocation Module 10: Designing an AD RMS Infrastructure in Windows Server 2008 This module explains how to design AD RMS infrastructure in Windows Server 2008. Lessons oGathering Information for an Active Directory Rights Management Services (AD RMS) Design oDesigning AD RMS Clusters and Access oDesigning AD RMS Backup and Recovery Lab : Designing an AD RMS Infrastructure in Windows Server 2008 oDesigning AD RMS Clusters and Access oDesigning AD RMS Backup and Recovery oDiscussions About Exercises 1-2 Design Decisions After completing this module, students will be able to: oGather information for an AD RMS design oDesign AD RMS clusters and access oDesign AD RMS backup and recovery Module 11: Designing an Active Directory Federation Services Implementation in Windows Server 2008 This module explains how to design an Active Directory Federation Services (AD FS) implementation. Lessons oOverview of an Active Directory Federation Services Design oDesigning a Business-to-Business Federation oDesigning Active Directory Federation Services Claims and Applications Lab : Designing an Active Directory Federation Services Implementation in Windows Server 2008 oDesigning Active Directory Federation Services Access to Applications in a Perimeter Network oDesigning Active Directory Federation Services Access to Partner Applications oDesigning Active Directory Federation Services for Partner Access to Applications in a Perimeter Network oDiscussions About Exercise1-3 Design Decisions After completing this module, students will be able to: oDescribe an AD FS design. oDesign a business-to-business federation. oDesign AD FS claims and applications. Module 12: Designing an AD LDS Implementation This module explains how to design an AD LDS implementation. Lessons oAD LDS Deployment Scenarios oOverview of an AD LDS Implementation Design oDesigning AD LDS Schema and Replication oIntegrating AD LDS with AD DS Lab : Designing an AD LDS Implementation oDesigning and Configuring AD LDS Replication for Internal Applications oDesigning and Configuring AD LDS Replication for External Applications oDesigning Highly Available LDAP Services for Multiple Applications oDiscussions About Exercises 1-3 Design Decisions After completing this module, students will be able to: oDescribe the AD LDS deployment scenarios oDescribe the AD LDS implementation design oDesign AD LDS schema and replication oIntegrate AD LDS with AD DS Module 13: Designing Active Directory Migrations in Windows Server 2008 This module explains how to design Active Directory migrations in Windows Server 2008. Lessons oChoosing an Active Directory Migration Strategy oDesigning a Domain Upgrade Strategy oDesigning a Domain Restructure Strategy Lab : Designing Active Directory Migrations in Windows Server 2008 oDesigning an Active Directory Migration Strategy oDesigning an Active Directory Migration Implementation Plan oDiscussions About Exercise 1-2 Design Decisions After completing this module, students will be able to: oChoose an Active Directory migration strategy oDesign a domain upgrade strategy oDesign a domain restructure strategy