MCITP: Enterprise Administrator on Windows Server 2008

Courses: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services (5 Days)and Configuring and Troubleshooting Identity and Access Solutions with Windows Server 2008 Active Directory (3 Days)

Course Outline
Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services (5 Days) Introducing Active Directory Domain Services

This module provides an overview of Active Directory components and concepts and steps through the basics of installing and configuring an Active Directory domain

Administering Active Directory Securely and Efficiently

This module explains how to work securely and efficiently in Active Directory using Administration Tools and some best practices as well as use of Windows PowerShell.

Managing Users and Service Accounts

This module explains how to create, manage and support user and Managed Service Accounts in Active Directory.

Managing Groups

This module explains how to create, modify, delete, and support group objects in Active Directory

Managing Computer Accounts

This module explains how to create and configure computer accounts.

Implementing a Group Policy Infrastructure

This module explains what Group Policy is, how it works, and how best to implement Group Policy in your organization.

Managing User Desktop with Group Policy

This module explains how to manage and configure desktop environments using Administrative templates and Group Policy Preferences as well as how to deploy software using Group Policy

Managing Enterprise Security and Configuration with Group Policy Settings

This module explains how to use Group Policy to manage a variety of components and features of Windows. It will also explain how to audit files and folders and how to restrict access to applications using application control policies.

Securing Administration

This module explains how to administer Active Directory Domain Services Securely.

Improving the Security of Authentication in an AD DS Domain

This module explains the domain-side components of authentication, including the policies that specify password requirements and the auditing of authentication-related activities.

Configuring Domain Name System

This module explains how to implement DNS to support name resolution both within your AD DS domain and outside your domain and your intranet.

Administering AD DS Domain Controllers

This module explains how to add Windows Server 2008 domain controllers to a forest or domain, how to prepare a Microsoft Windows Server 2003 forest or domain for its first Windows Server 2008 DC, how to manage the roles performed by DCs, and how to migrate the replication of SYSVOL from the File Replication Service (FRS) used in previous versions of Windows to the Distributed File System Replication (DFS-R) mechanism that provides more robust and manageable replication.

Managing Sites and Active Directory Replication

This module explains how to create a distributed directory service that supports domain controllers in portions of your network that are separated by expensive, slow, or unreliable links and how to configure replication amongst those servers.

Directory Service Continuity

This module explains about the technologies and tools that are available to help ensure the health and longevity of the directory service. You will explore tools that help you monitor performance in real time, and you will learn to log performance over time so that you can keep an eye on performance trends in order to spot potential problems.

Managing Multiple Domains and Forests

This module explains how to raise the domain and forest functionality levels within your environment, how to design the optimal AD DS infrastructure for your enterprise, how to migrate objects between domains and forests, and how to enable authentication and resources access across multiple domains and forests.

Course Outline
Configuring and Troubleshooting Identity and Access Solutions with Windows Server 2008 Active Directory Exploring Identity and Access Solutions

This module introduces Identity and Access Management (IDA Management) solutions. You will learn the fundamental IDA components and Windows Server 2008 and Windows Server 2008 R2 IDA technologies. This module also provides an overview of Microsoft Forefront technologies that further enhance IDA solutions.

Deploying and Configuring Active Directory Certificate Services

This module explains the concepts of public key infrastructure (PKI) and certification authority (CA). You will learn how to deploy a CA hierarchy and install AD CS. This module also describes how to configure AD CS and how to resolve common AD CS issues.

Deploying and Configuring Certificates

This module describes the deployment of certificates by using AD CS. In addition, the module elaborates on managing enrollment to deploy certificates, certificate revocation, and configuration of certificate template and certificate recovery

Deploying and Configuring Active Directory Lightweight Directory Services

This module explains the concept of AD LDS. You will learn how to install AD LDS, configure AD LDS instances and partitions, and configure AD LDS replication. This module also describes how to resolve common AD LDS issues..

Deploying and Configuring Active Directory Federation Services

This module presents the concept of AD FS 2.0 and its deployment scenarios. You will learn how to deploy AD FS 2.0 and implement AD FS claims. This module also describes how to resolve common AD FS issues.

Deploying and Configuring Active Directory Rights Management Services

This module explains the concept of AD RMS. You will learn how to install and configure AD RMS server components, administer AD RMS rights policy templates, and implement AD RMS trust policies. This module also describes how to resolve common AD RMS issues.

Maintaining Windows Server 2008 Active Directory Identity and Access Solutions

This module explains the maintenance of AD CS, AD LDS, AD FS 2.0, and AD RMS.

Course: Configuring and Troubleshooting a Windows Server 2008 Network Infrastructure

Course Outline
Planning and Configuring IPv4This module explains how to deploy and configure networking services in your organization.

This module explains how to implement an IPv4 addressing scheme, determine which name services to deploy, and troubleshoot network-related problems.

