Partie Serveur 2008
Implement a Group Policy InfrastructureThis module explains what Group Policy is, how it works, and how best to implement Group Policy in your organization.
Lessons
•
Understand Group Policy•
Implement a Group Policy•
Explore Group Policy Settings and Features•
Manage Group Policy Scope•
Group Policy Processing•
Troubleshoot Policy ApplicationLab : Implement Group Policy
•
Create, Edit and Link GPOsLab : Explore Group Policy Settings and Features
•
Exercise 1: Use Filtering and Commenting•
Exercise 2: Mange Administrative TemplatesLab : Manage Group Policy Scope
•
Exercise 1: Configure GPO Scope with Links•
Exercise 2: Configure GPO Scope with Filtering•
Exercise 3: Configure Loopback ProcessingLab : Troubleshoot Policy Application
•
Exercise 1: Perform RSoP Analysis•
Exercise 2: using the Group Policy Results Wizard•
Exercise 3: View Policy EventsAfter completing this module, students will be able to:
•
Identify the business drivers for configuration management•
Understand the components and technologies that comprise the Group Policy framework•
Manage Group Policy objects•
Configure and understand a variety of policy setting types•
Scope GPOs using links, security group, WMI filters, loopback processing, and Preference targeting•
Explain GPO storage, replication, and versioning•
Administer a Group Policy infrastructure•
Evaluate GPO inheritance, precedence, and Resultant Set of Policy (RSoP)•
Locate the event logs containing Group Policy related eventsManage Enterprise Security and Configuration with Group Policy Settings
This module explains how to manage security and software installation and how to audit files and folders.
Lessons
•
Delegate the Support of Computers•
Manage Security Settings•
Manage software with GPSILab : Delegate the Support of Computers
•
Exercise 1: Configure the Membership of Administrators Using Restricted Groups PoliciesLab : Manage Security Settings
•
Exercise 1: Manage Local Security Settings•
Exercise 2: Create a Security Template•
Exercise 3: Use Security Configuration and Analysis•
Exercise 4: Use the Security Configuration WizardLab : Manage Software with GPSI
•
Exercise 1: Deploy Software with GPSI•
Exercise 2: Upgrade Applications with GPSILab : Audit File System Access
•
Exercise 1: Configure Permissions and Audit Settings•
Exercise 2: Configure Audit Policy•
Exercise 3: Examine Audit EventsAfter completing this module, students will be able to:
•
Delegate the administration of computers•
Use Restricted Groups policies to modify or enforce the membership of groups•
Use Group Policy Preferences to modify the membership of groups•
Configure security settings using the Local Security policy•
Create and apply security templates to manage security configuration•
Analyze security configuration based on security templates•
Create, edit, and apply security policies using the Security Configuration Wizard•
Deploy security configuration with Group Policy•
Deploy software using GPSI•
Remove software originally installed with GPSISecure Administration
This module explains how to administer Active Directory Domain Services Securely.
Lessons
•
Delegate Administrative Permissions•
Audit Active Directory ChangesLab : Delegate Administration
•
Exercise 1: Delegate Permission to create and support User Accounts•
Exercise 2: View Delegated Permissions•
Exercise 3: Remove and Reset PermissionsLab : Audit Active Directory Changes
•
Exercise 1: Audit Changes to Active Directory using Default Audit Policy•
Exercise 2: Audit Changes to Active Directory using Directory Service Changes auditingAfter completing this module, students will be able to:
•
Assign permissions to Active Directory objects using the security editor user interfaces and the Delegation of Control Wizard.•
View and report permissions on Active Directory objects by using user interface and command line tools.•
Reset the permissions on an object to its default.•
Describe the relationship between delegation and OU design.•
Configure Directory Service Changes auditing•
Specify auditing settings on Active Directory objects•
Identify event log entries created by Directory Access auditing and Directory Service Changes auditingImprove the Security of Authentication in an Active Directory Domain Services (AD DS) Domain
This module explains the domain-side components of authentication, including the policies that specify password requirements and the auditing of authentication-related activities.
Lessons
•
Configure Password and Lockout Policies•
Audit Authentication•
Configure Read-Only Domain ControllersLab : Configure Password and Account Lockout Policies
•
Exercise 1: Configure the Domain’s Password and Lockout Policies.•
Exercise 2: Configure Fine-Grained Password PolicyLab : Audit Authentication
•
Exercise 1: Audit AuthenticationLab : Configure Read-Only Domain Controllers
•
Exercise 1: Install RODC•
Exercise 2: Configure Password Replication Policy•
Exercise 3: Manage Credential CachingAfter completing this module, students will be able to:
•
Implement your domain password and account lockout policy•
Configure and assign fine-grained password policies•
Configure auditing of authentication-related activity•
Distinguish between account logon and logon events•
Identify authentication-related events in the Security log•
Identify the business requirements for RODCs•
Install an RODC•
Configure password replication policy•
Monitor the caching of credentials on an RODCConfigure Domain Name System (DNS)
This module explains how to implement DNS to support name resolution both within your AD DS domain and outside your domain and your intranet.
