6436 - Designing a Windows Server 2008 Active Directory Infrastructure and Services

At the end of this five-day course, students will learn how to design an Active Directory Infrastructure in Windows Server 2008. Students will learn how to design Active Directory forests, domain infrastructure, sites and replication, administrative structures, group policies, and Public Key Infrastructures. Students will also learn how to design for security, high availability, disaster recovery, and migrations.

After completing this course, students will be able to design an Active Directory infrastructure and services in Windows Server 2008.

Module 1: Designing an Active Directory Forest Infrastructure in Windows Server 2008

This module explains how to design an Active Directory forest based on business and technical requirements.

Lessons

• Determining Active Directory Forest Design Requirements
• Designing an Active Directory Forest
• Designing Active Directory Forest Trusts
• Managing the Active Directory Schema
• Understanding Windows Time Service

Lab : Designing an Active Directory Forest Infrastructure in Windows Server 2008

• Designing an Active Directory Forest
• Designing and Implementing Active Directory Forest Trusts
• Designing and Implementing Active Directory Schema Changes
• Discussions About Exercise 1-3 Design Decisions

After completing this module, students will be able to:

• Determine Active Directory Forest Design Requirements
• Design an Active Directory Forest
• Design Active Directory Forest Trusts
• Manage the Active Directory Schema
• Understand Windows Time Service

Module 2: Designing an Active Directory Domain Infrastructure in Windows Server 2008

This module explains how to design an Active Directory domain infrastructure based on business and technical requirements.

Lessons

• Designing Active Directory Domains
• Designing the Integration of DNS Namespaces
• Designing the Placement of Domain Controllers
• Designing Active Directory Domain Trusts

Lab : Designing an Active Directory Domain Infrastructure in Windows Server 2008

• Designing Active Directory Domains
• Designing and Implementing DNS Namespace Integration
• Designing and Implementing Read-Only Domain Controller Security
• Designing and Implementing Active Directory Domain Trusts
• Discussions About Exercise 1-4 Design Decisions

After completing this module, students will be able to:

• Design Active Directory domains
• Design the integration of DNS namespaces
• Design the placement of domain controllers
• Design Active Directory domain trusts

Module 3: Designing Active Directory Sites and Replication in Windows Server 2008

This module explains how to design Active Directory sites and replication roles.

Lessons

• Designing Active Directory Sites
• Designing AD DS Replication
• Designing the Placement of Domain Controllers in AD DS Sites

Lab : Designing AD DS Sites and Replication in Windows Server 2008

• Designing and Implementing AD DS Sites
• Designing and Implementing AD DS Replication
• Designing the Placement of Domain Controllers
• Discussions About Exercise 1-3 Design Decisions

After completing this module, students will be able to:

• Design Active Directory sites
• Design Active Directory replication
• Design the placement of domain controllers in Active Directory sites

Module 4: Designing Active Directory Domain Administrative Structures in Windows Server 2008

This module explains how to design Active Directory domain administrative structures in Windows Server 2008.

Lessons

• Planning an Active Directory Domain Administrative Structure
• Designing Organizational Unit Structures
• Designing an Active Directory Group Strategy
• Planning for User and Computer Account Management

Lab : Designing AD DS Administrative Structures in Windows Server 2008

• Designing and Implementing Organizational Units
• Designing and Implementing Active Directory Group Strategies
• Automating User Account Management by using Windows PowerShell
• Discussions About Exercise 1-3 Design Decisions

After completing this module, students will be able to:

• Plan an Active Directory domain administrative structure
• Design organizational unit structures
• Design an Active Directory group strategy
• Plan for User and Computer Account management

Module 5: Designing Active Directory Group Policy in Windows Server 2008

This module explains how to design Active Directory Group Policies in Windows Server 2008.

Lessons

• Gathering Information for Group Policy Deployment
• Designing Group Policy Settings
• Designing Group Policy Processing
• Designing Group Policy Management

Lab : Designing Active Directory Administrative Structures in Windows Server 2008

• Designing and Implementing Group Policy Settings
• Designing and Implementing Group Policy Application
• Designing and Implementing Group Policy Management
• Discussions About Exercise 1-3 Design Decisions

After completing this module, students will be able to:

• Gather information for designing the Group Policy deployment.
• Design Group Policy settings
• Design Group Policy processing
• Design Group Policy management

Module 6: Designing AD DS Security in Windows Server 2008

This module explains how to design AD DS security in Windows Server 2008.

Lessons

• Designing Active Directory Security Policies
• Designing Active Directory Domain Controller Security
• Designing Administrator Security and Delegation

Lab : Designing AD DS Security in Windows Server 2008

• Designing and Implementing Domain Security Policies
• Designing and Implementing Domain Controller Security Policies
• Designing and Implementing Administrator Security and Delegation
• Discussions About Exercise 1-3 Design Decisions

After completing this module, students will be able to:

• Design Active Directory security policies
• Design Active Directory domain controller security
• Design administrator security and delegation

Module 7: Designing Active Directory High Availability in Windows Server 2008

This module explains how to design Active Directory high availability and disaster recovery in Windows Server 2008.

Lessons

• Understanding AD DS High Availability
• Designing an AD DS High Availability Strategy

Lab : Designing AD DS Availability in Windows Server 2008

• Designing a High Availability Plan for AD DS
• Discussions About Exercise 1 Design Decisions

After completing this module, students will be able to:

• Understand AD DS high availability
• Design an AD DS high availability strategy

Module 8: Designing AD DS Disaster Recovery in Windows Server 2008

This module explains how to design AD DS disaster recovery in Windows Server 2008.

Lessons

• Designing an Active Directory Database Maintenance Strategy
• Designing an Active Directory Backup and Recovery Strategy
• Designing an AD DS Monitoring Strategy

Lab : Designing Active Directory Disaster Recovery in Windows Server 2008

• Designing and Implementing a Domain Controller Maintenance Plan
• Designing and Implementing a Domain Controller Monitoring Plan
• Discussions About Exercise 1-2 Design Decisions

After completing this module, students will be able to:

• Design an Active Directory database maintenance strategy
• Design an Active Directory backup and recovery strategy
• Design an Active Directory monitoring strategy

Module 9: Designing Public Key Infrastructure in Windows Server 2008

This module explains how to design Public Key Infrastructure in Windows Server 2008.

Lessons

• Overview of PKI and Active Directory Certificate Services
• Designing a Certification Authority Hierarchy
• Designing Certificate Template
• Designing Certificate Distribution and Revocation

Lab : Designing Public Key Infrastructure in Windows Server 2008

• Designing and Implementing a CA Hierarchy
• Designing and Implementing AD CS Certificate Templates
• Designing and Implementing Certificate Enrollment and Revocation
• Discussions About Exercises 1-3 Design Decisions

After completing this module, students will be able to:

• Describe PKI and Active Directory Certificate Services
• Design a Certification Authority hierarchy
• Design certificate template
• Design certificate distribution and revocation

Module 10: Designing an AD RMS Infrastructure in Windows Server 2008

This module explains how to design AD RMS infrastructure in Windows Server 2008.

Lessons

• Gathering Information for an Active Directory Rights Management Services (AD RMS) Design
• Designing AD RMS Clusters and Access
• Designing AD RMS Backup and Recovery

Lab : Designing an AD RMS Infrastructure in Windows Server 2008

• Designing AD RMS Clusters and Access
• Designing AD RMS Backup and Recovery
• Discussions About Exercises 1-2 Design Decisions

After completing this module, students will be able to:

• Gather information for an AD RMS design
• Design AD RMS clusters and access
• Design AD RMS backup and recovery

Module 11: Designing an Active Directory Federation Services Implementation in Windows Server 2008

This module explains how to design an Active Directory Federation Services (AD FS) implementation.

Lessons

• Overview of an Active Directory Federation Services Design
• Designing a Business-to-Business Federation
• Designing Active Directory Federation Services Claims and Applications

Lab : Designing an Active Directory Federation Services Implementation in Windows Server 2008

• Designing Active Directory Federation Services Access to Applications in a Perimeter Network
• Designing Active Directory Federation Services Access to Partner Applications
• Designing Active Directory Federation Services for Partner Access to Applications in a Perimeter Network
• Discussions About Exercise1-3 Design Decisions

After completing this module, students will be able to:

• Describe an AD FS design.
• Design a business-to-business federation.
• Design AD FS claims and applications.

Module 12: Designing an AD LDS Implementation

This module explains how to design an AD LDS implementation.

Lessons

• AD LDS Deployment Scenarios
• Overview of an AD LDS Implementation Design
• Designing AD LDS Schema and Replication
• Integrating AD LDS with AD DS

Lab : Designing an AD LDS Implementation

• Designing and Configuring AD LDS Replication for Internal Applications
• Designing and Configuring AD LDS Replication for External Applications
• Designing Highly Available LDAP Services for Multiple Applications
• Discussions About Exercises 1-3 Design Decisions

After completing this module, students will be able to:

• Describe the AD LDS deployment scenarios
• Describe the AD LDS implementation design
• Design AD LDS schema and replication
• Integrate AD LDS with AD DS

Module 13: Designing Active Directory Migrations in Windows Server 2008

This module explains how to design Active Directory migrations in Windows Server 2008.

Lessons

• Choosing an Active Directory Migration Strategy
• Designing a Domain Upgrade Strategy
• Designing a Domain Restructure Strategy

Lab : Designing Active Directory Migrations in Windows Server 2008

• Designing an Active Directory Migration Strategy
• Designing an Active Directory Migration Implementation Plan
• Discussions About Exercise 1-2 Design Decisions

• Choose an Active Directory migration strategy
• Design a domain upgrade strategy
• Design a domain restructure strategy

This course is intended for Windows Server 2008 IT professionals who want to become Windows Server 2008 enterprise administrators and move into the role of designing Active Directory Domain Services (AD DS) environments.

Before attending this course, students must have:

• Completion of Microsoft Certified Technology Specialist (MCTS) Windows Server 2008 curriculum or equivalent knowledge and skills.
• Knowledge of Windows Vista Terminal Services or Deployment Terminal Services