Configuring Identity and Access Solutions with Windows Server 2008 Active Directory

3 days - M6426 

 

Profile


This three-day instructor-led course provides the knowledge and skills that IT Professionals need to configure identity and access solutions with Windows Server 2008 Active Directory.

Audience

The audience for this course is IT Professionals interested in learning how to implement IDA solutions in an enterprise environment. Most students will be IT professionals who are responsible for integrating applications and platforms with enterprise directory and security services while increasing access to a growing number of customers and partners.

Course Outline

Module 1: Exploring IDA Solutions

Lessons

Overview of IDA Management
Active Directory Server Roles in IDA Management
Overview of ILM 2007


Lab 1: Exploring IDA Solutions

Explore how Active Directory Server Roles will provide IDA Management solutions


After completing this module, students will be able to:

Describe IDA Management.
Identify Active Directory server roles in IDA Management.
Identify the key aspects of ILM 2007.


Module 2: Configuring AD CS

Lessons

Overview of PKI
Deploying a CA Hierarchy
Installing AD CS
Managing CA


Lab 2: Configuring AD CS

Installing the AD CS Server Role
Issuing and Installing a Subordinate Certificate
Publishing the CRL


After completing this module, students will be able to:

Describe Public Key Infrastructure.
Deploy a Certification Authority hierarchy.
Install Active Directory Certificate Services.
Manage a Certification Authority.


Module 3: Deploying and Managing Certificates

Lessons

Deploying Certificates by Using AD CS
Deploying Certificates by Using Autoenrollment
Revoking Certificates
Configuring Certificate Templates
Configuring Certificate Recovery


Lab 3: Deploying and Managing Certificates

Configuring AD CS Web Enrollment
Configuring Certificate Enrollment
Configuring AD CS Certificate Revocation
Configuring AD CS Certificate Templates
Managing Key Archival and Recovery


After completing this module, students will be able to:

Deploy certificates by using AD CS.
Use autoenrollment to deploy certificates.
Revoke certificates.
Configure certificate templates.
Configure certificate recovery.


Module 4: Configuring AD LDS

Lessons

Installing and Configuring AD LDS
Configuring AD LDS Instances
Configuring AD LDS Replication
Configuring AD LDS Integration with AD DS


Lab 4: Configuring AD LDS

Configuring an AD LDS instance and an application partition
Configuring AD LDS Access Control
Configuring AD LDS Replication
Configuring AD DS and AD LDS synchronization


After completing this module, students will be able to:

Install and configure AD LDS.
Configure AD LDS instances.
Configure AD LDS replication.
Configure AD LDS integration with AD DS.


Module 5: Configuring AD FS

Lessons

Overview of AD FS
AD FS Deployment Scenarios
Deploying AD FS
Implementing AD FS Claims


Lab 5A: Configuring AD FS for Federated Web SSO by Using Forest Trust Scenario

Installing the AD FS Server Role
Configuring Certificate Requirements
Configuring the AD FS Web Agent
Configuring the Web Server application on a virtual computer
Configuring the Forest Trust and the Federated Trust Policies
Configuring the Federation Service Within the Internal Network
Configuring the Federation Service Within the Extranet
Testing the AD FS Implementation


Lab 5B: Configuring Active Directory Federation Services by Using Federated Web SSO Scenario

Installing the AD FS Server Role
Configuring Certificate Requirements
Configuring the AD FS Web Agent
Configuring the Web Server application on a virtual computer
Configuring the Federation Trust Policies
Configuring the Account Partner Federation Service
Configuring the Resource Partner Federation Service
Testing the AD FS implementation


After completing this module, students will be able to:

Identify the key aspects of AD FS.
Explore AD FS deployment scenarios.
Deploy AD FS.
Implement AD FS claims.


Module 6: Configuring AD RMS

Lessons

Overview of AD RMS
Installing and Configuring AD RMS Server Components
Administering AD RMS
Implementing AD RMS Trust Policies


Lab 6: Configuring AD RMS

Installing the AD RMS Server Role
Managing AD RMS rights policy templates
Configuring Trust Policies
Testing AD RMS functionality


After completing this module, students will be able to:

Identify the key aspects of AD RMS.
Install and configure AD RMS server components.
Administer AD RMS.
Implement AD RMS Trust Policies.


Module 7: Maintaining Access Management Solutions

Lessons

Supporting AD CS
Maintaining AD LDS
Maintaining AD FS
Maintaining AD RMS


Lab 7: Maintaining Access Management Solutions

Configuring CA Event Auditing
Implementing role-based administration in AD CS
Backing up a CA
Reconfiguring AD RMS cluster settings
Generating AD RMS Reports
Configuring AD RMS logging


After completing this module, students will be able to:

Support AD CS.
Maintain AD LDS.
Maintain and Monitor AD FS.
Maintain AD RMS.


Module 8: Troubleshooting IDA Solutions

Lessons

Troubleshooting AD CS
Troubleshooting AD LDS
Resolving AD FS Issues
Solving AD RMS Issues


Lab 8: Troubleshooting IDA Solutions

Identifying Tools and Troubleshooting Techniques of IDA Solutions


After completing this module, students will be able to:

Troubleshoot AD CS.
Troubleshoot AD LDS.
Resolve AD FS issues.
Solve AD RMS issues.

Prerequisites


Before attending this course, students must have:
  • Technical knowledge equivalent to the course 6424: Fundamentals of Windows Server 2008 Active Directory.
  • Technical background knowledge and hands-on experience of Active Directory Domain Services (AD DS from the AD TS foundation exam). This includes technical knowledge equivalent to the course 6425: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services.


Skills


After completing this course, students will be able to:
  • Describe identity and access solutions.
  • Configure Active Directory Certificate Services.
  • Deploy and manage certificates.
  • Configure Active Directory Lightweight Directory Services.
  • Configure Active Directory Federation Services.
  • Configure Active Directory Rights Management Services.
  • Maintain access management solutions.
  • Troubleshoot identity and access solutions.
<< Back   |   Schedule >>