Configuring and Troubleshooting DHCP

This module introduces you to Dynamic Host Configuration Protocol (DHCP), which plays an important role in the Windows Server 2008 R2 infrastructure. It is the primary means of distributing important network configuration information to network clients, and it provides configuration information to other network-enabled services, including Windows Deployment Services (WDS) and Network Access Protection (NAP). To support and troubleshoot a Windows Server-based network infrastructure, it is important that you understand how to deploy, configure, and troubleshoot the DHCP Server Role.

Configuring and Troubleshooting DNS

This module introduces you to Domain Name System (DNS), which is the foundation name service in Windows Server 2008 R2. It is vital that you understand how to deploy, configure, manage, and troubleshoot this critical service.

Configuring and Troubleshooting IPv6 TCP/IP

This module introduces you to IPv6, a technology that will help ensure that the Internet can support a growing user base and the increasingly large number of IP-enabled devices. The current Internet Protocol Version 4 (IPv4) has served as the underlying Internet protocol for almost thirty years. Its robustness, scalability, and limited feature set is now challenged by the growing need for new IP addresses, due in large part to the rapid growth of new network-aware devices.

Configuring and Troubleshooting Routing and Remote Access

To support your organization’s distributed workforce, you must become familiar with technologies that enable remote users to connect to your organization’s network infrastructure. These technologies include virtual private networks (VPNs) and DirectAccess. It is important that you understand how to configure and secure your remote access clients by using network policies. This module explores these remote access technologies.

Installing, Configuring, and Troubleshooting the Network Policy Server Role Service

NPS provides support for the Remote Authentication Dial-In User Service (RADIUS) protocol, and can be configured as a RADIUS server or proxy. Additionally, NPS provides functionality that is essential for the implementation of Network Access Protection (NAP). This module explains how to install, configure, and troubleshoot NPS.

Implementing Network Access Protection

In this module, you will learn about Network Access Protection (NAP). NAP enables you to create customized health-requirement policies to validate computer health before allowing access or communication. NAP also automatically updates compliant computers to ensure on-going compliance and can limit the access of noncompliant computers to a restricted network until they become compliant.

Increasing Security for Windows Servers

Security is an essential consideration for networking with Windows Server 2008. In this module, you will learn how to implement various methods to increase security. Windows Firewall with Advanced Security is one of the features in Windows Server 2008 that is used to increase security. You can also use Windows Server Update Services to ensure that approved security updates are applied to servers in a timely way.

Increasing Security for Network Communication

Internet Protocol security (IPsec) is a framework of open standards for protecting communications over IP networks through cryptographic security services. IPsec supports network-level peer authentication, data-origin authentication, data integrity, data confidentiality (encryption), and replay protection. The Microsoft IPsec implementation is based on standards that the Internet Engineering Task Force (IETF) IPsec working group developed. In this module, you will learn how to implement, configure, and troubleshoot IPsec.

Configuring and Troubleshooting Network File and Print Services

File and print services are some of the most commonly implemented network services for end users. Unlike infrastructure services like DNS, file and print services are highly visible to the end users. In this module, you will learn how to configure and troubleshoot file and print services to provide high quality service to end users. In addition, you will see how both EFS and BitLocker can be used to increase the security of files that are located in file shares.

Optimizing Data Access for Branch Offices

Many organizations maintain a large number of file resources that need to be organized and made highly available to users. These file resources are often stored on servers and provided to users who are distributed geographically in widespread locations. In this module, you will learn how to provide efficient access to network resources with minimal traffic over a WAN link.

Controlling and Monitoring Network Storage

Network storage for users is a finite resource that must be managed appropriately to ensure that it remains available for all users. If network storage is not monitored and managed, it can become filled with irrelevant data, such as personal music or movies. Irrelevant data increases network storage costs and in some cases can prevent useful data from placement on the network storage. In this module, you will learn how to monitor and manage network storage.

Recovering Network Data and Servers

This module explains how to recover network data and servers. There are a variety of scenarios where a network data or a server that provides networks services can be lost. Volume shadow copies can be used to restore previous versions of files when a file is accidentally deleted or modified on a computer that is running Windows Server 2008. Windows Server Backup can be used to back up and restore data files or an entire server.

Monitoring Windows Server 2008 Network Infrastructure Servers

When a system failure or an event that affects system performance occurs, you need to be able to repair the problem or resolve the issue quickly and efficiently. With so many variables and possibilities in the modern network environment, the ability to determine the root cause quickly often depends on having an effective performance monitoring methodology and toolset. In this module, you will learn to use performance-monitoring tools to identify components that require additional tuning and troubleshooting. By identifying components that require additional tuning, you can improve the efficiency of your servers.

