NE-6426C

Configuring and Troubleshooting Identity and Access Solutions with

Windows Server 2008 Active Directory
Summary
Duration
3 Days

Vendor
Microsoft

Audience
IT Professionals

Published
19 May 2011

Level
300

Technology
Windows Server 2008

Delivery Method
Instructor-led (Classroom)

Software Assurance Training Voucher

Yes

Introduction

This three-day instructor-led course provides in-depth training on configuring and troubleshooting Active Directory Identity and
Access (IDA) solutions with Windows Server 2008 and Windows Server 2008 R2.

Prerequisites
Before attending this course, students must have system administratorlevel working knowledge of:

Technical skills in Active Directory Domain Services (AD DS). This includes technical skills equivalent to 6425C:
Configuring Windows Server 2008 Active Directory Domain Services.
Technical skills in Windows Server 2008 equivalent to 6419B: Configuring, Managing and Maintaining Windows
Server 2008 Servers.

Students who attend this training can meet the prerequisites by attending the following courses, or obtaining equivalent
knowledge and skills:

Course 6425C: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

At Course Completion
After completing this course, students will be able to:

Describe the fundamental IDA components and Windows Server 2008 and Windows Server 2008 R2 IDA technologies.
Deploy, configure, and troubleshoot Active Directory Certificate Services (AD CS).
Deploy, configure, and manage certificates.
Deploy, configure, and troubleshoot Active Directory Lightweight Directory Services (AD LDS).
Deploy, configure, and troubleshoot Active Directory Federation Services 2.0 (AD FS 2.0).
Deploy, configure, and troubleshoot Active Directory Rights Management Services (AD RMS).
Maintain Windows Server 2008 and Windows Server 2008 R2 Active Directory IDA Solutions.

Course Content

Module 1: Exploring Identity and

Lab : Identifying IDA Roles to Meet

configure AD CS and how to resolve

Access Solutions

Business Requirements

common AD CS issues.

This module introduces Identity and

Exploring How Active

Access Management (IDA Management)

Directory Server Roles

solutions. You will learn the fundamental

Provide IDA Management

IDA components and Windows Server

Solutions

2008 and Windows Server 2008 R2 IDA

After completing this module, students

technologies. This module also provides

will be able to:

an overview of Microsoft Forefront

Describe IDA techniques

technologies that further enhance IDA

Describe Windows Server

solutions.

Overview of Identity and

Describe additional IDA tools

Overview of Public Key

Infrastructure

Overview of Certification
Authorities

Deploying Certification
Authorities

2008 IDA server roles

Lessons

Lessons

Configuring Certification
Authorities

and solutions

Troubleshooting Active
Directory Certificate Services

Access Techniques

Module 2: Deploying and Configuring

Lab : Deploying and Configuring Active

Active Directory Identity and

Active Directory Certificate Services

Directory Certificate Services

Access Solutions Server

This module explains the concepts of

Roles

public key infrastructure (PKI) and

Additional Identity and

certification authority (CA). You will learn

Access Management Tools

how to deploy a CA hierarchy and install

an Enterprise Subordinate

and Solutions

AD CS. This module also describes how to

CA

Deploying an Standalone
Root CA

Deploying and Configuring

After completing this module, students

replication. This module also describes

will be able to:

how to resolve common AD LDS issues.

Describe Public Key

Infrastructure

Overview of Active Directory

Lightweight Directory

Authorities

Services

Deploy Certification

Deploying and Configuring

Directory Federation
Lab : Deploying and Configuring Active

Configuring AD LDS

Directory Federation Services

Resolve common Active

Instances and Partitions

for Federated Collaboration

Services Replication

Troubleshooting Active
Directory Services

the module elaborates on managing

Lab : Deploying and Configuring Active

enrollment to deploy certificates,

Directory Lightweight Directory Services

certificate template and certificate

Lessons
Managing Certificate

Configuring AD LDS

Internal Claim Aware

After completing this module, students

Managing Certificate

will be able to:

Lightweight Directory

Recovery

Services

Application
will be able to:

Deploy and configure Active

Configure Active Directory

Deploy Active Directory

Federation Services

Configure Active Directory

Federation Services partner

Directory Services

Describe Active Directory

Federation Services

Directory Lightweight

Configuring Certificate

Configuring AD FS 2.0 for

After completing this module, students

Describe Active Directory

Configuring Certificate

Enrolment

Application

Partners Claim Aware

Managing Enrollment

Templates

Internal Users to Access an

Internal Users to Access a

Steps

Configuring AD FS 2.0 for

Identifying AD LDS Solution

Deploying Certificates and

Lab : Deploying Certificates and Managing

Services (ADFS) 2.0

Replication
Tools and Troubleshooting

Installing and Configuring

Active Directory Federation

Configuring AD LDS

Templates

Revocation

with ADFS 2.0

Instances and Partitions

Installing the PKI

Infrastructure and Preparing

certificates by using AD CS. In addition,

recovery.

Lightweight Directory

Directory Lightweight

certificate revocation, and configuration of

Services

Configuring Active Directory

This module describes the deployment of

Troubleshooting Active

Directory Services

Certificates

Organizations and Claims

Configure Certification

Module 3: Deploying and Configuring

Federation Services Partner

Active Directory Lightweight

issues

Configuring Active Directory

Authorities

Directory Certificate Services

Deploying Active Directory

Federation Services

Describe Certification

Authorities

Lessons

organizations and claims

Resolve common Active

Configuring Autoenrollment

Lightweight Directory

Managing Certificate

Services instances and

Revocation

partitions

Module 6: Deploying and Configuring

Configuring Key Recovery

Directory Federation
Services issues

Configure Active Directory

Active Directory Rights Management

After completing this module, students

Lightweight Directory

Services

will be able to:

Services replication

This module explains the concept of AD

Resolve common Active

RMS. You will learn how to install and

Manage certificate templates

Deploy certificates and

Directory Lightweight

configure AD RMS server components,

manage enrollment

Directory Services issues

administer AD RMS rights policy

Manage certificate

Module 5: Deploying and Configuring

templates, and implement AD RMS trust

revocation

Active Directory Federation Services

policies. This module also describes how

Configure certificate

This module presents the concept of AD

to resolve common AD RMS issues.

recovery

FS 2.0 and its deployment scenarios. You

Lessons

Module 4: Deploying and Configuring

will learn how to deploy AD FS 2.0 and

Active Directory Lightweight

implement AD FS claims. This module also

Directory Services

describes how to resolve common AD FS

This module explains the concept of AD

issues.

LDS. You will learn how to install AD LDS,

Lessons

configure AD LDS instances and

partitions, and configure AD LDS

Overview of Active Directory

Rights Management Services

Deploying and Configuring

Active Directory Rights
Management Services

Overview of Active Directory

Federation Services 2.0

Configuring AD RMS Rights

Policy Templates and
Exclusion Policies

Configuring Active Directory

rights policy templates and

Lab : Maintaining Windows Server 2008

exclusion policies

Active Directory Identity and Access

Configure Active Directory

Solutions

Troubleshooting Active

Directory Rights Management Services

Directory Rights

AD RMS

Management Services issues

Configuring CA Event
Auditing

Resolve common Active

Installing and Configuring

Backing up Active Directory

Certificate Services

Backing up and Restoring an

Configuring AD RMS

Module 7: Maintaining Windows

Templates

Server 2008 Active Directory Identity

Configuring AD RMS Trust

and Access Solutions

Policies

This module explains the maintenance of

After completing this module, students

Testing AD RMS

AD CS, AD LDS, AD FS 2.0, and AD RMS.

will be able to:

Functionality

Lessons

Generating AD RMS Reports

will be able to:

trust policies

After completing this module, students

Rights Management Services

Rights Management Services

Lab : Deploying and Configuring Active

Maintaining Active Directory

Trust Policies

Management Services

Rights Management Services

Directory Rights

Configure Active Directory

Rights Management Services

Certificate Services

Rights Management Services

Services

Management Services

Associated Certifications & Exam

Maintain Active Directory

Maintain Active Directory
Lightweight Directory
Services

Maintaining Active Directory

Federation Services

Configuring AD RMS Logging

Certificate Services

Maintaining Active Directory

Lightweight Directory

Directory Rights

Directory Services Instance

Maintaining Active Directory

Describe Active Directory

Deploy and configure Active

Active Directory Lightweight

Maintain Active Directory

Federation Services

Maintain Active Directory

Rights Management Services

This course prepares students to write Exam 70-640: TS: Windows Server 2008 Active Directory, Configuration, one of two
course requirements to achieve the MCTS: Windows Server 2008 Active Directory Configuration certification.
On successful completion of this course students will receive a Torque IT attendance certificate.