Course Name :Installing and Configuring Windows Server 2012(70-410)
Course Duration:1 month
Course Fees:8,000
Syllabus:
1.Install and configure servers
a.Install servers
Plan for a server installation, plan for server roles, plan for a server upgrade, install Server Core, optimise resource utilisation by using Features on Demand, migrate roles from previous versions of Windows Server
b.Configure servers
Configure Server Core, delegate administration, add and remove features in offline images, deploy roles on remote servers, convert Server Core to/from full GUI, configure services, configure NIC teaming, install and configure Windows PowerShell Desired State Configuration ﴾DSC﴿
c.Configure local storage
Design storage spaces, configure basic and dynamic disks, configure master boot record ﴾MBR﴿ and
GUID partition table ﴾GPT﴿ disks, manage volumes, create and mount virtual hard disks ﴾VHDs﴿,
configure storage pools and disk pools, create storage pools by using disk enclosures
2.Configure server roles and features
a.Configure file and share access
Create and configure shares, configure share permissions, configure offline files, configure NTFS permissions, configure access‐based enumeration ﴾ABE﴿, configure Volume Shadow Copy Service ﴾VSS﴿, configure NTFS quotas, create and configure Work Folders
b.Configure print and document services
Configure the Easy Print print driver, configure Enterprise Print Management, configure drivers, configure printer pooling, configure print priorities, configure printer permissions
c.Configure servers for remote management
Configure WinRM, configure down‐level server management, configure servers for day‐to‐day management tasks, configure multi‐server management, configure Server Core, configure Windows Firewall, manage non‐domain joined servers
3.Configure Hyper‐V
a.Create and configure virtual machine settings
Configure dynamic memory, configure smart paging, configure Resource Metering, configure guest integration services, create and configure Generation 1 and 2 virtual machines, configure and use enhanced session mode, configure RemoteFX
b.Create and configure virtual machine storage
Create VHDs and VHDX, configure differencing drives, modify VHDs, configure pass‐through disks, manage checkpoints, implement a virtual Fibre Channel adapter, configure storage Quality of Service
c.Create and configure virtual networks
Configure Hyper‐V virtual switches, optimise network performance, configure MAC addresses; configure network isolation, configure synthetic and legacy virtual network adapters, configure NIC teaming in virtual machines
4.Deploy and configure core network services
a.Configure IPv4 and IPv6 addressing
Configure IP address options, configure IPv4 or IPv6 subnetting, configure supernetting, configure interoperability between IPv4 and IPv6, configure Intra‐site Automatic Tunnel Addressing Protocol ﴾ISATAP﴿, configure Teredo
b.Deploy and configure Dynamic Host Configuration Protocol ﴾DHCP﴿ service
Create and configure scopes, configure a DHCP reservation, configure DHCP options, configure client and server for PXE boot, configure DHCP relay agent, authorise DHCP server
c.Deploy and configure DNS service
Configure Active Directory integration of primary zones, configure forwarders, configure Root Hints, manage DNS cache, create A and PTR resource records
5.Install and administer Active Directory
a.Install domain controllers
Add or remove a domain controller from a domain, upgrade a domain controller, install Active Directory Domain Services ﴾AD DS﴿ on a Server Core installation, install a domain controller from Install from Media ﴾IFM﴿, resolve DNS SRV record registration issues, configure a global catalogue server, deploy Active Directory infrastructure as a service ﴾IaaS﴿ in Microsoft Azure
b.Create and manage Active Directory users and computers
Automate the creation of Active Directory accounts; create, copy, configure and delete users and computers; configure templates; perform bulk Active Directory operations; configure user rights; offline domain join; manage inactive and disabled accounts
c.Create and manage Active Directory groups and organisational units ﴾OUs﴿
Configure group nesting; convert groups, including security, distribution, universal, domain local and domain global; manage group membership using Group Policy; enumerate group membership; delegate the creation and management of Active Directory objects; manage default Active Directory containers; create, copy, configure and delete groups and OUs
6.Create and manage Group Policy
a.Create Group Policy objects ﴾GPOs﴿
Configure a Central Store, manage starter GPOs, configure GPO links, configure multiple local Group Policies
b.Configure security policies