Courses: Deploying Windows Server 2008 and Configuring and Troubleshooting Windows Server 2008 Applications Infrastructure

Course Outline
Deploying Windows Server 2008

Installing and Configuring Microsoft Windows Server 2008 R2

This module describes the installation options and requirements for Windows Server 2008 R2.Lessons

Implementing Deployment Technologies

This module describes the various deployment technologies available for use with Windows Server 2008 R2 and Windows 7

Using Windows Deployment Services

This module explains how to create and deploy custom system images by using Windows Deployment Services and images

Implementing the Microsoft Deployment Toolkit

This module explains how to deploy and create custom system images for common server configurations by using the Microsoft Deployment Toolkit.

Migrating Active Directory Directory Service

This module explains how to upgrade and migrate Active Directory directory service from Windows 2000 Server or Windows Server 2003 to Windows Server 2008 R2.

Migrating File, Print, and Web Services

This module provides guidance for upgrading and migrating file and print servers from Microsoft Windows 2000 Server or Windows Server 2003 to Windows Server 2008 R2. This module also includes guidance for upgrading and migrating application and Web servers from Windows Server 2003 to Windows Server 2008 R2.

Deploying Branch Office and Remote Access Services

This module provides guidance for upgrading and migrating branch offices and Remote Access Services to Windows Server 2008 R2.

Migrating Workloads to Microsoft Virtual Machines

This module provides guidance for migrating existing workloads to a virtual machine environment using the Hyper-V Server 2008 R2 Hyper-V role.

Course Content
Configuring and Troubleshooting Windows Server 2008 Applications Infrastructure

Configuring Storage for Windows Server 2008 Applications

This module covers the storage options most commonly associated with Windows Server 2008 and Windows Server 2008 R2 instances today. It introduces storage architectures, mediums, and protocols, guides students through the configuration steps for connecting iSCSI storage, and introduces the concept of VHDs as storage and boot devices.

Configuring High Availability for Windows Server 2008 Applications

This module covers Windows Server 2008 and Windows Server 2008 R2’s built-in platforms that facility high availability for business applications. These general-purpose platforms include Network Load Balancing and Windows Failover Clustering in both single-site and multiple-site configurations.

Configuring Remote Desktop Services

This module covers the introductory steps required to bring a single Remote Desktop Services Host server online and prepare it for remote application delivery to users. Students in this module will complete all aspects of the single-server configuration while preparing the environment for adding potential future servers.

RDS in the Multiple-Server Configuration

This module covers the extra activities and knowledge required to expand a single-RDSH server environment to one with multiple RDSH servers in a farm configuration.

Securely Delivering RDS Applications to the Internet

This module covers the additional activities that are necessary to build and secure a Remote Desktop Gateway server for the purposes of protecting RDS communication as it passes through untrusted networks such as the Internet

IIS Web Applications

This module covers the primary use of IIS as a Web application platform. Students will learn to set up and maintain a Web site and application configuration based upon business and developer requirements. Although ASP.NET Web sites are commonly maintained by developers, IT professionals are typically called upon to configure the platform and assist with maintenance. This module will cover IIS 7.5 and IIS 7.0 and outline distinctions between them but will focus on IIS 7.5 as in Windows Server 2008 R2

IIS FTP and SMTP Services

This module covers IIS' other major feature areas such as file transfer and email functionality. These features are commonly used to support Web sites, and this module will discuss how to properly configure these features in accordance with best practices and based upon business requirements.

IIS Server and SSL Management

This module focuses on IIS' security-related features, including SSL, logging, delegated permissions, remote administration, and other features. Students will practice a variety of scenarios that reflect common real-world business requirements.

Microsoft SharePoint Foundation

This module covers the installation and configuration of this evolution of Windows SharePoint Services. Students will learn to set up and configure a basic document-sharing site that meets many common organizational and project requirements. It will focus on SharePoint Foundation 2010 as implemented in Windows Server 2008 and Windows Server 2008 R2

Windows Streaming Media Services

This module looks at the Media Services features of the Windows Server 2008 and Windows Server 2008 R2 platform, and introduces students to key concepts such as Real-Time Streaming Protocol, authentication, authorization, and more. Students will learn to install and configure Media Services to support use of the system features.

Course: Designing Windows Server 2008 Network and Applications Infrastructure

Course Outline
Designing IP Addressing and Configuration

This module describes how to design a strategy for allocating IP addresses to workstations and servers in Windows Server 2008. The module also describes how to design DHCP implementation and the configuration options that are available.

Designing Name Resolution

This module explains how to design an appropriate name resolution strategy that incorporates DNS. The module also covers DNS namespaces, DNS zone implementation, replication, and delegation.

Designing Advanced Name Resolution

This module explains how to design an advanced name resolution strategy by optimizing DNS queries, designing DNS for high availability, and designing a NetBios name resolution plan.

