MOC 20413C: Designing and Implementing a Server Infrastructure

Transcription

1 MOC 20413C: Designing and Implementing a Server Infrastructure Course Overview This course provides students with the knowledge and skills to provide an enterprise solution that supports manual and automated server installations in a physical and virtual environment including the supporting file and storage services. Course Introduction Course Introduction 7m Module 01 - Planning Server Upgrade and Migration Lesson 1: Considerations for Upgrades and Migrations Windows Server 2012 Editions Preinstallation Requirements In-Place Upgrade vs. Server Migration In-Place Upgrade Scenarios Benefits of Migrating Using MAP Toolkit to Plan for Upgrades and Migrations Planning For Server Consolidation Planning For Cloud Server Deployments Demo - Using the Microsoft Assessment and Planning Toolkit Lesson 2: Creating a Server Upgrade and Migration Plan Developing a Deployment Plan Windows Server 2012 Licensing and Activation Discussion: Planning Volume Activation Implementing Server Migrations Implementing Server Migrations Across Domains Deploying Servers in the Cloud Lesson 3: Planning for Virtualization Considerations for Implementing Virtualization Which Virtual Licenses Are Included? Guidelines for Configuring Hyper-V Hosts Guidelines for Designing Virtual Machines Designing Virtual Machines for Applications Best Practices for Planning Application Virtualization Discussion: Choosing Between Virtual and Physical Deployments Module 01 Review 1h 7m Module 02 - Planning and Implementing a Server Deployment Strategy Lesson 1: Selecting an Appropriate Server Deployment Strategy What Is the Windows Image File Format? Performing High-Touch with Retail Media Deployments Performing High-Touch with Standard Image Deployments Performing Lite-Touch High-Volume Deployments Performing Zero-Touch High-Volume Deployments 54m

2 Discussion: What Is Your Current Deployment Strategy? Why Use Automated Deployment Methods? Selecting an Image-Based Deployment Strategy Lesson 2: Implementing an Automated Deployment Strategy Overview of Image-Based Installation Tools Windows ADK for Windows 8.1 Windows DS Planning for Windows DS MDT 2013 Deploying Windows Server by Using Configuration Manager Choosing a Deployment Scenario Demo - Preparing the Windows Server 2012 Image Module 02 Review Module 03 - Planning and Deploying Servers Using Virtual Machine Manager Lesson 1: VMM Overview Virtual Machine Manager VMM Architecture Managing Hosts and Host Groups Demo - Adding Hosts to VMM Managing Non-Domain Joined Hosts Virtual Machine Storage VMM Networking VMM Fabric Management Demo - Managing the VMM Fabric VMM Planning Considerations Lesson 2: Implementing a Virtual Machine Manager Library and Profiles Virtual Machine Manager Libraries Planning Virtual Machine Manager Library Servers Configuring Hardware and Capability Profiles Configuring Guest Operating System Profiles Demo - Configuring Profiles Configuring Application Profiles and SQL Server Profiles Demo - Deploying Virtual Machines Using Profiles Planning Considerations for Implementing Profile Objects Lesson 3: Planning and Deploying VMM Services Virtual Machine Templates Service Templates Demo - Configuring Virtual Machine and Service Templates Designing Service Templates Updating and Servicing Service Templates Deploying Virtual Machines by Using App Controller Module 03 Review Module 04 - Designing and Maintaining an IP Configuration and Address Management Solution Lesson 1: Designing DHCP Servers DHCP Server Placement What Is DHCP Failover? Demo - Implementing DHCP Failover 1h 33m 1h 21m

3 Managing IPv6 with DHCP Guidelines for Designing a DHCP Solution Migrating the DHCP Server Role Lesson 2: Planning DHCP Scopes Determining DHCP Lease Length Implementing Superscopes Using Reservations Implementing DHCP Options Classes Lesson 3: Designing an IPAM Provisioning Strategy What Is IPAM? IPAM Components IPAM Deployment Requirements Demo - Deploying IPAM Managing DHCP and DNS Servers Demo - Integrating DHCP and DNS Servers with IPAM IPAM Management and Monitoring IPAM Deployment Topologies Capacity Planning for IPAM Lesson 4: Managing Servers and Address Spaces by Using IPAM Planning DHCP Server and Scope Management Planning DNS Server and Zone Management Planning Address Space Management Demo - Managing Address Spaces IPAM Integration with VMM Module 04 Review Module 05 - Designing and Implementing Name Resolution Lesson 1: Designing a DNS Server Implementation Strategy DNS Server Requirements Determining DNS Server Placement Selecting DNS Server Roles Security Considerations for DNS Servers Demo - Installing the DNS Server Role Lesson 2: Designing the DNS Namespace DNS Namespace Scenarios Choosing a Namespace Design Considerations for Hosting Namespaces Lesson 3: Designing DNS Zones Types of DNS Zones Discussion: Designing a DNS Zone Strategy Considerations for the GlobalNames Zone Demo - Creating DNS Zones Lesson 4: Designing DNS Zone Replication and Delegation When to Implement Secondary Zones What Are Zone Transfers and Replication? Planning Security for Zone Transfers Integrating Namespaces Demo - Configuring Zone Transfers Lesson 5: Optimizing DNS Servers Optimizing DNS Recursion 1h 49m

4 Optimizing DNS Root Hints Optimizing DNS Server Functionality Optimizing Active Directory-Integrated Zones Lesson 6: Designing DNS for High Availability and Security Best Practices for Making DNS Highly Available Common DNS Security Attacks Selecting a DNS Security Strategy Selecting Additional Security Settings DNSSEC In Windows Server 2012 Discussion: Guidelines for Designing DNS Security Module 05 Review Module 06 - Designing and Implementing an Active Directory Domain Services Forest and Domain Infrastructure Lesson 1: Designing an Active Directory Forest What Is an Active Directory Forest? Active Directory Forest Models Benefits of a Single Forest Model Considerations for Implementing Multiple Forests Guidelines for Designing an Active Directory Forest Infrastructure Discussion: Selecting a Suitable Forest Design Lesson 2: Designing and Implementing Active Directory Forest Trusts Characteristics of Forest Trusts Forest Trust Security Considerations Resource Access Guidelines for Designing Forest Trusts Demo - Creating a Forest Trust Lesson 3: Designing Active Directory Integration with Windows Azure Active Directory Windows Azure Active Directory Overview Windows Azure Active Directory Authentication Options for Integrating Authentication with On-Premises AD DS Designing Directory Synchronization Options for Managing Windows Azure Active Directory Accounts Lesson 4: Designing and Implementing Active Directory Domains Active Directory Domain Models Reasons for Deploying Multiple Domains Considerations for Deploying Dedicated Forest Root Domains Guidelines for Designing Active Directory Domains Demo - Implementing an Active Directory Domain Lesson 5: Designing DNS Namespaces in Active Directory Environments AD DS and DNS Integration Options for Designing an Active Directory Namespace Designing DNS Application Partitions Guidelines for Implementing DNS Servers into Active Directory Environments Lesson 6: Designing Active Directory Domain Trusts Trust Relationships Shortcut Trusts External Trusts and Realm Trusts Guidelines for Designing Active Directory Domain Trusts Module 06 Review 1h 58m

5 Module 07 - Designing and Implementing an AD DS Organizational Unit Infrastructure Lesson 1: Planning the Active Directory Administrative Tasks Delegation Model What Is an Active Directory Administrative Tasks Delegation Model? Typical IT Administrative Models Gathering Information on the Current Administrative Structures Gathering Information on Organizational Resources Planning Administrative Processes Gathering Information on Administrative Processes Considerations for Branch Office Delegation Lesson 2: Designing an OU Structure Strategies for Designing OUs How Administrative Permissions Work Designing OUs for Delegating Administrative Control Designing OUs for Applying GPOs Considerations for Designing OU Hierarchies Protecting OUs from Accidental Deletion Demo - Implementing OUs Lesson 3: Designing and Implementing an AD DS Group Strategy Active Directory Groups in Windows Server 2012 Developing an Active Directory Group Naming Strategy Strategies for Using Groups to Access Resources Considerations for Planning Group Administration Guidelines for Designing an Active Directory Group Strategy Demo - Creating and Managing Groups Module 07 Review 1h 18m Module 08 - Designing and Implementing a Group Policy Object Strategy Lesson 1: Collecting the Information Required for a GPO Design Collecting Organizational Information Collecting Information on Security Requirements Collecting Information on Desktop Management Requirements Collecting Information on Administrative Processes Lesson 2: Designing and Implementing GPOs Overview of Group Policy Settings Considerations for Designing Administrative Templates Managing GPO Storage Considerations for Designing Group Policy Preferences Best Practices for GPO Design Alternatives to Using GPOs Demo - Implementing GPOs Lesson 3: Designing GPO Processing Considerations for Designing Group Policy Inheritance Considerations for Designing Group Policy Filtering Understanding Slow Link Detection Considerations for Designing Group Policy Processing Demo - Configuring GPO Inheritance and Filtering Lesson 4: Planning Group Policy Management Considerations for Designing Backup and Recovery for Group Policy Considerations for Migrating GPOs Considerations for Designing Group Policy Administration 1h 32m

