M55344A : Identity with Windows Server

The M55344A: Identity with Windows Server course is designed to impart knowledge and skills related to identity management with Windows Server 2019. It focuses on the critical aspects of installing, maintaining, and managing Active Directory Domain Services (AD DS) and the technologies associated with it. The course is structured around various modules that guide learners through the installation and configuration of domain controllers, management of AD DS objects, advanced infrastructure management, AD DS replication, Group Policy implementation, and securing AD DS.

Additionally, the course covers the deployment and management of Active Directory Certificate Services (AD CS), Active Directory Federation Services (AD FS), Active Directory Rights Management Services (AD RMS), and the synchronization of AD DS with Microsoft Azure AD. It also includes lessons on monitoring, managing, and recovering AD DS.

Learners will benefit from hands-on experience through labs, gaining practical skills to manage and optimize the identity infrastructure in a Windows Server 2019 environment, making them adept at handling real-world challenges associated with identity with Windows Server 2019.

Target Audience:

This course is designed for IT professionals who are responsible for supporting Windows Server environments and want to develop skills in identity management. It is ideal for Active Directory administrators, Windows Server administrators, and IT specialists responsible for identity and access management.

Course Objectives:

By the end of this course, participants will be able to:

• Install and Configure Active Directory Domain Services.

• Implement Group Policy to centralize and manage configuration settings.

• Deploy and Manage AD Certificate Services for secure communications.

• Configure AD Federation Services for single sign-on (SSO) access to external resources.

• Set Up and Manage Web Application Proxy for secure application access.

Prerequisites:

Participants should have:

• Basic knowledge of networking fundamentals.

• An understanding of Windows Server and Active Directory concepts.

• Experience with Windows client operating systems such as Windows 10 or Windows 11.

Course Outline:

Module 1: Installing and Configuring Domain Controllers
Overview:

• Features of AD DS

• Installing domain controllers (DCs)

• Considerations for deploying DCs

Lab: Deploying and administering AD DS

• Deploying AD DS and domain controllers

• Administering AD DS

After Completion:

• Understand AD DS components and roles

• Deploy and manage domain controllers

Module 2: Managing Objects in AD DS
Overview:

• Managing user accounts, groups, and computer objects

• Using Windows PowerShell for AD DS administration

• Implementing and managing Organizational Units (OUs)

Lab:

• Managing and configuring AD DS objects

• Delegating administration with PowerShell

After Completion:

• Manage accounts, groups, and objects in AD DS

• Use PowerShell effectively for administration tasks

Module 3: Advanced AD DS Infrastructure Management
Overview:

• Planning and implementing multiple domains and forests

• Configuring AD DS trusts

Lab: Domain and trust management in AD DS

• Implementing forest trusts and child domains

After Completion:

• Plan advanced AD DS deployments

• Deploy distributed AD DS environments and configure trusts

Module 4: Implementing and Administering AD DS Sites and Replication
Overview:

• Planning and implementing multi-location AD DS deployments

• Configuring and monitoring AD DS replication

Lab:

• Configuring sites and subnets

• Monitoring and troubleshooting replication

After Completion:

• Optimize authentication and replication traffic

• Monitor and troubleshoot AD DS replication

Module 5: Implementing Group Policy
Overview:

• Group Policy (GPO) framework and infrastructure

• Implementing and administering GPOs

• Troubleshooting GPO application

Lab:

• Configuring GPOs and managing their scope

• Troubleshooting GPO application issues

After Completion:

• Implement and manage GPOs effectively

Module 6: Managing User Settings with Group Policy
Overview:

• Configuring administrative templates, Folder Redirection, and scripts

• Group Policy preferences

Lab: Managing user settings with GPOs

• Implementing administrative templates and preferences

After Completion:

• Configure Folder Redirection and other settings via Group Policy

Module 7: Securing Active Directory Domain Services
Overview:

• Securing domain controllers, accounts, and passwords

• Implementing audit authentication and managed service accounts

Lab:

• Implementing security policies and configuring RODCs

• Managing service accounts

After Completion:

• Secure AD DS components and manage accounts securely

Module 8: Deploying and Managing Active Directory Certificate Services (AD CS)
Overview:

• Deploying and managing Certificate Authorities (CAs)

• Troubleshooting and maintaining CAs

Lab: Deploying and configuring a two-tier CA hierarchy

• Deploying offline root and subordinate CAs

After Completion:

• Deploy and manage CAs and troubleshoot certificate issues

Module 9: Deploying and Managing Certificates
Overview:

• Managing certificate templates, revocation, and recovery

• Implementing smart cards in business environments

Lab: Deploying and using certificates

After Completion:

• Deploy and manage certificates in AD DS environments

Module 10: Implementing and Administering Active Directory Federation Services (AD FS)
Overview:

• Planning and deploying AD FS for single and partner organizations

• Configuring Web Application Proxy

Lab: Implementing AD FS

• Configuring AD FS for internal and federated applications

After Completion:

• Deploy and configure AD FS and enable single sign-on (SSO)

Module 11: Implementing and Administering Active Directory Rights Management Services (AD RMS)
Overview:

• Deploying and managing AD RMS infrastructure

• Configuring AD RMS content protection

Lab: Implementing AD RMS

• Configuring templates and using AD RMS on clients

After Completion:

• Deploy and manage AD RMS for content protection

Module 12: Implementing AD DS Synchronization with Microsoft Azure AD
Overview:

• Directory synchronization between Azure AD and on-premises AD DS

Lab: Configuring directory synchronization

• Preparing for and managing Azure AD Connect

After Completion:

• Plan and configure directory synchronization

Module 13: Monitoring, Managing, and Recovering AD DS
Overview:

• Monitoring AD DS and managing the database

• Implementing backup and recovery options

Lab: Recovering objects in AD DS

• Backing up and restoring AD DS

After Completion:

• Monitor and maintain high availability for AD DS