Windows Server 2016 – Federation & Certification Services

Beskrivelse

Vi anbefaler, at man i stedet for dette kursus overvejer disse to kurser:

• SU-560 Windows Server 2019 - Drift og Support

• SU-565 Windows Server 2019 - Upgrade & New Features Kurset giver dig den nødvendige viden og færdigheder inden for nedenstående områder af Windows Server 2016. Du bliver fx i stand til:

• At sikre AD DS og brugerkonti.

• At implementere og håndtere et Certificate Authority (CA)-hierarki med AD CS.

• At udrulle og håndtere certifikater.

• At implementere og administrere AD FS og Active Directory Rights Management Services (AD RMS).

• At implementere synkronisering mellem AD DS og Azure AD.

• At overvåge og troubleshoote problemer relateret til Active Directory samt etablere business continuity for AD DS services.

• At udføre backup og restore.

Indhold

Securing AD DS

• This module describes how to configure domain controller security, account security, password security, and Group Managed Service Accounts (gMSA).

• Lessons

• Securing domain controllers

• Implementing account security

• Audit authentication

• Configuring managed service accounts (MSAs)

• Lab : Securing AD DS

• Implementing security policies for accounts and passwords

• Implementing administrative security policies

• Deploying and configuring a read-only domain controller (RODC)

• Creating and associating a gMSA Deploying and managing AD CS

• This module describes how to implement an AD CS deployment. This includes deploying, administering, and troubleshooting CAs.

• Lessons

• Deploying CAs

• Administering CAs

• Troubleshooting and maintaining CAs

• Lab : Deploying and configuring a two-tier CA hierarchy

• Deploying an offline root CA

• Deploying an enterprise subordinate CA Deploying and managing certificates

• This module describes how to deploy and manage certificates in an AD DS environment. This involves deploying and managing certificate templates, managing certificate revocation and recovery, using certificates in a business environment, and implementing smart cards.

• Lessons

• Deploying and managing certificate templates

• Managing certificate deployment, revocation, and recovery

• Using certificates in a business environment

• Implementing and managing smart cards

• Lab : Deploying certificates

• Configuring certificate templates

• Enrolling and using certificates

• Configuring and implementing key recovery Implementing and administering AD FS

• This module describes AD FS and how to configure AD FS in a single-organization scenario and in a partner-organization scenario.

• Lessons

• Overview of AD FS

• AD FS requirements and planning

• Deploying and configuring AD FS

• Overview of Web Application Proxy

• Lab : Implementing AD FS

• Configuring AD FS prerequisites

• Installing and configuring AD FS

• Configuring AD FS for a single organization

• Configuring AD FS for federated business partners Implementing and administering AD RMS

• This module describes how to implement an AD RMS deployment. The module provides an overview of AD RMS, explains how to deploy and manage an AD RMS infrastructure, and explains how to configure AD RMS content protection.

• Lessons

• Overview of AD RMS

• Deploying and managing an AD RMS infrastructure

• Configuring AD RMS content protection

• Lab : Implementing an AD RMS infrastructure

• Installing and configuring AD RMS

• Configuring AD RMS templates

• Using AD RMS on clients Implementing AD DS synchronization with Azure AD

• This module describes how to plan and configure directory syncing between Microsoft Azure Active Directory (Azure AD) and on-premises AD DS. The modules describes various sync scenarios, such as Azure AD sync, AD FS and Azure AD, and Azure AD Connect.

• Lessons

• Planning and preparing for directory synchronization

• Implementing directory synchronization by using Azure AD Connect

• Managing identities with directory synchronization

• Lab : Configuring directory synchronization

• Preparing for directory synchronization

• Configuring directory synchronization

• Managing Active Directory users and groups Monitoring, managing, and recovering AD DS

• This module describes how to monitor, manage, and maintain AD DS to help achieve high availability of AD DS.

• Lessons

• Monitoring AD DS

• Managing the AD DS database

• Recovering AD DS objects

• Lab : Recovering objects in AD DS

• Backing up and restoring AD DS

• Recovering objects in AD DS