MOC 20742 - Identity with Windows Server 2016

OBIETTIVI:

Questo corso intende trasmettere agli allievi le competenze necessarie ad effettuare il deployment e a configurare Active Directory Domain Services (AD DS) in un ambiente distribuito. Gli allievi apprendono inoltre come implementare le Group Policy, come eseguire beackup e restore e come monitorare e gestire il trobleshooting delle problematiche inerenti Active Directory. In aggiunta il corso prende in considerazione il deployment di ruoli quali Active Directory Federation Services (AD FS) e Active Directory Certificate Services (AD CS).

Al termine del corso gli allievi saranno in grado di:

• Install and configure domain controllers.
• Manage objects in AD DS by using graphical tools and Windows PowerShell.
• Implement AD DS in complex environments.
• Implement AD DS sites, and configure and manage replication.
• Implement and manage Group Policy Objects (GPOs).
• Manage user settings by using GPOs.
• Secure AD DS and user accounts.
• Implement and manage a certificate authority (CA) hierarchy with AD CS.
• Deploy and manage certificates.
• Implement and administer AD FS.
• Implement and administer Active Directory Rights Management Services (AD RMS).
• Implement synchronization between AD DS and Azure AD.
• Monitor, troubleshoot, and establish business continuity for AD DS services.

PROGRAMMA:

Installing and configuring DCs

• Overview of AD DS
• Overview of AD DS DCs
• Deploying DCs

Managing objects in AD DS

• Managing user accounts
• Managing groups in AD DS
• Managing computer accounts
• Using Windows PowerShell for AD DS administration
• Implementing and managing organizational units

Advanced AD DS infrastructure management

• Overview of advanced AD DS deployments
• Deploying a distributed AD DS environment
• Configuring AD DS trusts

Implementing and administering AD DS sites and replication

• Overview of AD DS replication
• Configuring AD DS sites
• Configuring and monitoring AD DS replication

Implementing Group Policy

• Introducing Group Policy
• Implementing and administering GPOs
• Group Policy scope and Group Policy processing
• Troubleshooting the application of GPOs

Managing user settings with GPOs

• Implementing administrative templates
• Configuring Folder Redirection and scripts
• Configuring Group Policy preferences

Securing AD DS

• Securing domain controllers
• Implementing account security
• Audit authentication
• Configuring managed service accounts (MSAs)

Deploying and managing AD CS

• Deploying CAs
• Administering CAs
• Troubleshooting and maintaining CAs

Deploying and managing certificates

• Deploying and managing certificate templates
• Managing certificate deployment, revocation, and recovery
• Using certificates in a business environment
• Implementing and managing smart cards

Implementing and administering AD FS

• Overview of AD FS
• AD FS requirements and planning
• Deploying and configuring AD FS
• Overview of Web Application Proxy

Implementing and administering AD RMS

• Overview of AD RMS
• Deploying and managing an AD RMS infrastructure
• Configuring AD RMS content protection

Implementing AD DS synchronization with Azure AD

• Planning and preparing for directory synchronization
• Implementing directory synchronization by using Azure AD Connect
• Managing identities with directory synchronization

Monitoring, managing, and recovering AD DS

• Monitoring AD DS
• Managing the AD DS database
• Recovering AD DS objects

ESERCITAZIONI E SUPERAMENTO:

All’interno di ogni modulo vi sono dei momenti di autovalutazione non vincolati che consentono all’utente di interagire con l’animazione verificando l’apprendimento dei concetti presentati. Il corso viene considerato concluso una volta fruiti tutti i contenuti.

DESTINATARI:

IT Professional.

PREREQUISITI:

Per partecipare con profitto a questo corso è necessario che gli allievi:

• abbiano una esperienza minima con i concetti di AD DS;
• abbiano esperienza lavorativa con Windows Server 2012 o Windows Server 2016;
• abbiano esperienza con indirizzamenti IP, risoluzione dei nomi e DHCP;
• abbiano esperienza lavorativa e comprensione di Microsoft Hyper-V e dei concetti di server virtualization;
• abbiano una comprensione quanto meno di base delle best-practices inerenti la sicurezza;
• abbiano esperienza lavorativa con sistemi client Windows quali Windows 7, Windows 8/8.1 e Windows 10;
• abbiano esperienza di base con la Windows PowerShell.

ATTESTATO:

Attestato di frequenza