Windows Server 2008 Active Directory Training

Video 1 - Welcome to Windows Server 2008 Active Directory

▪ About Your Instructor and Train Signal
▪ What’s Covered in this Course?
▪ The Globomantics Scenario
Video 2 - What is Active Directory?
▪ What is Active Directory and Why Should I Care?
▪ What is a Domain?
▪ What is a Server Role?
▪ What is DNS?
Video 3 - Installing Server 2008 and Active Directory (The First Two Domain
Controllers: Installing Server 2008 and Active Directory)
▪ Building the Brain of the Globomantics Network
▪ Hardware Requirements
▪ Server 2008 Editions
▪ Bare Metal Installation Process
▪ Windows Server 2008 Installation
▪ Initial Configuration Task List
▪ Installation of ADDS
▪ Administrator Passwords
▪ Renaming Default-First-Site-Name
▪ Setting Up a Second Domain Controller
▪ Can We Talk? Replication Testing
Video 4 - Setting Up Remote Desktop on Your Personal Vista Client (Because You
Don’t Want to Have to Go into the Server Room Every Time You Need to Do
Something)
▪ The DC’s Are Up and Running… Now What?
▪ Renaming Vista Client Computer Name
▪ Joining Vista Client to Globomantics Domain
▪ Troubleshooting Connection Problem
▪ Troubleshooting RPC Server Error
▪ Why Remote Desktop is Just Great
▪ Setting Up Remote Desktop Shortcut
Video 5 - Creating OUs, User, and Computer accounts and Groups
▪ The DC’s Are Up and Running – Now What? – Part 2
▪ What’s an OU Again?
▪ Creating an Organizational Unit
▪ Deleting on OU
▪ Creating User Accounts
▪ Introducing DSADD
▪ Creating Users Using a Script
▪ Creating Users Using Excel Template
▪ Creating Computer Accounts
▪ Difference Between OUs and Groups
▪ Creating Groups in AD
▪ Adding Users and Computers into Groups
Video 6 - Setting Up Share Folders and Printers, Mapping Drives, and Creating
Permissions (Setting Up Share Folders and Printers, Mapping Drives, and Wrestling
with Permissions: Sharing Stuff on Servers)
▪ Setting Up a Member Server
▪ File Server Partitions
▪ Creating Shared Folders
▪ Share Level Permissions
▪ Using Share and Storage Management MMC
▪ Using Windows Explorer to Create Shared Folders
▪ Testing Shared Folders
▪ Groups and Permissions: Good Idea that Could Go Very Wrong
▪ Making a Group a Member of Another Group
▪ Share Level vs. NTFS Permissions
▪ What is Inheritance
▪ Creating NTFS Permissions
▪ Checking NTFS Permissions
▪ Rules for Share Level and NTFS Permissions
▪ Moving Folders
▪ Mapping a Shared Drive
▪ Checking Group Memberships
▪ Creating and Sharing Printers
▪ Adding a Printer
▪ What Globomantics.com Looks Like Now
Video 7 - Group Policy Objects (Get Your Control Freak On: Staring to Control What
Your Users Can and Can’t Do through Group Policy)
▪ Group Policy Objects
▪ Group Policy Management Console
▪ Default Domain Policy
▪ Local Vs. Domain Policy
▪ Configuring Domain Level Policy
▪ Linking GPOs
▪ GPO’s Processing Order
▪ Setting Up Coach’s Fave Four Policies
▪ Desktop Wallpaper Policy
▪ Preventing Users from Installing Software
▪ Removable Storage Policy
▪ Testing Our Policies
Video 8 - Security Filtering and Setting Up OUs for Better Group Policy
Implementation (How to Make Your Boss Mad and then Fix it Really Fast : Setting Up
Your Organizational Units for Better Group Policy Implementation, Security Filtering for
GPOs Using Groups, and Making Your Boss Happy Again)
▪ Hank is Angry!
▪ A Little Reorganization: Option 1, 2 or 3?
