How to best protect Active Directory in your organization. Alistair Holmes. Senior Systems Consultant

Size: px
Start display at page:

Download "How to best protect Active Directory in your organization. Alistair Holmes. Senior Systems Consultant"

Transcription

1 How to best protect Active Directory in your organization Alistair Holmes. Senior Systems Consultant

2 So where do we start? Lets break it down Security Management 2

3 Security concerns with Active Directory Protecting critical data and enforcing policies to eliminate unregulated access Granting users and administrators correct access to what they need nothing more Knowing what changed, when, and who made the change Overcoming reporting limitations to achieve necessary visibility and tracking 3

4 Management concerns with Active Directory Overcoming inadequacies of native tools Improving the efficiency of timeconsuming and error prone user and group creation and modification Reducing operational costs Improving reporting capabilities 4

5 So where do we start? 5

6 The Basics Always follow Microsoft Best Practices for Securing Active Directory Available from Microsoft website. 314 pages / 22 main bullet point. In a nutshell Patch everything. Monitor sensitive objects Eliminate highly privileged group membership Implement least-privilege RBAC Migrate critical assets to pristine forests with stringent security and monitoring requirements. (17/22) 6

7 Active Roles Active Roles is used globally to manage and secure more than 60 million Active Directory user accounts Active Roles is in use at more than 2,500 companies worldwide Product has been in existence since 2003 Deployments range in size from 250 to 800K+ users Complement and extend your identity and access management strategy 7

8 Active Roles 8

9 Employee management use case Managing the entire lifecycle of user and group identities is one of the most time-consuming IT tasks. Every time a new employee is hired, a current employee leaves the company or simply changes department, there are multiple of IT tasks that must be performed on various systems and applications. Most organizations find that it takes days or even weeks to fully grant access to everything a new user needs. That s a colossal waste of time and money 9

10 Employee account creation Organizational structure of Green company consists of one domain GREEN.COM distributed through several locations, having Users, Groups, and Computers organizational units in each city: NYC and Boston Company has the following policies configured (Configuration/Policies/Administration/Enterprise policies): Employee account creation: User logon name generation alias generation Home folder provisioning policies Exchange mailbox provisioning policy Property validation and generation for cn, displayname, UPN attributes, Office Location and Department Groups membership auto-provisioning 10

11 Create new employee 11

12 Assign users to groups Configure Configure Add user to groups and Add user distribution to groups lists and Grant access to distribution applications lists Assign Grant group access memberships to applications Assign group memberships and role Assign admin permissions and role Create Assign user admin accounts permissions Create connected user accounts systems. on connected systems. 12

13 Automated creation of Exchange properties 13

14 Employee account change or termination 14

15 Results 15

16 Employee undo-termination 16

17 Delegation of permissions use case Administrators are assigned to a particular role only have access to particular areas of AD, AD LDS, and/or DNS allowed in that role. As administrators are added or removed from these role templates, their access and responsibilities dynamically change, depending on which role they are assigned. Why does this matter? Natively if you have admin rights to AD, AD LDS, or DNS you have access and visibility into everything! So from a low-level help desk associate through to highlevel architects everyone has the same rights or privileges. The more people with total access - the greater the chance for human error or malicious intent. 17

18 Roles Based Delegation AD Architect Sr. Administrator Exchange Admins OU Admins / Help Desk End user Self-Service Application / Data Owners Day-to-Day Admin Mailbox Admin Service Desk Self-Service Full Control Create Mailbox, Move Mailbox App/Data Owners Create Users/Groups Create Groups Reset Passwords, Unlock Accounts Update personal Information Request Changes Change Group Membership Active Directory Computers Domain Controllers APAC EMEA North America AD LDS New York Mexico City ADAM Objects DNS Servers DNS Records Job Function Roles Access 18

19 Role-based administration Domain administrator wants to give delegated administrator Arthur Smith full access control to a single OU Service accounts" and all child objects of this OU. Domain administrator doesn't want him to be able to see any other OUs in the domain except this OU. Domain administrator runs Active Roles console. Domain administrator right-clicks on "Service accounts" OU in the domain tree and selects "Delegate control" option 19

20 Out of the box access templates Select the access template that will give delegated administrator the required level of access and nothing more 20

21 Example: Service accounts ASmith has full control access to Service accounts" OU, he can perform his daily tasks: create service accounts, modify them, reset passwords and so on within only this OU in the managed domain. 21

22 Rule-based administrative views Domain administrator wants to create Managed Unit that will include groups with employees from Boston and NYC without changing directory structure Delegates permissions to ASmith for managing groups 22

23 Rules Select rule membership and specify the rule 23

24 Escalation and approval with change workflow use case Use decision points in an automated workflow that are used to obtain authorization from a person before continuing the workflow. These decision points are approval, rejection, escalation and delegation. 24

25 Approval workflow Junior administrator Stefan Ellis needs to add a new employee John Smith to "Information services" group. Manager of this group, Lee Parker, must approve this operation. But he is not sure whether this new user should be the member of this group and he escalates this request to chief administrator James Miller You can browse for the ready workflow or configure it from scratch Go to Configuration -> Policies -> Workflow -> Demo -> Information services group demo 25

26 Workflow options and start conditions 26

27 Workflow object selection 27

28 Drag-and-drop "Approval" activity 28

29 Approvers selection 29

30 Notifications for workflow 30

31 Escalation 31

32 Recover: Be ready, because it s not if, it s when. Avoid data loss and maintain business continuity with recovery solutions for Active Directory including full forest backups for disaster recovery. Facilitate efficient searches and fast recovery of lost data, from a single object to an entire forest, Keep down time to a minimum and productivity maximized even in a disaster 32

33 Recovery Manager for Active Directory: Quick, Scalable Restore of Granular Objects 33

34 Recovery Manager Forest Edition: Completes your Forest Disaster Recovery Plan 34

35 Backup/Recovery Comparison 1 Backup remotely Determine what objects have changed/been deleted Windows 2003 Windows 2008 Windows 2008 R2/2012 Recovery Manager for Active Directory Undelete objects Undelete objects from graphical interface Online object restore including all attributes Online object restore without scripting Delegate data restore tasks at the container level Roll-back changes to objects Online restore of Group Policy Objects Restore dozens of deleted objects in under 10 minutes Centralized administration of backup/recovery Automated domain/forest 1 For recovery a full comparison, 2 please refer to FAQ: Windows Server 2012 Recycle Bin and Recovery Manager for AD 2 Domain and forest recovery require Recovery Manager for Active Directory Forest Edition. Creation of virtual lab with production data 35

36 A foundation for full IAM Identity Governance Complete, business-driven governance Access governance Data governance Privileged account governance Business-enabled access request and fulfillment Access Management Convenient, secure and compliant access Web access management Single sign-on and federation Directory and identity consolidation, migration and management Strong authentication Password management Dell One Identity Attestation and recertification Role engineering Automated enterprise provisioning Identity unification and process orchestration Privilege Management Understand and control administrator activity Enterprise privilege safe Least-privilege access Session management and keystroke logging Active Directory bridge Enforce separation of duties (SoD) 36

37 Extend Bring in other platforms Extend the unified authentication and authorization of Microsoft Active Directory to Unix, Linux and Mac systems Remove the stand-alone authentication and authorization requirement of native Unix in favor of the single identity, one account, single point of management 37

38 Unix management Privileged Access Suite for Unix Management Console for Unix AD Bridge Enhance Sudo Unix Delegation Replace Sudo 38

39 AD Bridge Centralized authentication Authenticate through AD Kerberos Consolidate identities & directories Eliminate non-secure authentication methods Extend AD Kerberos single sign-on Unix, Linux, and mac Standards-based applications Achieve single sign-on for SAP Configuration and administration Migrate and manage NIS data Leverage group policy for Unix, Linux and Mac Enhance password security Extend AD password policies Eliminate redundant, inconsistent, and nonsecure passwords Extend AD-based self-service password reset capabilities 39

40 Unix delegation Enhance sudo Central administration & management Centralized access reporting No new training required No need to update scripts & applications Replace sudo Central administration & management Centralized access reporting Advanced capabilities Restricts Shells Restricts remote host command execution Removes escape out 40

41 Repeat Stay nimble Implement a solid suite of solutions to ensure your infrastructure stays nimble and can meet the ever changing demands of the business and technology 41

42 Thank you How to best protect Active Directory in your organization

Infrastructure security Active Directory and beyond.