Configure User Rights Assignment, configure Security Options settings. Configure Security templates, configure Audit Policy, configure Local Users and Groups, configure User Account Control ﴾UAC﴿
c.Configure application restriction policies
Configure rule enforcement, configure AppLocker rules, configure Software Restriction Policies
7.Configure Windows Firewall
Configure rules for multiple profiles using Group Policy; configure connection security rules; configure Windows Firewall to allow or deny applications, scopes, ports, and users; configure authenticated fire
Course Name:Administering Windows Server 2012(70-411)
Course Duration:1 month
Course Fees:8,000
Syllabus:
1.Deploy, manage and maintain servers
a.Deploy and manage server images
Install the Windows Deployment Services ﴾WDS﴿ role; configure and manage boot, install and discover images; update images with patches, hotfixes and drivers; install features for offline images; configure driver groups and packages
b.Implement patch management
Install and configure the Windows Server Update Services ﴾WSUS﴿ role, configure group policies for updates, configure client‐side targeting, configure WSUS synchronisation, configure WSUS groups, manage patch management in mixed environments
c.Monitor servers
Configure Data Collector Sets ﴾DCS﴿, configure alerts, monitor real‐time performance, monitor virtual machines ﴾VMs﴿, monitor events, configure event subscriptions, configure network monitoring, schedule performance monitoring
2.Configure File and Print Services Configure
a.Distributed File System ﴾DFS﴿
Install and configure DFS namespaces, configure DFS Replication Targets, configure Replication Scheduling, configure Remote Differential Compression settings, configure staging, configure fault tolerance, clone a DFS database, recover DFS databases, optimise DFS replication
b.Configure File Server Resource Manager ﴾FSRM﴿
Install the FSRM role service, configure quotas, configure file screens, configure reports, configure file management tasks
c.Configure file and disk encryption
Configure BitLocker encryption; configure the Network Unlock feature; configure BitLocker policies; configure the EFS recovery agent; manage EFS and BitLocker certificates, including backup and restore
d.Configure advanced audit policies
Implement auditing using Group Policy and AuditPol.exe, create expression‐based audit policies, create removable device audit policies
3.Configure network services and access
a.Configure DNS zones
Configure primary and secondary zones, configure stub zones, configure conditional forwards, configure zone and conditional forward storage in Active Directory, configure zone delegation, configure zone transfer settings, configure notify settings
b.Configure DNS records
Create and configure DNS Resource Records ﴾RR﴿, including A, AAAA, PTR, SOA, NS, SRV, CNAME and MX records; configure zone scavenging; configure record options, including Time To Live ﴾TTL﴿ and weight; configure round robin; configure secure dynamic updates
c.Configure virtual private networks ﴾VPN﴿ and routing
Install and configure the Remote Access role, implement Network Address Translation ﴾NAT﴿, configure VPN settings, configure remote dial‐in settings for users, configure routing, configure Web Application proxy in passthrough mode
d.Configure DirectAccess
Implement server requirements, implement client configuration, configure DNS for Direct Access, configure certificates for Direct Access
4.Configure a Network Policy Server ﴾NPS﴿ infrastructure
a.Configure Network Policy Server
Configure a RADIUS server, including RADIUS proxy; configure RADIUS clients; configure NPS templates; configure RADIUS accounting; configure certificates
b.Configure NPS policies
Configure connection request policies, configure network policies for VPN clients ﴾multilink and
bandwidth allocation, IP filters, encryption, IP addressing﴿, import and export NPS policies Configure c.Network Access Protection ﴾NAP﴿
c.Configure System Health Validators ﴾SHVs﴿,
configure health policies, configure NAP enforcement using DHCP and VPN, configure isolation and remediation of non‐compliant computers using DHCP and VPN, configure NAP client settings
5.Configure and manage Active Directory
a.Configure service authentication
Create and configure Service Accounts, create and configure Group Managed Service Accounts,
configure Kerberos delegation, manage Service Principal Names ﴾SPNs﴿, configure virtual accounts Configure domain controllers
Transfer and seize operations master roles, install and configure a read‐only domain controller ﴾RODC﴿, configure domain controller cloning
b.Maintain Active Directory
Back up Active Directory and SYSVOL, manage Active Directory offline, optimise an Active Directory database, clean up metadata, configure Active Directory snapshots, perform object‐ and container‐