6 Demo - Managing GPOs Module 08 Review Module 09 - Designing and Implementing an AD DS Physical Topology Lesson 1: Designing and Implementing Active Directory Sites Benefits of Deploying Active Directory Sites Options for Designing AD DS Sites Collecting Information for an AD DS Site Design How Does Automatic Site Coverage Work? Considerations for Designing AD DS Sites Demo - Creating Site Objects Lesson 2: Designing Active Directory Replication Active Directory Replication Elements What Are the KCC and the Intersite Topology Generator? Options for Designing Replication Topologies Considerations for Choosing a Replication Protocol Planning Global Catalog and RODC Replication Planning for SYSVOL Replication Considerations for Designing Site Links and Bridgehead Servers Considerations for Designing Site Link Bridging Demo - Configuring Active Directory Replication Lesson 3: Designing the Placement of Domain Controllers Planning Hardware Requirements for Domain Controllers Considerations for Deploying Domain Controllers on the Server Core Considerations for Planning Domain Controller Locations Considerations for Planning Global Catalog Server Locations Considerations for Planning Operations Master Server Locations Guidelines for Monitoring Active Directory Domain Controllers Deploying Read-Only Domain Controllers in Branch Offices Considerations for Deploying Domain Controllers on Windows Azure Virtual Machines Lesson 4: Virtualization Considerations for Domain Controllers Considerations for Virtualizing Domain Controllers Securing Virtualized Domain Controllers Considerations for Deploying Virtualized Domain Controllers Cloning Domain Controllers Lesson 5: Designing Highly Available Domain Controllers Planning for High Availability Components of an Active Directory High Availability Design Considerations for Designing Highly Available Domain Controllers Considerations for Designing Highly Available Global Catalog Servers Considerations for Designing a Highly Available DNS Infrastructure Considerations for Designing a Highly Available Network Infrastructure Considerations for Backup and Recovery in AD DS Module 09 Review 1h 46m Module 10 - Planning and Implementing Storage and File Services Lesson 1: Planning and Implementing iscsi SANs SAN Components What Is iscsi? Comparing iscsi SANs with Fibre Channel SANs 1h 30m

7 iscsi Target Server and iscsi Initiator Options for Implementing High Availability for iscsi iscsi Security Options Demo - Implementing iscsi Considerations for Implementing iscsi Storage Lesson 2: Planning and Implementing Storage Spaces Storage Spaces Overview Planning Physical Storage for Storage Spaces Planning Storage Spaces Planning Storage Tiers Demo - Configuring Storage Spaces Planning High Availability for Storage Spaces Comparing iscsi with Storage Spaces Planning Storage Optimization in Windows Server 2012 R2 Lesson 3: Optimizing File Services for Branch Offices Considerations for Planning a DFS Namespace Considerations for Planning DFS Replication DFS Data Storage Scenarios Windows Server 2012 R2 and Windows Server 2012 Enhancements to DFS Windows Server 2012 R2 Enhancements Optimizing File Access by Using BranchCache Selecting a BranchCache Mode Demo - Configuring BranchCache Comparing DFS and BranchCache Module 10 Review Module 11 - Designing and Implementing Network Protection Lesson 1: Overview of Network Security Design What Network Threats Do Organizations Face? Overview of Network Attacks Key Principles of Network Security What Is the Defense-in-Depth Model? Mitigating Common Network Vulnerabilities The Process of Designing Security Network Security Policies and Procedures Risk Assessment and Impact Lesson 2: Designing and Implementing a Windows Firewall Strategy Scenarios Addressed by Windows Firewall Configuring Inbound and Outbound Rules IPsec Benefits and Usage Connection Security Rules Authentication Options and Methods Best Practices for Designing Connection Security Rules Demo - Configuring Connection Security Rules Lesson 3: Designing and Implementing a NAP Infrastructure Systems Health Agents and System Health Validators Considerations for Defining a NAP Policy Considerations When Defining Your SHV Settings Unsupported Platforms Considerations for Defining Your Network Policies 1h 48m

8 Considerations for Selecting an Enforcement Method Planning IPsec Enforcement for NAP Remediation Server Groups Demo - Implementing NAP Module 11 Review Module 12 - Designing and Implementing Remote Access Services Lesson 1: Planning and Implementing DirectAccess DirectAccess Components Windows Server 2012 R2 DirectAccess Options Configuration Changes in the Getting Started Wizard How a Simple DirectAccess Deployment Works Limitations of the Getting Started Wizard Planning the DirectAccess Tunnelling Protocol Planning PKI Integration with DirectAccess Planning Network Configuration Options Planning Network Location Servers Lesson 2: Planning and Implementing VPN Considerations for Implementing VPNs Selecting a Suitable Tunneling Protocol Selecting an Authentication and Encryption Method Planning a VPN Services Strategy Planning Network Policies Discussion: Designing Remote Access Demo - Implementing a VPN Planning Client Connectivity to VPNs Lesson 3: Planning and Implementing Web Application Proxy Web Application Proxy Overview Planning Authentication Options Planning for SSO Planning for Application Publishing Demo - Publishing a Secure Web Site Planning Workplace Join with Web Application Proxy Lesson 4: Planning a Complex Remote Access Infrastructure Planning a Highly Available Remote Access Infrastructure Planning Remote Access Capacity Planning Remote Access With Multiple Locations Planning Additional Authentication Options Planning Remote Access with Multiple Forests Planning a RADIUS Implementation Module 12 Review Course Closure 2h 8m Total Duration: 18h 50m