▪ Using a Combination of Techniques
▪ Reorganizing Users & Computers
▪ Running “gpupdate” Command
▪ Checking DCs Replication
▪ Testing Our Reorganized Active Directory
Video 9 - Locking Down Machines at the Computer Level and Mapping Drives
(Make Your Life Easier with Computer Policies and Preferences: Locking Down
Machines at the Computer Level and Mapping Drives with Group Policy Preferences)
▪ Quick Review of Our Network
▪ Policy Settings to Computer Lockdown
▪ Reorganizing Computer OUs
▪ Creating Computer GPOs
▪ Loopback Processing
▪ Group Policy Intervals
▪ Testing Computer GPOs
▪ Mapping Network Drives with Preferences
▪ Testing Preferences – Mapped Drives
Video 10 - Using GPOs to Install Software (How to Push Software onto a Lot of
Machines without Getting Up from Your Desk: Using Group Policy Objects to Install
Software and Adjusting Group Policy that Affects Group Policy at the Domain Level)
▪ You are Here: a Quick Look at What We’ve Built
▪ Our Scenario
▪ Options for Installing Software
▪ What You Need for a Software Installing GPO
▪ Steps for Creating GPO for Software Installation
▪ Creating a Shared Folder for Foxit.msi Package
▪ Creating and Linking a New GPO to the NYComputers OU
▪ Testing Our New GPO Software Installation
▪ The Group Policy for Group Policy?!
▪ Default Domain Policy Settings
▪ Where We’re at Now
Video 11 - Domain and Fine Grained Password Policies (What’s My P@ssw0rd
Again? Domain Password Policies, Fine Grained Password Policies, and a Little
Password Management Thrown in for Good Measure)
▪ The Default Domain Password Policy
▪ Account Lockout Policy
▪ Letting Your Boss Use Whatever Password He/She Wants
▪ A Little Password Management Goes a Long Way
▪ Server 2008 Functional Level
Video 12 - Providing Permissions to an Account for Administrative Tasks (Passing
the Buck: Providing Permissions to an Account for Administrative Tasks without Giving
Away All Your Thunder)
▪ Giving Someone Else the Ability to Reset Passwords
▪ Additional Built-In Groups in OUs
▪ Delegation of Control Wizard
▪ Additional Built-In Groups Demo
▪ Installing RSAT to a Vista Client for Easy Server Management
▪ Configuring RSAT for Vista
Video 13 - Windows Server Backup, WBADMIN, and NTDSUTIL (Creating Backup
Solutions Before Stuff Blows Up: How to Use Windows Server Backup, WBADMIN, and
NTDSUTIL to Create Backup Media)
▪ An Hour of Prevention Prevents an Ounce of Pink Slip
▪ WBADMIN – Stronger Tools and More Options
▪ NTDSUTIL – Super-Powered Utility for Lots of Operations
▪ The Globomantics Backup Strategy
▪ Installing Windows Server Backup on DC2
▪ Windows Server Backup Setup and Configuration
▪ Selecting Backup Once Wizard
▪ System State Backup with WBADMIN
▪ Creating Install for Media (IFM) Media
▪ Backup Conclusion and Wrap Up
Video 14 - Moving Operations Masters and Adding a DC with IFM (Reducing Single
Points of Failure: Changing Up the Operations Masters and How to Add a Domain
Controller with IFM)
▪ A Little Future Planning to Prevent Major Problems
▪ What Are Operations Masters?
▪ Restructuring the Globomantics DCs a Bit
▪ Moving PDC Emulator and RID to DC2
▪ Building DC3 with IFM Media
▪ Verifying DC3 Configuration
Video 15 - Monitoring, Auditing, and Maintaining Your AD Database (Stuff to Make
Your Active Directory Life Just a Little More Predictable: Monitoring, Auditing, and
Maintaining Your Active Directory Database)
▪ Watching Your AD Stuff
▪ Your Monitoring Toolbox
▪ Task Manager
▪ Event Viewer
▪ Performance Monitor
▪ Reliability Monitor
▪ Data Collector Sets
▪ Watch Who’s Doing What to Your Active Directory
▪ Enabling Auditing for Our New Your OU
▪ Steps for Defragging Your AD Database
▪ Defragging Your AD Database with NTDSUTIL
Video 16 - Adding a Child Domain and Configuring Replication (Creating the
Chicago Location: Adding a Child Domain, Creating Sites and Subnets, and Configuring
Replication with the Mother Ship)
▪ Before We Begin
▪ Creating Chicago Site in AD
▪ Creating Subnet for Chicago Office
▪ Installing Domain Controller for Chicago
▪ Configuring Replication
Video 17 - Creating Universal Groups and the AGUDLP Strategy (How to Give
People Access to Stuff that’s 790 Miles Away: Creating Universal Groups, the AGUDLP
Strategy, and Making Sure Your People Can Log in Anywhere in Your Enterprise)
▪ Time for Some More Users!
