Windows Server 2008 Active Directory Training - Course Outline

Class 1
Introduction to the Course

Learn what's in the course, who you're instructor is, and what you can expect in the course.

Key Topics:
* About the Instructor
* What's Covered in this Course
* The Globomantics Scenario

Class 2
What is Active Directory?

Get a foundation of what Active Directory is, what it can do, and why you want to use it in your network to make your life easier!

Key Topics:
* What is Active Directory?
* What is a Domain?
* What is a Server Role?
* What is DNS?

Class 3
Installing Server 2008 and Active Directory - The First Two Domain Controllers

Learn how to install Server 2008 from "bare metal", create a domain using Server 2008 by installing Active Directory Domain Services, and set up a second Domain Controller for redundancy.

Key Topics:
* Building the Brain of the Globomantics Network
* Hardware Requirements
* Server 2008 Editions
* Bare Metal Installation Process
* Windows Server 2008 Installation
* Initial Configuration Task List
* Installation of ADDS
* Administrator Passwords
* Renaming Default-First-Site-Name
* Setting Up a Second Domain Controller
* Replication Testing

Class 4
Setting up Remote Desktop on Your Personal Vista Client

Real administrators manage a network sitting down. It's so much easier to play World of Warcraft and Halo that way. Learn how to set up Remote Desktop shortcuts on a Vista client so you don't have to pause your game to trek into the server room every time somebody needs a password reset.

Key Topics:
* The DC’s Are Up and Running… Now What?
* Renaming Vista Client Computer Name
* Joining Vista Client to Globomantics Domain
* Troubleshooting Connection Problem
* Troubleshooting RPC Server Error
* Why Remote Desktop is Just Great
* Setting Up Remote Desktop Shortcut

Class 5
Creating OU's, Users, Computers and Groups in Active Directory

Create Organizational Units to keep your Active Directory organized, making your IT life easier in the long term. Learn the secrets of creating a lot of users quickly and easily using scripts. *Bonus* Coach's Active Directory Toolbox File: Coach's Mass User Creation Script Builder!!!! Plus, a simple batch script to create single users all day long!

Key Topics:
The DC’s Are Up and Running – Now What? – Part 2
* What’s an OU Again?
* Creating an Organizational Unit
* Deleting on OU
* Creating User Accounts
* Introducing DSADD
* Creating Users Using a Script
* Creating Users Using Excel Template
* Creating Computer Accounts
* Difference Between OUs and Groups
* Creating Groups in AD
* Adding Users and Computers into Groups

Class 6
Setting up Share Folders and Printers, Mapping Drives, and Creating
Permissions

Create Shared Folders so users can easily get to stuff on your network. Share Network printers. Learn the arcane secrets of NTFS and Share level Permissions, and Delegation Security Filtering! Become a wizard at giving only the people you want to have access to stuff! Rule your IT Kingdom with an iron fist and fear or with a soft heart and love--you decide!

Key Topics:
* Setting Up a Member Server
* File Server Partitions
* Creating Shared Folders
* Share Level Permissions
* Using Share and Storage Management MMC
* Using Windows Explorer to Create Shared Folders
* Testing Shared Folders
* Groups and Permissions: Good Idea that Could Go Very Wrong
* Making a Group a Member of Another Group
* Share Level vs. NTFS Permissions
* What is Inheritance
* Creating NTFS Permissions
* Checking NTFS Permissions
* Rules for Share Level and NTFS Permissions
* Moving Folders
* Mapping a Shared Drive
* Checking Group Memberships
* Creating and Sharing Printers
* Adding a Printer
* What Globomantics.com Looks Like Now

Class 7
Group Policy Objects

Learn how to lock down your desktop machines with Group Policy. Keep users from screwing stuff up, installing World of Warcraft, and from stealing data by using USB drives! The power is yours!

Key Topics:
Group Policy Objects
* Group Policy Management Console
* Default Domain Policy
* Local Vs. Domain Policy
* Configuring Domain Level Policy
* Linking GPOs
* GPO’s Processing Order
* Setting Up Coach’s Favorite Four Policies
* Desktop Wallpaper Policy
* Preventing Users from Installing Software
* Removable Storage Policy
* Testing Our Policies

Class 8
Security Filtering and Setting Up OUs for Better Group Policy
Implementation

When Group Policy Attacks! Does your boss insist on having absolute control over a personal laptop? Then buy our product and learn how to allow your boss absolute freedom over his/her personal machine so you can continually fix it, and keep your job forever! (Or until something higher-paying comes along!)

Key Topics:
* A Little Reorganization: Option 1, 2 or 3?
* Using a Combination of Techniques
* Reorganizing Users & Computers
* Running “gpupdate” Command
* Checking DCs Replication
* Testing Our Reorganized Active Directory

Class 9
Computer Policies and Preferences

Learn the magic of Loopback processing, what "hoteling" means, and how you can lockdown machines no matter who's using them!