Lessons
•
Review DNS Concepts, Components, and Processes•
Install and Configure DNS Server in an AD DS Domain•
AD DS,DNS, and Windows•
Advanced DNS Configuration and Administration•
Exercise 1: Add the DNS Server Role•
Exercise 2: Configure Forward Lookup Zones and Resource RecordsLab : Advanced Configuration of DNS
•
Exercise 1: Enable Scavenging of DNS Zones•
Exercise 2: Create Reverse Lookup Zones•
Exercise 3: Explore Domain Controller Location•
Exercise 4: Configure Name Resolution for External DomainsAfter completing this module, students will be able to:
•
Understand the structure role, structure and functionality of the domain name system (DNS)•
Describe client and server name resolution processes•
Install DNS•
Manage DNS records•
Configure DNS server settings•
Understand the integration between AD DS and DNS•
Choose a DNS domain for an Active Directory domain•
Create a zone delegation for a new Active Directory domain•
Configure replication for Active Directory integrated zones•
Describe the purpose of SRV records in the domain controller location process•
Understand read-only DNS servers•
Understand and configure single-label name resolution•
Configure advanced DNS server settings•
Audit, maintain, and troubleshoot the DNS server roleManage Sites and Active Directory ReplicationThis module explains how to create a distributed directory service
that supports domain controllers in portions of your network that are separated by expensive, slow, or unreliable links.Lessons
•
Configure Sites and Subnets•
Configure the Global Catalog and Application Partitions•
Configure ReplicationLab : Configure Sites and Subnets
•
Exercise 1: Configure the Default Site•
Exercise 2: Create Additional SitesLab : Configure the Global Catalog and Application Partitions
•
Exercise 1: Configure a Global Catalog•
Exercise 2: Configure Universal Group Membership•
Exercise 3: Examine DNS and Application Directory PartitionsLab : Configure Replication
•
Exercise 1: Create a Connection Object•
Exercise 2: Create Site Links•
Exercise 3: Move Domain Controllers into Sites•
Exercise 4: Designate a Preferred Bridgehead Server•
Exercise 5: Configure Intersite ReplicationAfter completing this module, students will be able to:
•
Understand domain controller location and manage domain controllers in sites•
Configure replication of the partial attribute set to global catalog servers•
Implement universal group membership caching•
Understand the role of application directory partitions•
Configure replication topology with connection objects, bridgehead servers, site links, and site link bridges•
Report, analyze, and troubleshoot replication with repadmin.exe and dcdiag.exeMonitoring and Maintaining Windows Server 2008 Servers
This module explains how to monitor and maintain Windows Server 2008 servers.
Lessons
•
Planning Monitoring Tasks•
Calculating a Server Baseline•
Measuring Performance Objects•
Selecting Appropriate Monitoring Tools•
Planning Notification Methods•
Overview of Windows Server 2008 Maintenance Tasks•
Automating Windows Server 2008 MaintenanceLab : Identifying Windows Server 2008 Monitoring Requirements
•
Evaluating Performance Metrics•
Monitoring Performance MetricsLab : Configuring Windows Server 2008 Monitoring
•
Configuring Data Collector Sets•
Monitoring Extension Exercise•
Automating Maintenance TasksAfter completing this module, students will be able to:
•
Plan monitoring tasks.•
Determine an appropriate server baseline.•
Determine objects and counters to monitor based on server role.•
Analyze key performance counters.•
Select appropriate monitoring tools.•
Identify appropriate notification methods.•
Create a server management task schedule for Windows Server 2008.•
List automated maintenance tools for Windows Server 2008.Configuring and Managing Storage Technologies
This module explains how to manage storage using File Server Resource Manager, configure quota management, implement file screening and manage storage reports.
