Microsoft Windows Server 2003: Active Directory: Hands-On

Scheduled Dates (sort by: location | date)

I'd like a different date/location

Please click above and we will take care of the rest.

I’d like an onsite/bespoke course

Please click above and we will be happy to discuss the benefits of onsite and bespoke courses with you.

If suitable dates or locations are not available, click this link and we will arrange one for you

Course Overview

The Active Directory has become a corporate standard in providing a unified architecture for single sign-on, identity management and desktop configuration. In this comprehensive hands-on course, you learn the essential skills needed to design, implement and support an Active Directory enterprise. You gain the skills to configure the DNS architecture and build site replication topology.

This course has been classified as IT Technical Training.

Audience

Anyone who needs to organise and maintain a Windows Server 2003 infrastructure as an enterprise business solution.

Skills Gained

• Organise and maintain a Windows Server 2003 Active Directory (AD) enterprise
• Build a precise and purpose-oriented Organisational Unit (OU) structure
• Construct an efficient replication topology for your network and site layout
• Delegate administration and optimise group policy deployment
• Deploy an appropriate DNS architecture and namespace
• Restructure domains and forests without interrupting your business operation

Hands On Training

Throughout this course, you gain practical experience in building, organising and managing the Active Directory. Extensive hands-on exercises, models and case studies include:

• Restructuring and merging domains and forests
• Building the AD-integrated DNS namespace
• Creating site links for optimal replication
• Setting up an infrastructure for delegation
• Backing up the AD and restoring authoritatively
• Deploying applications automatically
• Optimising inter/intra site multimaster replication
• Preparing the AD for Microsoft Exchange
• Migrating users, groups and security between forests

Prerequisites

Course 595, "Windows Server 2003 Comprehensive Introduction", or equivalent knowledge is assumed.

Course Outline

Windows Server 2003 Overview

• Benefits of the Active Directory
• Analysing interoperability requirements

Defining the Active Directory

Designing the infrastructure

• Defining an optimal naming strategy for forests, domains, OUs and sites
• Building the forest root domain
• Exploiting Kerberos trust relationships
• Integrating the branch offices with the AD

Analysing Directory Service components

• Active Directory Application Mode (ADAM)
• Identity Integration Feature Pack (IIFP)
• Active Directory Federation Services (ADFS)

Maintaining the Infrastructure

Determining directory partitions

• Identifying forest schema implications
• Configuring application data partitions
• Establishing Global Catalogue fault-tolerance

Configuring domain controllers

• Enabling universal group caching
• Raising domain and forest functional levels
• Dispatching Flexible Single Master Operations (FSMO) roles effectively
• Renaming domain controllers and domains
• Backing up and restoring the AD

Constructing the Replication Topology

Investigating Multimaster replication

• Evaluating Update Sequence Numbers
• Configuring sites, subnets, connection objects and bridgehead servers
• Linking and bridging sites efficiently
• Solving attribute collision issues

Replication topology maximisation

• Eliminating the single point of failure
• Taming and predicting the Knowledge Consistency Checker (KCC)
• Defining optimal logical site masks
• Determining site-link costs and periodicities
• Comparing the inter/intra site transport protocols

Automating the Administration

Securing AD objects

• Leveraging multilevel inheritance
• Adjusting object visibility

Creating administrative roles

• Distributing administrative power
• Developing the delegation hierarchy

Configuring workstations and servers with Group Policies

• Fine tuning with filtering, loopback control, overriding and blocking inheritance
• Defining documentation templates

Installing and maintaining applications/OS

• Implementing application deployment
• Ensuring application compatibility
• Comparing system installation techniques

Building an Efficient DNS Structure

Selecting the appropriate architecture

• Merging DNS into your existing namespace
• Constructing AD-integrated DNS
• Choosing DNS replication scopes
• Identifying NetBIOS requirements

Configuring and maintaining DNS servers

• Connecting DNS to the Internet
• Integrating DNS and DHCP
• Conditional forwarding and stub zones

Restructuring the Active Directory

Preparing for the new architecture

• Intra vs. inter forest migrations
• Pruning and grafting domains
• Designing a solid recovery plan
• Adapting accounts with SID-History

Performing the migration

• Leveraging the Active Directory Migration Tool (ADMT)
• Installing a Password Export Server (PES)
• Translating security during migration
• Troubleshooting failed migrations

Integrating with other platforms

• Extending the schema for Exchange
• Implementing Microsoft Identity Management for UNIX

Follow On Courses

• 597 Deploying and Managing Windows Server 2003
• 559 Windows Server 2003 AD Troubleshooting
• 599 Securing Windows Server 2003
• 598 Troubleshooting Windows Server 2003 Environments
• 558 Automating Windows Administration with VBScript
• 170 Virtual Server and Workstation Technology

Microsoft Windows Server 2003: Active Directory: Hands-On / 596