In this instructor-led course, students will gain the knowledge and skills IT professionals need to configure Identity and Access (IDA) solutions with Windows Server 2008 Active Directory. Students will get an overview of the technology of IDA and PKI solutions, and they will learn the details of implementing each of the roles in Windows Server 2008 that implement the IDA solution.

The course incorporates materials from the Official Microsoft Learning Product 6426: Configuring and Troubleshooting Identity and Access Solutions with Windows Server 2008 Active Directory.

What You'll Learn

• Explore IDA solutions
• Deploy and manage Active Directory Certificate Services (AD CS)
• Deploy and manage certificates
• Configure Active Directory Lightweight Directory Services (AD LDS)
• Configure Active Directory Federation Services (AD FS)
• Configure Active Directory Rights Management Services (AD RMS)
• Maintain access management solutions
• Troubleshoot IDA solutions

Who Needs to Attend

IT professionals who are interested in learning how to implement IDA solutions in an enterprise environment and who may be responsible for integrating applications and platforms with enterprise directory and security services.

Prerequisites

• Technical background knowledge of and hands-on experience with Active Directory Domain Services (AD DS from the AD TS foundation exam)
• Technical knowledge equivalent to Course 6123: Configuring Windows Server 2008 Active Directory Domain Services

• Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services (M6425)

Follow-On Courses

There are no follow-ons for this course.

Certification Programs and Certificate Tracks

This course is part of the following programs or tracks:

• MCTS: Windows Server 2008 Active Directory Configuration
• MCITP: Server Administrator
• MCITP: Enterprise Administrator

Course Outline

1. Exploring IDA Solutions

• The Business Case for Identity and Access Control
• Active Directory Server Roles in IDA Management
• Overview of Identity Lifecycle Manager 2007

2. Configuring Active Directory Certificate Services (AD CS)

• Overview of PKI
• Deploying a CA Hierarchy
• Installing AD CS
• Managing CA

3. Deploying and Managing Certificates

• Configuring Certificate Templates
• Deploying Certificates by Using AD CS
• Deploying Certificates by Using Autoenrollment
• Revoking Certificates
• Configuring Certificate Recovery

4. Configuring Active Directory Lightweight Directory Services (AD LDS)

• Installing and Configuring AD LDS
• Configuring AD LDS Instances
• Configuring AD LDS Replication
• Configuring AD LDS Integration with AD DS

5. Configuring Active Directory Federation Services (AD FS)

• Overview of AD FS
• AD FS Deployment Scenarios
• Deploying AD FS
• Implementing AD FS Claims

6. Configuring Active Directory Rights Management Services (AD RMS)

• Overview of AD RMS
• Installing and Configuring AD RMS Server Components
• Administering AD RMS
• Implementing AD RMS Trust Policies

7. Maintaining Access Management Solutions

• Supporting AD CS
• Maintaining AD LDS
• Maintaining AD FS
• Maintaining AD RMS

8. Troubleshooting Identity Access Solutions

• Troubleshooting AD CS
• Troubleshooting AD LDS
• Resolving AD FS Issues
• Solving AD RMS Issues

Labs

Lab 1: Exploring IDA Solutions

• Explore How Active Directory Server Roles will Provide IDA Management Solutions

Lab 2: Installing and Configuring AD CS

• Installing the AD CS Server Role
• Issuing and Installing a Subordinate Certificate
• Publishing the CRL

Lab 3: Deploying and Managing Certificates

• Configuring AD CS Certificate Templates
• Configuring AD CS Web Enrollment
• Configuring Certificate Autoenrollment
• Configuring AD CS Certificate Revocation
• Managing Key Archival and Recovery

Lab 4: Configuring AD LDS

• Configuring an AD LDS Instance and an Application Partition
• Configuring AD LDS Access Control
• Configuring AD LDS Replication
• Configuring AD DS and AD LDS Synchronization

Lab 5A: Configuring AD FS for Federated Web SSO by Using Forest Trust Scenario

• Installing the AD FS Server Role
• Configuring Certificate Requirements
• Installing the AD FS Web Agent
• Configuring the Web Server Application on a Virtual Computer
• Configuring the Forest Trust and the Federated Trust Policies
• Configuring the Federation Service within the Internal Network
• Configuring the Federation Service within the Extranet
• Testing the AD FS Implementation

Lab 5B: Configuring AD FS by Using the Federated Web SSO Scenario

• Installing the AD FS Server Role
• Configuring Certificate Requirements
• Configuring the AD FS Web Agent
• Configuring the Web Server Application on a Virtual Computer
• Configuring the Federation Trust Policies
• Configuring the Account Partner Federation Service
• Configuring the Resource Partner Federation Service
• Testing the AD FS Implementation

Lab 6: Configuring AD RMS

• Installing the AD RMS Server Role
• Managing AD RMS Rights Policy Templates
• Configuring Trust Policies
• Testing AD RMS Functionality

Lab 7: Maintaining Access Management Solutions

• Configuring CA Event Auditing
• Implementing Role-Based Administration in AD CS
• Backing up a CA
• Reconfiguring AD RMS Cluster Settings
• Generating AD RMS Reports
• Configuring AD RMS Logging

Lab 8: Troubleshooting IDA Solutions

• Identifying Tools and Troubleshooting Techniques of IDA Solutions