level recovery, perform Active Directory restore, configure and restore objects by using the Active Directory Recycle Bin
c.Configure account policies
Configure domain and local user password policy settings, configure and apply Password Settings Objects ﴾PSOs﴿, delegate password settings management, configure account lockout policy settings, configure Kerberos policy settings
6.Configure and manage Group Policy
a.Configure Group Policy processing
Configure processing order and precedence, configure blocking of inheritance, configure enforced policies, configure security filtering and Windows Management Instrumentation ﴾WMI﴿ filtering, configure loopback processing, configure and manage slow‐link processing and Group Policy caching, configure client‐side extension ﴾CSE﴿ behaviour, force Group Policy Update
b.Configure Group Policy settings
Configure settings, including software installation, folder redirection, scripts, and administrative template settings; import security templates; import custom administrative template file; configure property filters for administrative templates
c.Manage Group Policy objects ﴾GPOs﴿
Back up, import, copy and restore GPOs; create and configure Migration Table; reset default GPOs; delegate Group Policy management
d.Configure Group Policy preferences ﴾GPP﴿
Configure GPP settings, including printers, network drive mappings, power options, custom registry settings, Control Panel settings, Internet Explorer settings, file and folder deployment and shortcut deployment; configure item‐level targeting
Course Name:Configuring Advanced Windows Server 2012 Services( 70‐412)
Course Duration: 1 month
Course Fess: 8,000
Syllabus:
1.Configure and manage high availability
a.Configure Network Load Balancing ﴾NLB﴿
Install NLB nodes, configure NLB prerequisites, configure affinity, configure port rules, configure cluster operation mode, upgrade an NLB cluster
b.Configure failover clustering
Configure quorum, configure cluster networking, restore single node or cluster configuration, configure cluster storage, implement Cluster‐Aware Updating, upgrade a cluster, configure and optimise clustered shared volumes, configure clusters without network names, configure storage spaces
c.Manage failover clustering roles
Configure role‐specific settings, including continuously available shares; configure virtual machine ﴾VM﴿ monitoring; configure failover and preference settings; configure guest clustering
d.Manage VM movement
Perform live migration; perform quick migration; perform storage migration; import, export and copy VMs; configure VM network health protection; configure drain on shutdown
2.Configure file and storage solutions
a.Configure advanced file services
Configure Network File System ﴾NFS﴿ data store, configure BranchCache, configure File Classification
Infrastructure ﴾FCI﴿ using File Server Resource Manager ﴾FSRM﴿, configure file access auditing Implement
b.Dynamic Access Control ﴾DAC﴿
Configure user and device claim types, implement policy changes and staging, perform access‐ denied remediation, configure file classification, create and configure Central Access rules and policies, create and configure resource properties and lists
c.Configure and optimise storage
Configure iSCSI target and initiator, configure Internet Storage Name server ﴾iSNS﴿, implement thin provisioning and trim, manage server free space using Features on Demand, configure tiered storage
3.Implement business continuity and disaster recovery
a.Configure and manage backups
Configure Windows Server backups, configure Microsoft Azure backups, configure role‐specific backups, manage VSS settings using VSSAdmin
b.Recover servers
Restore from backups, perform a Bare Metal Restore ﴾BMR﴿, recover servers using Windows
Recovery Environment ﴾Win RE﴿ and safe mode, configure the Boot Configuration Data ﴾BCD﴿ store
c.Configure site‐level fault tolerance
Configure Hyper‐V Replica, including Hyper‐V Replica Broker and VMs; configure multi‐site
clustering, including network settings, Quorum and failover settings; configure Hyper‐V Replica
extended replication; configure Global Update Manager; recover a multi‐site failover cluster
4.Configure Network Services
a.Implement an advanced Dynamic Host Configuration Protocol ﴾DHCP﴿ solution
Create and configure superscopes and multicast scopes; implement DHCPv6; configure high availability for DHCP, including DHCP failover and split scopes; configure DHCP Name Protection; configure DNS registration
b.Implement an advanced DNS solution
Configure security for DNS, including Domain Name System Security Extensions ﴾DNSSEC﴿, DNS Socket Pool, and cache locking; configure DNS logging; configure delegated administration; configure recursion; configure netmask ordering; configure a GlobalNames zone; analyse zone level statistics