Key Topics:
Quick Review of Our Network
* Policy Settings to Computer Lockdown
* Reorganizing Computer OUs
* Creating Computer GPOs
* Loopback Processing
* Group Policy Intervals
* Testing Computer GPOs
* Mapping Network Drives with Preferences
* Testing Preferences – Mapped Drives

Class 10
Using GPOs to Install Software

Do you want to be able to sit at your desk all day long and install software by just clicking your mouse? Then pick up this course and learn how to install, upgrade, and uninstall software and not even have to get your butt out of your nice cushy office chair!

Key Topics:
* You are Here: a Quick Look at What We’ve Built
* Options for Installing Software
* What You Need for a Software Installing GPO
* Steps for Creating GPO for Software Installation
* Creating a Shared Folder for Foxit.msi Package
* Creating and Linking a New GPO to the NYComputers OU
* Testing Our New GPO Software Installation
* Default Domain Policy Settings

Class 11
Domain and Fine-Grained Password Policies

Are you kidding? You forgot your password again? Learn how to provide multiple password policies using Server 2008's brand new Fine Grained Password Policy Objects! That's right, you too can lessen the security of your network so your boss can use the name of his or her favorite horse as his/her password and not have to worry about all that security stuff!

Key Topics:
* The Default Domain Password Policy
* Account Lockout Policy
* Letting Your Boss Use Whatever Password He/She Wants
* Password Management
* Server 2008 Functional Level

Class 12
Providing Permissions to an Account for Administrative Tasks

Feeling tired and overworked? Are you ready to let someone else do the busy work of resetting passwords and the like? Then you need Class 12! Pass off some of your responsibility to some other unsuspecting IT staffer and make them take the calls from your users! You'll have much more time to play Halo!

Key Topics:
* Giving Someone Else the Ability to Reset Passwords
* Additional Built-In Groups in OUs
* Delegation of Control Wizard
* Additional Built-In Groups Demo
* Installing RSAT to a Vista Client for Easy Server Management
* Configuring RSAT for Vista

Class 13
Windows Server Backup, WBADMIN, and NTDSUTIL

If you don't know how to create basic backups, there's a chance your network will go down in flames and there will be nothing you'll be able to do about it. Millions of dollars of lost data! Just think of the chaos that will reign if your boss can't find the annual TPS report! You need to watch this Class and you never know; you might even become the hero, save the princess, and get a parade thrown in your honor!

Key Topics:
* Prevention
* WBADMIN – Stronger Tools and More Options
* NTDSUTIL – Super-Powered Utility for Lots of Operations
* The Globomantics Backup Strategy
* Installing Windows Server Backup on DC2
* Windows Server Backup Setup and Configuration
* Selecting Backup Once Wizard
* System State Backup with WBADMIN
* Creating Install for Media (IFM) Media

Class 14
Moving Operations Masters and Adding a DC with IFM

Give your network some flexibility by learning the secret of multiple Domain Controllers having different FSMO's!

Key Topics:
* A Little Future Planning to Prevent Major Problems
* What Are Operations Masters?
* Restructuring the Globomantics DCs a Bit
* Moving PDC Emulator and RID to DC2
* Building DC3 with IFM Media
* Verifying DC3 Configuration

Class 15
Monitoring, Auditing, and Maintaining Your AD Database

Nobody likes doing maintenance, but Active Directory is like a car: if you don't change the oil in your car every 3000 or so miles, it will eventually blow up. But if you do, you can get a long life out of it. The same goes for Active Directory--if you do your maintenance and monitoring, it will live a long happy life, providing access for your users and keeping your network cruising right along!

Key Topics:
* Watching Your AD Stuff
* Your Monitoring Toolbox
* Task Manager
* Event Viewer
* Performance Monitor
* Reliability Monitor
* Data Collector Sets
* Watch Who’s Doing What to Your Active Directory
* Enabling Auditing for Our New Your OU
* Steps for Defragging Your AD Database
* Defragging Your AD Database with NTDSUTIL

Class 16
Adding a Child Domain and Configuring Replication

Hey, it's time to expand! Learn how to create a new Child Domain for a new location so you can eventually pass off the responsibility for it to another victim--I mean administrator!

Key Topics:
* Before We Begin
* Creating Chicago Site in AD
* Creating Subnet for Chicago Office
* Installing Domain Controller for Chicago
* Configuring Replication

Class 17
Creating Universal Groups and the AGUDLP Strategy

Users in Chicago need access to stuff in New York! What are we going to do? Using Universal Groups and a strategy called AGUDLP, we can provide access to stuff that's 790 miles away over the network!

