Microsoft 6432: Managing and Maintaining Windows Server
2008 Active Directory Servers


Valor:

Pré-requisitos
Cursos anteriores da formação

Conteúdo Programático

O Material deste treinamento é oficial Microsoft e em INGLÊS.


Este curso prepara o aluno para planejar a implantação de um servidor Active Directory, identificar diferentes abordagens de deployment de servidores, adicionar domínios de servidores, uso do Windows Reliability and Performance Monitor para monitorar desempenhos, implementação de gatilhos e alertas para monitoramento do AD, e operação de um Active Directory Lightweight Directory Services (AD LDS).





Course Outline


Module 1: Managing an Active Directory Server Lifecycle

This module explains how to support and maintain Active Directory servers to meet changing business requirements in an enterprise environment.


Lessons

Planning an Active Directory Server Deployment

Using Active Directory Server Deployment Technologies

Adding AD DS Server Roles

Removing AD DS Server Roles


Lab : Managing and Maintaining a Windows Server 2008 Domain Controller

Evaluating the Need for AD DS Promotion

Meeting the Need by Adding a Role

Managing a Change Request for an RODC by Using the Command Line

Developing a Management and Maintenance Plan

Evaluating the Management and Maintenance Plan

After completing this module, students will be able to:

Plan an Active Directory server deployment.

Identify different approaches to Active Directory server deployment.

Add an AD DS server role.

Remove an AD DS server role.


Module 2: Creating Baselines for Active Directory Servers

This module explains how to create baselines using the WRPM and through analysis, make decisions to improve server performance.


Lessons

Baseline Methodologies for Active Directory Servers

WRPM Overview

Using Metrics to Create Baselines for Active Directory Servers


Lab : Creating Baselines for Active Directory Servers

Involving Users in Baseline Development

Choosing Relevant WRPM Counters and Durations

Evaluating and Revising a Baseline Document in the Face of Business Changes

After completing this module, students will be able to:

Define strategies for developing baselines.

Explain the use of the WRPM as a baseline creation and revision tool.

Describe some of the specific metrics that may be relevant for the different Active Directory roles.


Module 3: Monitoring the System Health of Active Directory Servers

This module explains how to create and evaluate a monitoring plan based on business needs and environments. It also explains how to determine the health of Active Directory servers using performance monitoring and even log triggers.


Lessons

System Health Overview

Using Long-Term Monitoring to Identify Trends

Setting Thresholds and Alerts for Short-Term Monitoring

Choosing the Appropriate Windows Server 2008 Monitoring Tools


Lab : Monitoring the Active Directory Server Roles

Setting a Performance Alert to Meet a Business Goal

Discussing Alert Response Strategies

Building a Case for Configuration Change

After completing this module, students will be able to:

Define system health, server health, and Active Directory health.

Define the best procedures to ensure system health and optimal performance for Active Directory servers.

Set thresholds and alerts that are used for short-term monitoring.

Describe the Windows Server 2008 monitoring tools and how to decide when the different tools are appropriate in different business situations.


Module 4: Managing Active Directory Domain Services

This module explains how to implement the methodology of maintaining Windows Server 2008 AD DS.


Lessons

Restarting and Restoring Active Directory

Overview of the Flexible Single Master Operations (FSMO) Roles

Planning Sites and Replication

Managing RODCs

Methods of Managing Windows Server Core

Best Practices for GPOs and Links

Delegating Active Directory Administration


Lab : Managing AD DS

Offline Defragging of the Active Directory Database

Evaluating an RODC with Read-Only DNS Solution

Making Site Replication Decisions

Group Policy Link Strategies

After completing this module, students will be able to:

Describe the impact of Windows Server 2008 methods for restarting Active Directory without rebooting.

Define the FSMO roles and the Global Catalog pseudo-role.

Explain the importance of site definitions and how to optimize the AD DS replication activity.

Explain the functionality of RODCs and the key benefits with RODCs deployed.

Explain the methods of managing Windows Server Core.

Identify the best practices for Group Policy Objects (GPOs) and links.

State the pros and cons of delegating administration of Active Directory.


Module 5: Maintaining Security for Active Directory Servers

This module explains how to deploy proven methods to harden the Active Directory servers.


Lessons

Server Hardening Techniques

Using the MBSA to Discover and Remove Security Holes

Using Fine-Grained Password Policies to Simplify Network Organization

Planning Security Auditing

Enhancing Physical Security


Lab : Maintaining Security for the Active Directory Servers

Manually Implementing AD DS Server Hardening

Assessing Ongoing Security Requirements

Deploying Fine-Grained Password Policies

After completing this module, students will be able to:

Describe the techniques used for manual server hardening.

Use the MBSA to discover and remove security holes.

Explain why you would use fine-grained password policies and how to maintain them.

Explain when to perform security auditing and how to define a proper security baseline.

Explain how to solve physical security problems and the ramifications of lax security policies.


Module 6: Managing Active Directory Service Roles

This module explains how to add non-AD-DS service roles to a Windows Server 2008 network and manage those roles with supplied tools.


Lessons

Using Windows Server 2008 Tools for AD CS

Implementing AD LDS

AD FS Overview

AD RMS Overview


Lab : Managing Active Directory Service Roles

Installing the AD LDS Role

Identifying Ongoing Management Concerns

Using Windows Server 2008 Tools for Managing AD LDS

After completing this module, students will be able to:

Use the Windows Server 2008 tools to operate Certificate Services.

Explain when to use AD LDS.

Identify management concerns with Active Directory Federation Services (AD FS).

Identify management concerns with Active Directory Rights Management Services (AD RMS).