▪ Organizing Users into Groups
▪ The Types of Groups
▪ Setting Up Your Groups for Access Between Domains
▪ AGUDLP Setup
▪ Checking Our Settings
▪ Making Sure Your Users Can Log in Anywhere in Your Enterprise
▪ Turning on Universal Group Membership Cashing
Video 18 - Building a Read-Only Domain Controller (Creating the Dallas Branch
Office: Building a Read-Only Domain Controller for a Less Secure Location)
▪ Dallas OU and Site Structure
▪ What is a Read-Only Domain Controller?
▪ Building RODC for Dallas
▪ Server Core Installation
▪ Running dcpormo on Server Core
▪ Verifying Our Installation
▪ Configuring RODC
▪ Setting Up Users
▪ What We’ve Built so Far…
Video 19 - Restoring OUs and User Accounts (Bringing an OU and Users Back from
the Dead: How to Restore Individual Organizational Units and User Accounts AFTER
They’ve Been Deleted)
▪ Okay, Who Killed Off the Ops Department?
▪ The Two Types of Restorations
▪ Authoritative Restore
▪ Checking Our Recovery Files and Objects
▪ How to Put Resurrected Users Back Into Groups Using Backlinks?
Video 20 - Strategies for Recreating a Domain Controller (What Do You Do When a
Domain Controller Blows Up? Strategies to Use When Recreating a Dead Domain
Controller)
▪ And… the Inevitable Happens
▪ Seizing Operations Masters for Quick Restoration of Functionality
▪ Possible Solutions for Restoring Domain Controllers
Video 21 - Upgrading a Server 2003 Machine to Server 2008 (Get Your Old Domain
Controllers Up to Date: Upgrading a Server 2003 Machine to Server 2008)
▪ Hank Just Bought a Company … in Tokyo!
▪ Advantages of the Server 2008 Domain Functional Level
▪ The Upgrade Process
▪ Preparing Tokyo DC for Upgrade
▪ Upgrading Tokyo DC to Windows Server 2008
Video 22 - Connecting Two Active Directory Networks (Connecting the Continents:
How to Connect Two Active Directory Networks for Fun and Profit {and By Using Trusts
and DNS})
▪ Tokyo is Now a Server 2008 Network – So Now What?
▪ Our Two Options to Connect Tokyo and New York
▪ What You Need for a Trust
▪ Trust Directions
▪ The Globomantics/Verde Petra Solution: Trusts
▪ Creating a Stub Zone
▪ Raising Forest Functional Level
▪ Creating Trusts
▪ Checking and Updating User Permissions
Video 23 - Certification: It’s Really Not that Scary (What It is, What to Expect, and
How to Prepare)
▪ The New Generation of Server 2008 Certifications
▪ The Upgrade Paths for MCSA’s/MCSE’s
▪ How to Sign Up for a Microsoft Exam
▪ 70-640 Exam Prep Tips
Video 24 - Domain Name Service (A Primer on Domain Name Service and How it Fits
in with Active Directory)
▪ A Quick Overview of DNS
▪ What are DNS Zones Really?
▪ The Different Kinds of DNS Records
▪ Forward Lookup Zones
▪ Reverse Lookup Zones
▪ Conditional Forwarders
▪ Forwarders and Root Hints
▪ Global Name Zones: the WINS Killer (Kind of)
Video 25 - AD Certificate Services 101 (A Primer on Active Directory Certificate
Services and Public Key Infrastructure)
▪ Let’s Talk Security
▪ Lions and Tigers and Keys and Certificates, Oh My!
▪ Respect My Authori-tay!
▪ I’m Sorry, Dave, I Can’t Do That. Your Certificate Has Been Revoked
Video 26 - Active Directory Lightweight Directory Services 101 (A Primer on AD
LDS)
▪ What is AD LDS?
▪ What Might it Look Like on a Network?
▪ What is an Instance of AD LDS?
Video 27 - AD Rights Management 101 (A Primer on Digital Rights Management in
Server 2008)
▪ What is Rights Management?
▪ Some Additional Notes About RMS