Key Topics:
* Time for Some More Users!
* Organizing Users into Groups
* The Types of Groups
* Setting Up Your Groups for Access Between Domains
* AGUDLP Setup
* Checking Our Settings
* Making Sure Your Users Can Log in Anywhere in Your Enterprise
* Turning on Universal Group Membership Cashing

Class 18
Building a Read-Only Domain Controller

Do you need a full Domain Controller for a branch office of 5 people? No, you really don't. Using Windows Server Core and the Read-Only Domain Controller feature in Windows Server 2008, you can create an great experience for your remote users that's more secure and cheaper to implement!

Key Topics:
* Dallas OU and Site Structure
* What is a Read-Only Domain Controller?
* Building RODC for Dallas
* Server Core Installation
* Running dcpormo on Server Core
* Verifying Our Installation
* Configuring RODC
* Setting Up Users
* What We’ve Built so Far…

Class 19
Restoring OUs and User Accounts

That new third shift IT guy we just hired deleted the entire New York Ops dept! What do we do? Since we were smart and created backups in Class 13, we can get back only the stuff we want using NTDSUTIL. There will be no need to recreate User Accounts -- but tell the boss that it'll take hours and hours to fix the problem, and then you can spend the time that you were going to take up recreating those OU's and Accounts to play a little Bejeweled.

Key Topics:
* The Two Types of Restorations
* Authoritative Restore
* Checking Our Recovery Files and Objects
* How to Put Resurrected Users Back Into Groups Using Backlinks?

Class 20
Strategies for Recreating a Domain Controller

It is inevitable. You will eventually face a cataclysmic meltdown of a Domain Controller. If you've applied the principles in the previous Classs, restoring and recreated DC's doesn't have to be tough. Coach will show you how!

Key Topics:
* Seizing Operations Masters for Quick Restoration of Functionality
* Possible Solutions for Restoring Domain Controllers

Class 21
Upgrading a Server 2003 Machine to Server 2008

So what about all those Server 2003 machines out there? In this Class you'll learn a little secret to upgrading your DC's to Server 2008, and it won't take much time at all.

Key Topics:
* Hank Just Bought a Company … in Tokyo!
* Advantages of the Server 2008 Domain Functional Level
* The Upgrade Process
* Preparing Tokyo DC for Upgrade
* Upgrading Tokyo DC to Windows Server 2008

Class 22
Connecting Two Active Directory Networks

In this Class you'll learn how to connect two Active Directory Forests together. There's two options: Active Directory Federation Services or Trusts? Which one will it be? Which option is easiest? You have to watch to find out!

Key Topics:
* Our Two Options to Connect Tokyo and New York
* What You Need for a Trust
* Trust Directions
* The Globomantics/Verde Petra Solution: Trusts
* Creating a Stub Zone
* Raising Forest Functional Level
* Creating Trusts
* Checking and Updating User Permissions

Class 23
Certification: It's Really Not That Scary

Are you thinking about taking the 70-640, Configuring Windows Server 2008 Active Directory Exam so you too can get a shiny new Microsoft Certified Technology Specialist (MCTS) in Active Directory, Configuring? If so, you'll want to watch this Class to know how to prepare for the big day. PLUS: Coach shares his secrets to passing the exams!

Key Topics:
* The New Generation of Server 2008 Certifications
* The Upgrade Paths for MCSA’s/MCSE’s
* How to Sign Up for a Microsoft Exam
* 70-640 Exam Prep Tips

Class 24
Domain Name Service

Without DNS, your Domain Controllers are really expensive paperweights. In this exam prep Class, you'll pick up some additional vocabulary and core concepts of DNS.

Key Topics:
* A Quick Overview of DNS
* What are DNS Zones Really?
* The Different Kinds of DNS Records
* Forward Lookup Zones
* Reverse Lookup Zones
* Conditional Forwarders
* Forwarders and Root Hints
* Global Name Zones

Class 25
Active Directory Certificate Services 101

Now that Certificate Services has stronger integration with Active Directory, it's now on the 70-640 exam. This exam prep Class will give you a quick foundation and the important jargon for Certificate Services.

Key Topics:
* Let’s Talk Security
* Keys and Certificates
* Your Certificate Has Been Revoked

Class 26
Lightweight Directory Services 101

In this exam prep Class, you'll learn about the AD LDS Role, and why you might need it if you have network applications that require LDAP.

Key Topics:
* What is AD LDS?
* What Might it Look Like on a Network?
* What is an Instance of AD LDS?

Class 27
Rights Management Services 101

In our final exam prep Class for this series, you'll learn about a new Role in Server 2008 that allows you to lock down the data in your network in an easy to implement fashion. Make the users do the work!

Key Topics:
* What is Rights Management?
* Some Additional Notes About RMS