c.Deploy and manage IP Address Management ﴾IPAM﴿
Provision IPAM manually or by using Group Policy, configure server discovery, create and manage IP blocks and ranges, monitor utilisation of IP address space, migrate to IPAM, delegate IPAM administration, manage IPAM collections, configure IPAM database storage
5.Configure the Active Directory infrastructure
a.Configure a forest or a domain
Implement multi‐domain and multi‐forest Active Directory environments, including interoperability with previous versions of Active Directory; upgrade existing domains and forests, including environment preparation and functional levels; configure multiple user principal name ﴾UPN﴿ suffixes
b.Configure trusts
Configure external, forest, shortcut and realm trusts; configure trust authentication; configure SID filtering; configure name suffix routing
c.Configure sites
Configure sites and subnets, create and configure site links, manage site coverage, manage registration of SRV records, move domain controllers between sites
d.Manage Active Directory and SYSVOL replication
Configure replication to Read‐Only Domain Controllers ﴾RODCs﴿, configure Password Replication Policy ﴾PRP﴿ for RODC, monitor and manage replication, upgrade SYSVOL replication to Distributed File System Replication ﴾DFSR﴿
6.Configure Identity and Access Solutions
a.Implement Active Directory Federation Services ﴾AD FS﴿
Install AD FS; implement claims‐based authentication, including Relying Party Trusts; configure authentication policies; configure Workplace Join; configure multi‐factor authentication
b.Install and configure Active Directory Certificate Services ﴾AD CS﴿
Install an Enterprise Certificate Authority ﴾CA﴿, configure certificate revocation lists ﴾CRL﴿ distribution points, install and configure Online Responder, implement administrative role separation, configure CA backup and recovery
c.Manage certificates
Manage certificate templates; implement and manage certificate deployment, validation, and revocation; manage certificate renewal; manage certificate enrolment and renewal to computers and users using Group Policies; configure and manage key archival and recovery
d.Install and configure Active Directory Rights Management Services ﴾AD RMS﴿
Install a licensing or certificate AD RMS server, manage AD RMS Service Connection Point ﴾SCP﴿, manage RMS templates, configure Exclusion Policies, back up and restore AD RMS
Course Name :Designing and Implementing a Server Infrastructure(70-413)
Course Duration:1 month
Course Fees:8,000
Syllabus:
1.Plan and deploy a server infrastructure
a.Design and plan an automated server installation strategy
Design considerations including images and bare metal/virtual deployment; design a server implementation using Windows Assessment and Deployment Kit ﴾ADK﴿; design a virtual server deployment
Plan for deploying servers to Microsoft Azure infrastructure as a service ﴾IaaS﴿; plan for deploying servers to public and private cloud by using AppController and Windows PowerShell; plan for multicast deployment; plan for Windows Deployment Services ﴾WDS﴿
b.Implement a server deployment infrastructure
Configure multi‐site topology and transport servers; implement a multi‐server topology, including stand‐alone and Active Directory–integrated Windows Deployment Services ﴾WDS﴿ servers; deploy servers to Microsoft Azure IaaS; deploy servers to public and private cloud by using AppController and Windows PowerShell
c.Plan and implement server upgrade and migration
Plan for role migration; migrate server roles; migrate servers across domains and forests; design a server consolidation strategy; plan for capacity and resource optimisation
d.Plan and deploy Virtual Machine Manager services
Design Virtual Machine Manager service templates; plan and deploy profiles, operating system profiles, hardware and capability profiles, application profiles and SQL profiles; plan and manage services including scaling out, updating and servicing services; configure Virtual Machine Manager libraries; plan and deploy services to non‐trusted domains and workgroups
e.Plan and implement file and storage services
Planning considerations include iSCSI SANs, Fibre Channel SANs, Virtual Fibre Channel, storage spaces, storage pools including tiered storage and data de‐duplication; configure the Internet Storage Name server ﴾iSNS﴿; configure Services for Network File System ﴾NFS﴿; plan and implement SMB 3.0 based storage; plan for Windows Offloaded Data Transfer ﴾ODX﴿
2.Design and implement network infrastructure services
a.Design and maintain a Dynamic Host Configuration Protocol ﴾DHCP﴿ solution