Lessons
•
Windows Server 2008 Storage Management Overview•
Managing Storage Using File Server Resource Manager•
Configuring Quota Management•
Implementing File Screening•
Managing Storage Reports•
Understanding Storage Area NetworksLab : Installing the FSRM Role Service
Lab : Configuring Storage Quotas
•
Configuring Storage QuotasLab : Configuring File Screening
•
Configuring File ScreeningLab : Generating Storage Reports
•
Generating Storage ReportsAfter completing this module, students will be able to:
•
Describe storage management solutions included in Windows Server 2008.•
Manage storage using FSRM.•
Configure quota management using FSRM.•
Implement file screening using FSRM.•
Manage storage reports.•
Troubleshoot storage issues.Partie PowerShell
Automating Active Directory Administration
This module introduces the concept of Active Directory administrative automation. It explains how to retrieve, create, modify, move, and remove objects in the Active Directory. It focuses on PowerShell-centric techniques rather than scripting, and heavily leverages on basic and advanced pipeline techniques covered in previous modules.
Lessons
•
Active Directory Automation Overview•
Managing Users and Groups•
Managing Computers and Other Directory ObjectsLab : Managing Users and Groups
•
Retrieving a filtered list of users from Active Directory•
Resetting user passwords and address information•
Disabling users that belong to a specific groupLab : Managing Computers and Other Directory Objects
•
Listing all computers that appear to be running a specific operating system according to Active Directory information•
Creating a report showing all Windows Server 2008 R2 servers•
Managing fine-grained password policies in Active Directory•
Discovering Organizational Units that are not protected against accidental deletionAfter completing this module, students will be able to:
•
Give an overview of Active Directory automation.•
Manage Users and Groups using Windows PowerShell.Windows PowerShell Scripts
This module introduces basic Windows PowerShell scripts that execute a batch of shell commands in a single operation. It points out the security concerns associated with scripting, and how to configure and control the shell’s security settings that relate to scripting. It also explains how to write basic scripts that execute batches of commands, and how to parameterize scripts in order to make them more flexible in a variety of situations.
Lessons
•
Script Security•
Basic Scripts•
Parameterized ScriptsLab : Writing Windows PowerShell Scripts
•
Executing scripts•
Using positional script parameters•
Using named script parametersAfter completing this module, students will be able to:
•
Identify security concerns associated with scripting.•
Write basic scripts.•
Write parameterized scripts.Background Jobs and Remote AdministrationThis module explains how to work with Windows PowerShell’s
background jobs and remote administration functionality. It shows how to create, monitor, and manage local background jobs, and receive results from completed jobs. It also covers how to configure Windows PowerShell remoting both locally and in a domain environment. This module describes how to create and manage session connections to remote computers, and explain how to use those session connections in one-to-one remote shell instances as well as one-to-many remote command invocation. Finally, it shows how to invoke remote commands as background jobs, and how to manage those jobs and receive results from them.Lessons
•
Working with Background Jobs•
Using Windows PowerShell RemotingLab : Working with Background Jobs
•
Using background jobs with WMI•
Using background jobs for local computers•
Receiving the results from a completed job•
Removing a completed job•
Waiting for a background job to complete•
Stopping a background job before it completes•
Working with the properties of a jobLab : Using Windows PowerShell Remoting
•
Interactive remoting•
Fan-out remoting•
Fan-out remoting using background jobs•
Saving information from background jobsAfter completing this module, students will be able to:
•
Work with Background Jobs.Automating Windows Server 2008 R2 AdministrationThis module gives an opportunity to complete several
real-world administration tasks related to Windows Server 2008 R2. It provides minimal instruction in how to use the cmdlets and techniques required to accomplish the lab portion of this module; instead, it lets students rely on the skills they have learned in the preceding modules of this course.Lessons
•
Windows Server 2008 R2 Modules Overview•
Server Manager Cmdlets Overview•
Group Policy Cmdlets Overview•
Troubleshooting Pack Overview•
Best Practices Analyzer Cmdlets Overview•
IIS Cmdlets OverviewLab : Using the Server Manager Cmdlets
•
Listing all currently installed features•
Comparing objects•
Installing a new server feature•
Exporting current configuration to XMLLab : Using the Group Policy Cmdlets
•
Listing all the Group Policy Objects in the domain•
Creating a text-based report•
Creating an HTML report•
Backing up all Group Policy ObjectsLab : Using the Troubleshooting Pack Cmdlets
•
Importing the Troubleshooting Pack module•
Solving an end-user problem interactively•
Solving a problem using answer filesLab : Using the Best Practice Analyzer Cmdlets
•
Importing the Best Practice module•
Viewing existing models•
Running a Best Practices scanLab : Using the IIS Cmdlets
•
Importing the IIS module•
Creating a new web site•
Backing up IIS•
Modifying web site bindings•
Using the IIS PSDrive•
Restoring an IIS ConfigurationAfter completing this module, students will be able to:
