Identity Management with Windows Server 2016

Introduction:

This Windows Server 2016 Identity Management course is designed for IT professionals, particularly infrastructure or system administrators familiar with Active Directory Domain Services (AD DS). The training focuses on synchronizing AD DS with Microsoft Azure Active Directory and further develops your Windows Server administration skills. It is part of a broader Windows Server management program, preparing participants for advanced server management and Windows Identity Foundation Server 2016. The course content enables participants to minimize data access risks, optimize identity usage, and operate a secure, high-availability Windows Server environment.

Objectives:

At the end of this Windows Server 2016 course, participants will be able to:

• Install and configure domain controllers.
• Manage AD DS objects using graphical tools and Windows PowerShell.
• Apply AD DS in complex architectures.
• Organize AD DS sites and plan for replication.
• Create and manage Group Policy Objects (GPOs).
• Apply user settings using GPOs.
• Secure AD DS and user accounts.
• Plan and implement a Certificate Authority (CA) hierarchy in an AD CS environment.
• Issue and manage certificates.
• Deploy and manage AD FS and AD RMS.
• Synchronize AD DS with Azure Active Directory.
• Monitor, troubleshoot, and ensure business continuity for AD DS services.

Training Methodology:

• Instructor-led face-to-face lectures
• Hands-on practical labs
• Real-world applications
• Interactive sessions with group members or instructors
• Detailed "show and tell" sessions
• Tests and assessments

Course Outline:

Unit 1: Installation and Implementation of Domain Name System (DNS) Servers

• Introduction to Active Directory Domain Services
• Overview of Active Directory Domain Services domain controllers
• Install a new domain controller

Unit 2: Active Directory Domain Services (AD DS)

• Create and configure user territories
• Manage users in groups within AD DS
• Manage computer accounts
• Administer domain services with Windows PowerShell
• Create and maintain organizational units in AD DS

Unit 3: Complex Procedures for Maintaining the Infrastructure of AD DS

• Advanced knowledge of Active Directory Domain Services
• Set up a multi-site Active Directory Domain Services
• Enable and manage Active Directory Domain Services trusts

Unit 4: Sites and Replication in Active Directory Domain Services (AD DS)

• Replicate Active Directory
• Manage AD DS sites
• Control and ensure replication of AD DS

Unit 5: Group Policy Application and Development

• Foundation of Group Policy
• Apply and manage GPOs
• Understand the scope of GPOs and Group Policy processing
• Troubleshoot GPO application issues

Unit 6: Group Policy in Controlling User Configuration

• Use Administrative Templates
• Configure Folder Redirection and scripts
• Manage policy preferences with Group Policy

Unit 7: Securing Active Directory Domain Services

• Secure domain controllers
• Secure accounts
• Implement authentication auditing
• Configure Managed Service Accounts (MSAs)

Unit 8: Deploying and Managing AD CS

• Deploy Certificate Authorities (CAs)
• Administer CAs
• Support and maintain CAs

Unit 9: Deploying and Managing Certificates

• Deploy and manage certificate templates
• Issue, revoke, and recover certificates
• Use business certificates
• Implement and manage smart cards

Unit 10: Implementing and Administering AD FS

• Overview of AD FS
• AD FS planning and requirements
• Install and configure AD FS
• Introduction to Web Application Proxy

Unit 11: Implementing and Administering AD RMS

• Overview of AD RMS
• Set up and maintain an AD RMS system
• Manage AD RMS content rights

Unit 12: Implementing AD DS Synchronization with Azure AD

• Prepare for directory synchronization
• Perform directory synchronization
• Administer directory synchronization services

Unit 13: Monitoring, Managing, and Recovering AD DS

• Monitor AD DS
• Administer the AD database
• Manage directory backup and restore processes