Microsoft® Official Course

10969AActive Directory® Services with Windows Server®

Welcome!

Thank you for joining us today.

We’ve worked together with Microsoft Learning Partners and Microsoft IT Academies to bring you a world-class learning experience, including:

Microsoft Certified Trainers + Instructors. Your instructor is a premier technical and instructional expert who meets ongoing certification requirements.

Customer Satisfaction Guarantee. Our Partners offer a satisfaction guarantee and we hold them accountable for it. At

the end of class, please complete an evaluation of

today’s experience. We value your feedback!

Certification Benefits. After training, consider pursuing a Microsoft Certification, to help distinguish your technical expertise and experience. Ask your instructor about available exam promotions and discounts.

We wish you a great learning experience and ongoing career success!

Hello

• Instructor: <Instructor Name>• <Title or other credentials, e.g. Microsoft

Certified Trainer>• <Affiliation/Company>• <A few words about my technical and

professional experience>

Facilities

• Class hours• Building hours• Parking• Restrooms• Meals• Phones• Messages• Smoking• Recycling

About This Course

• Audience• AD DS administrators who are looking to train

in Advanced Identity and Access Technologies with Windows Server 2012

• System or Infrastructure Administrators with general AD DS experience and knowledge who are looking to cross train into core and advanced AD DS in Windows Server 2012

• IT Professionals who do not have as much hands on experience as listed earlier but who have taken the 10967A: Fundamentals of a Windows Server Infrastructure and are looking to build upon that knowledge of AD DS

About This Course (continued)

• Course Prerequisites• In addition to their professional experience, students who attend this

training should already have the following technical knowledge:• Experience working with AD DS• Experience working in a Windows Server infrastructure enterprise

environment• Experience working with and troubleshooting core networking

infrastructure technologies such as name resolution, IP Addressing, DNS and DHCP

• Experience with Hyper-V and Server Virtualization concepts• An awareness of general security best practices• Experience working hands on with Windows Client operating

systems such as Windows Vista, Windows 7 or Windows 8• Students who attend this training can meet the prerequisites by

attending the following courses, or obtaining equivalent knowledge and skills:• 10967A: Fundamentals of a Windows Server Infrastructure• 20410B: Installing and Configuring Windows Server 2012

About This Course (continued)

• Course Objectives• After completing this course, students will be able to:

• Describe available solutions for identity management and be able to address scenarios with appropriate solutions.

• Deploy and administer AD DS in Windows Server 2012.• Secure AD DS deployment.• Monitor, troubleshoot and establish business continuity for AD DS

services.• Implement AD DS sites, configure and manage replication,• Implement and manage Group Policy Objects (GPOs).• Manage user settings with GPOs. • Explain DAC and how to implement DAC to manage access control.• Implement CA hierarchy with AD CS and how to manage CAs.• Implement certificates.• Implement and manage AD RMS.• Implement and administer AD FS.• Explain Azure Cloud services and Azure AD.• Implement and administer AD LDS.

Microsoft Official Course Handbook• Organized by Modules• Includes Labs + Lab Answer

Keys• Module Reviews + Takeaways—

great for on-the-job reference

Your Course Materials

Designed to optimize your classroom learning experience. And support you back on the job.

NOTEThis is an early-to-market edition of the course. Upon release of the next edition, you will be able to access the digital companion content at: microsoft.com/learning/en/us/companion-moc.aspx

Course Outline

• Module 1: Overview of Access and Information Protection

• Module 2: Advanced Deployment and Administration of AD DS

• Module 3: Securing AD DS

• Module 4: Monitoring, Managing, and Recovering AD DS

• Module 5: Implementing and Administering AD DS Sites and Replication

• Module 6: Implementing Group Policy

• Module 7: Managing User Settings with Group Policy

Course Outline (continued)

• Module 8: Implementing Secure Shared File Access

• Module 9: Deploying and Managing Active Directory Certificate Services

• Module 10: Deploying and Managing Certificates

• Module 11: Implementing and Administering AD RMS

• Module 12: Implementing and Administering AD FS

• Module 13: Implementing Windows Azure Active Directory

• Module 14: Implementing and Administering AD LDS

Related Courses

• 10967A: Fundamentals of a Windows Server Infrastructure• See the full line of Microsoft Training and Certification resources at:

http://www.microsoft.com/learning/

Microsoft Certification Program

Get trained. Get certified.

Get ahead.

Microsoft Certifications demonstrate you have the skills to design, deploy, and optimize the latest technology solutions.

Ask your Microsoft Learning Partner how you can prepare for certification.

Also see:http://www.microsoft.com/learning/certification

Preparing for the Labs

Your lab activities will be centered around a fictitious company that we call A. Datum Corporation. A. Datum is an engineering, manufacturing, and distribution company. The organization is based in London, England, with major offices located in Toronto, Canada and Sydney, Australia. The company has recently acquired a new business: Trey Research, a specialist engineering company with a head office in London, England and with research facilities in Boston, USA and Cambridge, England. As an experienced Windows Server administrator, you are responsible for managing and maintaining the Windows Server infrastructure that will help A. Datum achieve its business goals.To complete the labs, you will work in a virtual machine environment.

Virtual Machine Environment

Virtual Machine Name: Use as:

10969A-LON-DC1 Windows Server 2012 domain controller in the Adatum.com domain

10969A-LON-DC2 Windows Server 2012 domain controller in the Adatum.com domain

10969A-TOR-DC1 Windows Server 2012 domain controller in the Adatum.com domain (in another site)

10969A-TREY-DC1 Windows Server 2012 domain controller in Treyresearch.com domain

10969A-LON-SVR1 Windows Server 2012 member server in the Adatum.com domain

10969A-LON-SVR2 Windows Server 2012 member server in the Adatum.com domain with web server role

10969A-CA-SRV1 Non-domain joined server to be used as offline root CA

Virtual Machine Environment (continued)

Virtual Machine Name: Use as:

10969A-LON-CL1 Windows 8 client computer with Office 2013 installed

10969A-LON-CL2 Windows 8 client computer with Office 2013 installed

Demonstration: Using Hyper-V ManagerIn this demonstration, you will learn how to:

• Open Hyper-V Manager

• Navigate the various sections/panes within Hyper-V Manager

• Virtual machines, snapshots, and actions: server-specific and virtual machine-specific

• Identify the virtual machines used in the labs for this course

• Take a snapshot and apply a snapshot

• Connect to a virtual machines

• Start and log on to a virtual machine

• Switch between full screen and window modes

• Revert to the previous snapshot

• Shut down a virtual machine

• When to use Shut Down or Turn off

• Close Hyper-V Manager