Designing Network Access

This module explains how to design a network access solution. The module also describes how to secure network access, design a strategy for RADIUS authentication with NPS, design wireless access, and Internet connectivity.

Designing Network Security

This module explains how to design a network security plan. The module describes the defense-in-depth model for network security and explains how to implement Windows Firewall and NAP policies.

Designing Application Deployment

This explains how to design application deployment. This includes deployment of local applications, virtual applications, and virtual desktop.

Designing Remote Desktop Services

This module explains how to design remote desktop services. This includes designing RemoteApp, remote connectivity for RDS, and planning a monitoring and management strategy for RDS.

Designing IIS for Web-Based Applications

This module explains how to design IIS for web-based applications. The module describes how to design a plan to optimize IIS performance, security, and maintenance.

Designing File and Print Services

The module explains how to design file and print services

Designing File Replication and Caching

This module explains how to design a file replication and caching strategy. The module describes how to use DFS to implement file replication and caching.

Designing for Business Continuity

This module explains how to design for business continuity by planning for disaster recovery. The module also describes how to design network load balancing, failover clustering, and geographically dispersed clusters.

Designing an Update Deployment Strategy

This module explains how to design an update deployment strategy. This includes designing a WSUS topology and an update management strategy.

Designing a Virtualization Infrastructure

This module explains how to design a virtualization infrastructure.

Course 6436B: Designing Windows Server 2008 Active Directory Infrastructure and Services

Course Outline
Overview of Active Directory Design

The critical functionality that the Active Directory services provide means that you should design your Active Directory infrastructure to meet your organization’s unique requirements. This module provides an overview of the information that you must gather to prepare for an Active Directory deployment, and provides an overview of the steps that you would use as you create an Active Directory design. It covers the basic principles and considerations you need to take on board in an Active Directory design with Windows Server 2008 and Windows Server 2008 environments.

Designing an Active Directory Domain Services Forest Infrastructure

In this module, you will learn about forest design concepts as well as about forest trusts, the AD DS schema, and the Windows Time Service in Windows Server 2008 and Windows Server 2008 R2 environments.

Designing an AD DS Domain Infrastructure

In this module, you will learn about designing AD DS domains, DNS, and domain trusts in Windows Server 2008 and Windows Server 2008 R2.

Designing AD DS Sites and Replication

In this module, you will learn how to design a distributed directory service that supports domain controllers that are in portions of your network that are separated by expensive, slow, or unreliable links.

Designing AD DS Domain Controllers

This module explains how to design an AD DS domain controller deployment.

Designing Active Directory Domain Services Domain Administration

You can use an AD DS domain to simplify the administration of your IT resources by creating a manageable structure that underlies a network infrastructure based on the Windows operating system. To design the effective administration of an AD DS domain, you need to first assess the state of the configuration and administration of the AD DS environment. To determine the best design for your AD DS domain administration, first collect information about how your organization needs to administer the various resources in your AD DS domain environment. This information provides the basis on which you can design and build the AD DS domain structures that will enable the most effective AD DS domain administrative methods for your organization, such as organizational units, AD DS groups, and user and computer account objects.

Designing Active Directory Domain Services Group Policy

The AD DS Group Policy environment is the principal vehicle for configuration management in Windows Server 2008. An effective Group Policy design means a more standardized and easy-to-manage environment in which to perform all other administrative tasks.

Designing AD DS Security

One of the primary reasons to deploy a directory service like AD DS is to provide security for the organization’s network. Managing secure access to network resources is critical to ensure that only properly authorized users can access the data and that only authorized administrators can make changes to the environment. By ensuring that the AD DS deployment is secure, you can help ensure system stability and reliability, and you can minimize the number of successful attempts to jeopardize system security and integrity. This module provides the skills and knowledge necessary to design AD DS security in Windows Server 2008 and Windows Server 2008 R2 environments

Designing a Public Key Infrastructure

This module explains how to design a public key infrastructure (PKI) deployment by using Active Directory Certificate Services (AD CS) in Windows Server 2008 and Windows Server 2008 R2.

Designing an AD RMS Infrastructure

This module explains how to design and implement a rights protection infrastructure by using Active Directory Rights Management Services (AD RMS).

Designing an AD LDS Infrastructure

This module explains how to design and implement an Active Directory Lightweight Directory Services (AD LDS) deployment in Windows Server 2008 and Windows Server 2008 R2

Designing an Active Directory Federation Services Infrastructure

This module explains how to design an implementation of Active Directory Federation Services (AD FS) in Windows Server 2008 and Windows Server 2008 R2 environments.

Designing AD DS Transitions

This module explains how to design and implement AD DS upgrades and migrations in Windows Server 2008 and Windows Server 2008 R2 environments.

Designing AD DS Transitions

This module explains how to design and implement AD DS upgrades and migrations in Windows Server 2008 and Windows Server 2008 R2 environments.