Design considerations including a highly available DHCP solution including split scope, DHCP failover and DHCP failover clustering, DHCP interoperability, and DHCPv6; implement DHCP filtering; implement and configure a DHCP management pack; maintain a DHCP database
b.Design a name resolution solution strategy
Design considerations including Active Directory integrated zones, DNSSEC, DNS Socket Pool, cache locking, disjoint namespaces, DNS interoperability, migration to application partitions, IPv6, Single‐ Label DNS Name Resolution, zone hierarchy and zone delegation
c.Design and manage an IP address management solution
Design considerations including IP address management technologies including IPAM, Group Policy based, manual provisioning and distributed, centralised, hybrid placement and database storage; configure role‐based access control; configure IPAM auditing; migrate IPs; manage and monitor multiple DHCP and DNS servers; configure data collection for IPAM; integrate IPAM with Virtual Machine Manager ﴾VMM﴿
3.Design and implement network access services
a.Design a VPN solution
Design considerations including certificate deployment, firewall configuration, client/site to site, bandwidth, protocol implications, connectivity to Microsoft Azure IaaS and VPN deployment configurations using Connection Manager Administration Kit ﴾CMAK﴿
b.Design a DirectAccess solution
Design considerations including deployment topology, migration from Forefront UAG, One Time Password ﴾OTP﴿, and use of certificates issued by enterprise Certificate Authority ﴾CA﴿
c.Design a Web Application Proxy solution
Design considerations including planning for applications, authentication and authorisation, Workplace Join, devices, multifactor authentication, multifactor access control, single sign‐on ﴾SSO﴿, certificates, planning access for internal and external clients
d.Implement a scalable remote access solution
Configure site‐to‐site VPN; configure packet filters; implement packet tracing; implement multi‐site Remote Access; configure Remote Access clustered with Network Load Balancing ﴾NLB﴿; implement an advanced DirectAccess solution, configure multiple RADIUS server groups and infrastructure, configure Web Application Proxy for clustering
e.Design and implement network protection solution
Design considerations including Network Access Protection ﴾NAP﴿ enforcement methods for DHCP, IPSec, VPN, and 802.1x, capacity, placement of servers, firewall, Network Policy Server ﴾NPS﴿ and remediation network, configure NAP enforcement for IPsec and 802.1x, monitor for compliance Preparation resources
4.Design and implement an Active Directory infrastructure ﴾logical﴿
a.Design a forest and domain infrastructure
Design considerations including multi‐forest architecture, trusts, functional levels, domain upgrade, domain migration, forest restructure, Microsoft Azure Active Directory and DirSync
b.Implement a forest and domain infrastructure
Configure domain rename; configure Kerberos realm trusts; implement a domain upgrade; implement a domain migration; implement a forest restructure; deploy and manage a test forest including synchronisation with production forests
c.Design a Group Policy strategy
Design considerations including inheritance blocking, enforced policies, loopback processing, security and WMI filtering, site‐linked Group Policy Objects ﴾GPOs﴿, slow‐link processing, group strategies, organisational unit ﴾OU﴿ hierarchy, and Advanced Group Policy Management ﴾AGPM﴿, and Group Policy caching
d.Design an Active Directory permission model
Design considerations including Active Directory object security and Active Directory quotas; customise tasks to delegate in Delegate of Control Wizard; deploy administrative tools on the client devices; delegate permissions on administrative users ﴾AdminSDHolder﴿; plan for Kerberos delegation
4.Design and implement an Active Directory infrastructure ﴾physical﴿
a.Design an Active Directory sites topology
Design considerations including proximity of domain controllers, replication optimisation and site link; monitor and resolve Active Directory replication conflicts
b.Design a domain controller strategy
Design considerations including global catalogue, operations master roles, Read‐Only Domain Controllers ﴾RODCs﴿, partial attribute set, and domain controller cloning and domain controller placement
c.Design and implement a branch office infrastructure
Design considerations including RODC, Universal Group Membership Caching ﴾UGMC﴿, global catalogue, DNS, DHCP and BranchCache; implement confidential attributes; delegate administration; modify filtered attributes set; configure password replication policy; configure hash publication
Course Name :Implementing an Advanced Server Infrastructure(70-414)
Course Duration:1 month
Course Fees:8,000
Syllabus: