Installare e configurare i controller di dominio.
Gestire gli oggetti di dominio Active Directory utilizzando siastrumenti grafici che di Windows PowerShell.
Implementare Active Directory in ambienti complessi.
Implementare siti di dominio Active Directory e configurarne e gestirne la replica.
Implementare e gestire oggetti Criteri di gruppo (GPO).
Gestire le impostazioni utente mediante GPO.
Mettere in sicurezza un dominio Active Directory e i relativi account utente.
Implementare e gestire una gerarchia di autorità di certificazione (CA) con Active Directory.
Implementare e gestire i certificati.
Implementare e amministrare AD FS.
Implementare e amministrare i Directory Rights Management Services (RMS) attivi.
Implementare la sincronizzazione tra Active Directory e Azure AD.
Monitorare, risolvere i problemi e stabilire la continuità operativa per i servizi di dominio Active Directory.
Esposizione e l'esperienza con alcuni concetti AD e tecnologie DS in Windows Server 2012 o Windows Server 2016.
Esperienza lavorativa e configurazione di Windows Server 2012 o Windows Server 2016
Esperienza e comprensione delle tecnologie di rete fondamentali come l'indirizzamento IP, la risoluzione dei nomi e Dynamic Host Configuration Protocol (DHCP).
Esperienza lavorativa con e comprensione di Microsoft Hyper-V e dei concetti di base della virtualizzazione dei server.
Consapevolezza delle buone pratiche di sicurezza di base.
Esperienza lavorativa con i sistemi operativi client Windows, come Windows 7, Windows 8, Windows 8.1 o Windows 10.
Esperienza di base con l'interfaccia della riga di comando di Windows PowerShell.
Module 1: Installing and configuring domain controllers
Overview of AD DS
Overview of AD DS domain controllers
Deploying a domain controller
Lab : Deploying and administering AD DS
Deploying AD DS
Deploying domain controllers by performing domain controller cloning
Administering AD DS
After completing this module, students will be able to:
Describe AD DS and its main components.
Describe the purpose of domain controllers and their roles.
Describe the considerations for deploying domain controllers.
Module 2: Managing objects in AD DS
Managing user accounts
Managing groups in AD DS
Managing computer objects in AD DS
Using Windows PowerShell for AD DS administration
Implementing and managing OUs
Lab : Managing AD DS objects
Creating and managing groups in AD DS
Creating and configuring user accounts in AD DS
Managing computer objects in AD DS
Lab : Administering AD DS
Delegate administration for OUs
Creating and modifying AD DS objects with Windows PowerShell
After completing this module, students will be able to:
Manage user accounts in AD DS.
Manage groups in AD DS.
Manage computer objects in AD DS.
Use Windows PowerShell for AD DS administration.
Implement and manage OUs.
Administer AD DS.
Module 3: Advanced AD DS infrastructure management
Overview of advanced AD DS deployments
Deploying a distributed AD DS environment
Configuring AD DS trusts
Lab : Domain and trust management in AD DS
Implementing forest trusts
Implementing child domains in AD DS
After completing this module, students will be able to:
Describe the components of an advanced AD DS deployment.
Explain how to deploy a distributed AD DS environment.
Explain how to deploy a distributed AD DS environment.
Explain how to configure AD DS trusts.
Explain how to configure AD DS trusts.
Explain how to configure AD DS trusts
Explain how to configure AD DS trusts
Module 4: Implementing and administering AD DS sites and replication
Overview of AD DS replication
Configuring AD DS sites
Configuring and monitoring AD DS replication
Lab : Implementing AD DS sites and replication
Modifying the default site
Creating additional sites and subnets
Configuring AD DS replication
Monitoring and troubleshooting AD DS replication
After completing this module, students will be able to:
Describe how AD DS replication works.
Describe how AD DS replication works.
Configure AD DS sites to help optimize authentication and replication traffic.
Configure AD DS sites to help optimize authentication and replication traffic.
Configure and monitor AD DS replication.
Configure and monitor AD DS replication.
Module 5: Implementing Group Policy
Introducing Group Policy
Implementing and administering GPOs
Group Policy scope and Group Policy processing
Troubleshooting the application of GPOs
Lab : Implementing a Group Policy infrastructure
Creating and configuring GPOs
Managing GPO scope
Lab : Troubleshooting Group Policy infrastructure
Verify GPO application
Troubleshooting GPOs
After completing this module, students will be able to:
Explain what Group Policy is.
Implement and administer GPOs.
Describe Group Policy scope and Group Policy processing.
Troubleshoot GPO application.
Module 6: Managing user settings with Group Policy
Implementing administrative templates
Configuring Folder Redirection, Software Installation, and Scripts
Configuring Group Policy preferences
Lab : Managing user settings with GPOs
Using administrative templates to manage user settings
Implement settings by using Group Policy preferences
Configuring Folder Redirection
Planning Group Policy (optional)
After completing this module, students will be able to:
Implement administrative templates.
Configure Folder Redirection, software installation, and scripts.
Configure Group Policy preferences.
Module 7: Securing Active Directory Domain Services
Securing domain controllers
Implementing account security
Implementing audit authentication
Configuring managed service accounts
Lab : Securing AD DS
Implementing security policies for accounts, passwords, and administrative groups
Deploying and configuring an RODC
Creating and associating a group MSA
After completing this module, students will be able to:
Secure domain controllers.
Implement account security.
Implement audit authentication.
Configure managed service accounts (MSAs).
Module 8: Deploying and managing AD CS
Deploying CAs
Administering CAs
Troubleshooting and maintaining CAs
Lab : Deploying and configuring a two-tier CA hierarchy
Deploying an offline root CA
Deploying an enterprise subordinate CA
After completing this module, students will be able to:
Deploy CAs.
Administer CAs.
Troubleshoot and maintain CAs.
Module 9: Deploying and managing certificates
Deploying and managing certificate templates
Managing certificate deployment, revocation, and recovery
Using certificates in a business environment
Implementing and managing smart cards
Lab : Deploying and using certificates
Configuring certificate templates
Enrolling and using certificates
Configuring and implementing key recovery
After completing this module, students will be able to:
Deploy and manage certificate templates.
Manage certificates deployment, revocation, and recovery.
Use certificates in a business environment.
Implement and manage smart cards
Module 10: Implementing and administering AD FS
Overview of AD FS
AD FS requirements and planning
Deploying and configuring AD FS
Overview of Web Application Proxy
Lab : Implementing AD FS
Configuring AD FS prerequisites
Installing and configuring AD FS
Configuring an internal application for AD
Configuring AD FS for federated business partners
After completing this module, students will be able to:
Describe AD FS.
Explain how to deploy AD FS.
Explain how to implement AD FS for a single organization.
Explain how to extend AD FS to external clients.
Implement single sign-on (SSO) to support online services.
Module 11: Implementing and administering AD RMS
Overview of AD RMS
Deploying and managing an AD RMS infrastructure
Configuring AD RMS content protection
Lab : Implementing an AD RMS infrastructure
Installing and configuring AD RMS
Configuring AD RMS templates
Using AD RMS on clients
After completing this module, students will be able to:
Describe AD RMS.
Describe usage scenarios for AD RMS.
Describe the AD RMS components.
Module 12: Implementing AD DS synchronization with Microsoft Azure AD
Planning and preparing for directory synchronization
Implementing directory synchronization by using Azure AD Connect
Managing identities with directory synchronization
Lab : Configuring directory synchronization
Preparing for directory synchronization
Configuring directory synchronization
Managing Active Directory users and groups
After completing this module, students will be able to:
Plan and prepare for directory synchronization.
Implement directory synchronization by using Microsoft Azure Active Directory Connect (Azure AD Connect).
Manage identities with directory synchronization.
Module 13: Monitoring, managing, and recovering AD DS
Monitoring AD DS
Managing the Active Directory database
Active Directory backup and recovery options for AD DS and other identity and access solutions
Lab : Recovering objects in AD DS
Backing up and restoring AD DS
Recovering objects in AD DS
After completing this module, students will be able to:
Monitor AD DS.
Manage the Active Directory database.
Describe the backup and recovery options for AD DS and other identity access solutions.