Infrastructure security Active Directory and beyond. Infrastructure security Active Directory and beyond. Konstantin Shurunov DLP-2010 2009 2010 Quest Software, Inc. ALL RIGHTS RESERVED Quest solutions & Financial industry. Financial organizations of all

More information

Quest One Identity Solution. Simplifying Identity and Access Management

Quest One Identity Solution. Simplifying Identity and Access Management Quest One Identity Solution Simplifying Identity and Access Management Identity and Access Management Challenges Operational Efficiency Security Compliance Too many identities, passwords, roles, directories,

More information

Installing, Configuring, and Managing a Microsoft Active Directory

Installing, Configuring, and Managing a Microsoft Active Directory Installing, Configuring, and Managing a Microsoft Active Directory Course Outline Part 1: Configuring and Managing Active Directory Domain Services Installing Active Directory Domain Services Managing

More information

PCI DSS Compliance: The Importance of Privileged Management. Marco Zhang marco_zhang@dell.com

PCI DSS Compliance: The Importance of Privileged Management. Marco Zhang marco_zhang@dell.com PCI DSS Compliance: The Importance of Privileged Management Marco Zhang marco_zhang@dell.com What is a privileged account? 2 Lots of privileged accounts Network Devices Databases Servers Mainframes Applications

More information

Quest Software Product Guide

Quest Software Product Guide Quest Software Product Guide Quest Software knows the expectations customers have for IT investments are not always met. That s why we develop innovative products that help our customers get more performance

More information

Softerra Adaxes Enterprise Directory Solution

Softerra Adaxes Enterprise Directory Solution Identity and Active Directory Management Softerra Adaxes Enterprise Directory Solution Product Profile make the complex simple Copyright Copyright Softerra, Ltd. Softerra, All rights Ltd. reserved. All

More information

Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services Course 6425B: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services Length: 5 Days Language(s): English Audience(s): IT Professionals Level: 200 Technology: Windows Server

More information

Cayosoft Administrator. Modern Administration. Cayosoft.com. Unify, Simplify and Secure Microsoft Administration. Features at a Glance

Cayosoft Administrator. Modern Administration. Cayosoft.com. Unify, Simplify and Secure Microsoft Administration. Features at a Glance Active Directory & Office 365 Administration has Never Been Easier! Microsoft Active Directory (AD) is at the center of most enterprise strategies for granting users and groups the correct access to resources

More information

Course 6425B: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

Course 6425B: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services Course 6425B: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services About this Course This five-day instructor-led course provides to teach Active Directory Technology Specialists

More information

Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services Course Number: 6425B Course Length: 5 Days Course Overview This five-day course provides to teach Active Directory Technology

More information

Course 6425C: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

Course 6425C: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services Course 6425C: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services Length: 5 Days Published: June 02, 2011 Language(s): English Audience(s): IT Professionals Level: 200

More information

6425C - Windows Server 2008 R2 Active Directory Domain Services

6425C - Windows Server 2008 R2 Active Directory Domain Services Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services Introduction This five-day instructor-led course provides in-depth training on configuring Active Directory Domain Services

More information

6.7. Administrator Guide

6.7. Administrator Guide 6.7 Administrator Guide 2010 Quest Software, Inc. ALL RIGHTS RESERVED. This guide contains proprietary information protected by copyright. The software described in this guide is furnished under a software

More information

Configuring and Troubleshooting Windows 2008 Active Directory Domain Services

Configuring and Troubleshooting Windows 2008 Active Directory Domain Services About this Course Configuring and Troubleshooting Windows This five-day instructor-led course provides in-depth training on implementing, configuring, managing and troubleshooting Active Directory Domain

More information

Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services Active Directory About this Course This five-day instructor-led course provides in-depth training on implementing, configuring, managing and troubleshooting (AD DS) in and R2 environments. It covers core

More information

Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services Course 6425C: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services Course Details Course Outline Module 1: Introducing Active Directory Domain Services This module provides

More information

Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services Course Number: 6425C Course Length: 5 Days Course Overview This five-day course provides in-depth training on implementing,

More information

Course 6425C: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

Course 6425C: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services www.etidaho.com (208) 327-0768 Course 6425C: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services 5 Days About this Course This five-day instructor-led course provides in-depth

More information

Administering Microsoft Exchange Server 2016 20345-1; 5 Days, Instructor-led

Administering Microsoft Exchange Server 2016 20345-1; 5 Days, Instructor-led Administering Microsoft Exchange Server 2016 20345-1; 5 Days, Instructor-led Course Description This 5-day instructor-led course teaches IT professionals how to administer and support Exchange Server 2016.

More information

ActiveRoles Server v 6.7

ActiveRoles Server v 6.7 ActiveRoles Server v 6.7 Slide Index Learning Objectives- Slide #3 Product Overview- Slides#4-9 Installation- Slides#16,17 Free Tools- Slides #18-22 Solutions-Slides #23,24 Role Delgation-Slides#25-30

More information

identity management in Linux and UNIX environments

identity management in Linux and UNIX environments Whitepaper identity management in Linux and UNIX environments EXECUTIVE SUMMARY In today s IT environments everything is growing, especially the number of users, systems, services, applications, and virtual

More information

Privileged Account Management Mar3n Cannard, Security Solu3ons Architect

Privileged Account Management Mar3n Cannard, Security Solu3ons Architect Privileged Account Management Mar3n Cannard, Security Solu3ons Architect Customer Use Cases - Introduc3on A US-based Natural Gas and Electric company serving multiple states Project Requirements Only grant

More information

MS-6425C - Configuring Windows Server 2008 Active Directory Domain Services

MS-6425C - Configuring Windows Server 2008 Active Directory Domain Services MS-6425C - Configuring Windows Server 2008 Active Directory Domain Services Table of Contents Introduction Audience At Clinic Completion Prerequisites Microsoft Certified Professional Exams Student Materials

More information

Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services Course Code: M6425 Vendor: Microsoft Course Overview Duration: 5 RRP: 2,025 Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services Overview This five-day instructor-led course

More information

ExecuTrain Course Outline Configuring & Troubleshooting Windows Server 2008 Active Directory Domain Services MOC 6425C 5 Days

ExecuTrain Course Outline Configuring & Troubleshooting Windows Server 2008 Active Directory Domain Services MOC 6425C 5 Days ExecuTrain Course Outline Configuring & Troubleshooting Windows Server 2008 Active Directory Domain Services MOC 6425C 5 Days Introduction This five-day instructor-led course provides in-depth training

More information

ADMINISTERING MICROSOFT EXCHANGE SERVER 2016

ADMINISTERING MICROSOFT EXCHANGE SERVER 2016 ADMINISTERING MICROSOFT EXCHANGE SERVER 2016 Table of Contents Prerequisite... 2 About Course... 2 Audience Profile... 2 At Course Completion... 3 Module 1: Deploying Microsoft Exchange Server 2016...

More information

Outline SSS6425 - Configuring and Troubleshooting Windows Server 2008 Active Directory

Outline SSS6425 - Configuring and Troubleshooting Windows Server 2008 Active Directory Outline SSS6425 - Configuring and Troubleshooting Windows Server 2008 Active Directory Duration: Four consecutive Saturdays About this Course This instructor-led course provides the knowledge and skills

More information

NE-6425C Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

NE-6425C Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services NE-6425C Configuring and Troubleshooting Windows Server 2008 Active Domain Services Summary Duration Vendor Audience 5 Days Microsoft IT Professionals Published Level Technology 02 June 2011 200 Windows

More information

Restructuring Active Directory Domains Within a Forest

Restructuring Active Directory Domains Within a Forest C H A P T E R 1 2 Restructuring Active Directory Domains Within a Forest Restructuring Active Directory directory service domains within a forest with the goal of reducing the number of domains allows

More information

Aurora Hosted Services Hosted AD, Identity Management & ADFS

Aurora Hosted Services Hosted AD, Identity Management & ADFS 22/09/2013 Aurora Hosted Services Hosted AD, Identity Management & ADFS 1 Service Overview - Hosted Identity Management Core provides a fully managed solution hosted in Azure and connected directly to

More information

Identity and Access Management Integration with PowerBroker. Providing Complete Visibility and Auditing of Identities

Identity and Access Management Integration with PowerBroker. Providing Complete Visibility and Auditing of Identities Identity and Access Management Integration with PowerBroker Providing Complete Visibility and Auditing of Identities Table of Contents Executive Summary... 3 Identity and Access Management... 4 BeyondTrust

More information

Blackbird Management Suite Blackbird Group, Inc. www.blackbird-group.com

Blackbird Management Suite Blackbird Group, Inc. www.blackbird-group.com PRODUCT ANALYSIS Blackbird Management Suite Blackbird Group, Inc. www.blackbird-group.com Analysis by Don Jones Senior Partner and Principal Technologist, Concentrated Technology www.concentratedtechnology.com

More information

Active Directory Objectives

Active Directory Objectives Exam Objectives Active Directory Objectives Exam 70 640: TS: Windows Server 2008 Active Directory, Configuring This certification exam measures your ability to manage Windows Server 2008 Active Directory

More information

Managing and Maintaining a Windows Server 2003 Network Environment

Managing and Maintaining a Windows Server 2003 Network Environment Managing and maintaining a Windows Server 2003 Network Environment. AIM This course provides students with knowledge and skills needed to Manage and Maintain a Windows Server 2003 Network Environment.

More information

6425C: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

6425C: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services 6425C: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services Course Details Course Code: Duration: Notes: 6425C 5 days This course syllabus should be used to determine whether

More information

Outline SSS6422 - Microsoft Windows Server 2008 Hyper-V Virtualization

Outline SSS6422 - Microsoft Windows Server 2008 Hyper-V Virtualization Outline SSS6422 - Microsoft Windows Server 2008 Hyper-V Virtualization Duration: Three consecutive Saturdays About this Course This instructor led course teaches students how to implement and manage Windows

More information

70-640 R4: Configuring Windows Server 2008 Active Directory

70-640 R4: Configuring Windows Server 2008 Active Directory 70-640 R4: Configuring Windows Server 2008 Active Directory Course Introduction Course Introduction Chapter 01 - Installing the Active Directory Role Lesson: What is IDA? What is Active Directory Identity

More information

Course 6425C: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

Course 6425C: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services Course 6425C: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services Five Days, Instructor-Led About this course This five-day instructor-led course provides in-depth training

More information

Stellar Active Directory Manager

Stellar Active Directory Manager Stellar Active Directory Manager What is the need of Active Directory Manager? Every organization uses Active Directory Services (ADMS) to manage the users working in the organization. This task is mostly

More information

How to monitor AD security with MOM

How to monitor AD security with MOM How to monitor AD security with MOM A article about monitor Active Directory security with Microsoft Operations Manager 2005 Anders Bengtsson, MCSE http://www.momresources.org November 2006 (1) Table of

More information

Course Outline. Course 6419 : Configuring, Managing and Maintaining Windows Server 2008-based Servers. Duration: 5 Days

Course Outline. Course 6419 : Configuring, Managing and Maintaining Windows Server 2008-based Servers. Duration: 5 Days Course 6419 : Configuring, Managing and Maintaining Windows Server 2008-based Servers Duration: 5 Days What you will learn This five-day instructor-led course provides students with the knowledge and skills

More information

Configuring and Troubleshooting Windows Server 2008 Active Directory Domain MOC 6425

Configuring and Troubleshooting Windows Server 2008 Active Directory Domain MOC 6425 Configuring and Troubleshooting Windows Server 2008 Active Directory Domain MOC 6425 Course Outline Module 1: Introducing Active Directory Domain Services This module provides an overview of Active Directory

More information

Real-world Identity and Access Management (IAM) for Unix-based Systems

Real-world Identity and Access Management (IAM) for Unix-based Systems Real-world Identity and Access Management (IAM) for Unix-based Systems Written by Jason Fehrenbach, senior product manager, Dell Abstract Unix systems face special identity and access management (IAM)

More information

How the Quest One Identity Solution Products Enhance Each Other

How the Quest One Identity Solution Products Enhance Each Other Better Together How the Quest One Identity Solution Products Enhance Each Other Written by Quest Software, Inc. Business Brief 2009 Quest Software, Inc. ALL RIGHTS RESERVED. This document contains proprietary

More information

MS 6419 Configuring, Managing and Maintaining Windows Server 2008-based Servers

MS 6419 Configuring, Managing and Maintaining Windows Server 2008-based Servers MS 6419 Configuring, Managing and Maintaining Windows Server 2008-based Servers Description: Days: 5 Prerequisites: This five-day instructor-led course provides students with the knowledge and skills that

More information

SMART Solutions for Active Directory Migrations

SMART Solutions for Active Directory Migrations SMART Solutions for Active Directory Migrations Challenges of Active Directory Migrations Types of Active Directory Migrations Intra- Forest Migration between Domains in the Same Forest Separate a Forest

More information

What s New Guide. Active Administrator 6.0

What s New Guide. Active Administrator 6.0 What s New Guide Active Administrator 6.0 2011 ScriptLogic Corporation ALL RIGHTS RESERVED. ScriptLogic, the ScriptLogic logo and Point,Click,Done! are trademarks and registered trademarks of ScriptLogic

More information

Implementing Microsoft Azure Infrastructure Solutions

Implementing Microsoft Azure Infrastructure Solutions Course Code: M20533 Vendor: Microsoft Course Overview Duration: 5 RRP: 2,025 Implementing Microsoft Azure Infrastructure Solutions Overview This course is aimed at experienced IT Professionals who currently

More information

Planning and Implementing Windows Server 2008

Planning and Implementing Windows Server 2008 Planning and Implementing Windows Server 2008 Course Number: 6433A Course Length: 5 Days Course Overview This five day course is intended for IT Professionals who are interested in the knowledge and skills

More information

IBM Tivoli Identity Manager

IBM Tivoli Identity Manager Automated, role-based user management and provisioning of user services IBM Tivoli Identity Manager Reduce help-desk costs and IT staff workload with Web self-service and password reset/synch interfaces

More information

Configuring, Managing and Maintaining Windows Server 2008-based Servers

Configuring, Managing and Maintaining Windows Server 2008-based Servers Course 6419B: Configuring, Managing and Maintaining Windows Server 2008-based Servers OVERVIEW About this Course This five-day instructor-led course provides students with the knowledge and skills that

More information

Course 6425C: Five days

Course 6425C: Five days CÔNG TY CỔ PHẦN TRƯỜNG CNTT TÂN ĐỨC TAN DUC INFORMATION TECHNOLOGY SCHOOL JSC LEARN MORE WITH LESS! Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services Course 6425C: Five

More information

Table Of Contents. - Microsoft Windows - WINDOWS XP - IMPLEMENTING & SUPPORTING MICROSOFT WINDOWS XP PROFESSIONAL...10

Table Of Contents. - Microsoft Windows - WINDOWS XP - IMPLEMENTING & SUPPORTING MICROSOFT WINDOWS XP PROFESSIONAL...10 Table Of Contents - - WINDOWS SERVER 2003 MAINTAINING AND MANAGING ENVIRONMENT...1 WINDOWS SERVER 2003 IMPLEMENTING, MANAGING & MAINTAINING...6 WINDOWS XP - IMPLEMENTING & SUPPORTING MICROSOFT WINDOWS

More information

Course 20533: Implementing Microsoft Azure Infrastructure Solutions

Course 20533: Implementing Microsoft Azure Infrastructure Solutions Course 20533: Implementing Microsoft Azure Infrastructure Solutions Overview About this course This course is aimed at experienced IT Professionals who currently administer their on-premises infrastructure.

More information

Course 6419B: Configuring, Managing and Maintaining Windows Server 2008-based Servers

Course 6419B: Configuring, Managing and Maintaining Windows Server 2008-based Servers Course 6419B: Configuring, Managing and Maintaining Windows Server 2008-based Servers Length: Delivery Method: 5 Days Instructor-led (classroom) About this Course This five-day instructor-led course provides

More information

Configuring Managing and Maintaining Windows Server 2008 Servers (6419B)

Configuring Managing and Maintaining Windows Server 2008 Servers (6419B) Configuring Managing and Maintaining Windows Server 2008 Servers (6419B) Who Should Attend This course is intended for Windows Server administrators who operate Windows Servers on a daily basis and want

More information

Tool Tip. SyAM Management Utilities and Non-Admin Domain Users

Tool Tip. SyAM Management Utilities and Non-Admin Domain Users SyAM Management Utilities and Non-Admin Domain Users Some features of SyAM Management Utilities, including Client Deployment and Third Party Software Deployment, require authentication credentials with

More information

How Cisco IT Migrated to Microsoft Active Directory

How Cisco IT Migrated to Microsoft Active Directory How Cisco IT Migrated to Microsoft Active Directory Automated migration and provisioning tools reduce cost of migrating to Active Directory and simplify training and troubleshooting. Cisco IT Case Study

More information

Designing and Implementing a Server Infrastructure

Designing and Implementing a Server Infrastructure Page 1 of 7 Overview This 5-day instructor-led course provides you with the skills and knowledge needed to plan, design, and deploy a physical and logical Windows Server 2012 Active Directory Domain Services

More information

University of Maryland Active Directory Policies

University of Maryland Active Directory Policies University of Maryland Active Directory Policies Purpose of this policy Scope AD Forest Forest Schema & Data Visibility Account and Group Synchronization Account Creation and Password Forest Security Principle

More information

ADSelfService Plus Client Software Installation Guide

ADSelfService Plus Client Software Installation Guide ADSelfService Plus Client Software Installation Guide ( I n s t a l l a t io n t h r o u g h A DS e l f S e r v ic e P l u s w e b p o r t a l a n d M a n u a l I n s t a l l a t io n ) 1 Table of Contents

More information

Centrify Server Suite Management Tools

Centrify Server Suite Management Tools SERVER SUITE TECHNICAL BRIEF Centrify Server Suite Management Tools Centrify Server Suite includes - at no extra charge - a powerful set of management tools in all editions: Centrify Identity Risk Assessor

More information

Active Directory Manager Pro 5.0.0.0 New Features

Active Directory Manager Pro 5.0.0.0 New Features Active Directory Manager Pro 5.0.0.0 New Features General Information: info@cionsystems.com Online Support: support@cionsystems.com CionSystems Inc. 16625 Redmond Way, Ste M106 Redmond, WA. 98052 http://www.cionsystems.com

More information

Open Directory. Apple s standards-based directory and network authentication services architecture. Features

Open Directory. Apple s standards-based directory and network authentication services architecture. Features Open Directory Apple s standards-based directory and network authentication services architecture. Features Scalable LDAP directory server OpenLDAP for providing standards-based access to centralized data

More information

6419: Configuring, Managing, and Maintaining Server 2008

6419: Configuring, Managing, and Maintaining Server 2008 6419: Configuring, Managing, and Maintaining Server 2008 Course Number: 6419 Category: Technical Duration: 5 days Course Description This five-day instructor-led course combines five days worth of instructor-led

More information

Configuring Windows Server 2008 Active Directory

Configuring Windows Server 2008 Active Directory Configuring Windows Server 2008 Active Directory Course Number: 70-640 Certification Exam This course is preparation for the Microsoft Technical Specialist (TS) exam, Exam 70-640: TS: Windows Server 2008

More information

LDAP Directory Integration with Cisco Unity Connection

LDAP Directory Integration with Cisco Unity Connection CHAPTER 6 LDAP Directory Integration with Cisco Unity Connection The Lightweight Directory Access Protocol (LDAP) provides applications like Cisco Unity Connection with a standard method for accessing

More information

COMPLETE COMPUTING, INC.

COMPLETE COMPUTING, INC. 6425: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services Five days; Instructor-Led Introduction This five-day instructor-led course provides to teach Active Directory

More information

EXCHANGE SERVER 2013 MESSAGING

EXCHANGE SERVER 2013 MESSAGING EXCHANGE SERVER 2013 MESSAGING WINDOWS SERVER 2012, 70-341, 70-342 Module-1: Introduction to Windows Server 2012 Overview of Windows Sever 2012 Installing Windows Server 2012 Configuring Windows Server

More information

Designing Windows Server 2008 Active Directory Infrastructure and Services Course 6436B; 5 Days, Instructor-led

Designing Windows Server 2008 Active Directory Infrastructure and Services Course 6436B; 5 Days, Instructor-led Designing Windows Server 2008 Active Directory Infrastructure and Services Course 6436B; 5 Days, Instructor-led Course Description During this five-day course, students will learn how to design an Active

More information

Course 6425C: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

Course 6425C: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services Course 6425C: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services Course OutlineModule 1: Introducing Active Directory Domain Services This module provides an overview

More information

Designing a Windows Server 2008 Active Directory Infrastructure and Services

Designing a Windows Server 2008 Active Directory Infrastructure and Services Course Code: M6436 Vendor: Microsoft Course Overview Duration: 5 RRP: 2,025 Designing a Windows Server 2008 Active Directory Infrastructure and Services Overview During this five-day course, delegates

More information

Chapter. Managing Group Policy MICROSOFT EXAM OBJECTIVES COVERED IN THIS CHAPTER:

Chapter. Managing Group Policy MICROSOFT EXAM OBJECTIVES COVERED IN THIS CHAPTER: Chapter 10 Managing Group Policy MICROSOFT EXAM OBJECTIVES COVERED IN THIS CHAPTER: Implement and troubleshoot Group Policy. Create a Group Policy object (GPO). Link an existing GPO. Delegate administrative

More information

M6419 Configuring, Managing and Maintaining Windows Server 2008 Servers

M6419 Configuring, Managing and Maintaining Windows Server 2008 Servers M6419 Configuring, Managing and Maintaining Windows Server 2008 Servers Looking at Training Differently... Course 6419A: Configuring, Managing and Maintaining Windows Server 2008 Servers Length: Published:

More information

MOC 6419: Configuring, Managing, and Maintaining Windows Server 2008

MOC 6419: Configuring, Managing, and Maintaining Windows Server 2008 1 of 6 1/6/2010 3:23 PM MOC 6419: Configuring, Managing, and Maintaining Windows Server 2008 This five-day instructor-led course combines five days worth of instructor-led training content from the Network

More information

Manufacturer to Enhance Efficiency with Improved Identity Management

Manufacturer to Enhance Efficiency with Improved Identity Management Microsoft Forefront: Security Products for Business Customer Solution Case Study Manufacturer to Enhance Efficiency with Improved Identity Management Overview Country or Region: United States Industry:

More information

Lesson Plans LabSim for Microsoft s Implementing a Server 2003 Active Directory Infrastructure

Lesson Plans LabSim for Microsoft s Implementing a Server 2003 Active Directory Infrastructure Lesson Plans LabSim for Microsoft s Implementing a Server 2003 Active Directory Infrastructure (Exam 70-294) Table of Contents Course Overview... 2 Section 1.1: Introduction to Active Directory... 3 Section

More information

Designing a Windows Server 2008 Active Directory Infrastructure and Services

Designing a Windows Server 2008 Active Directory Infrastructure and Services Designing a Windows Server 2008 Active Directory Infrastructure and Services MOC6436 About this Course At the end of this five-day course, students will learn how to design an Active Directory Infrastructure

More information

MOC 6436A: Designing Active Directory Infrastructure and Services in Windows Server 2008

MOC 6436A: Designing Active Directory Infrastructure and Services in Windows Server 2008 MOC 6436A: Designing Active Directory Infrastructure and Services in Windows Server 2008 Course Number: 6436A Course Length: 5 Days Course Overview At the end of this five-day course, students will learn

More information

Cabarrus County SharePoint Governance

Cabarrus County SharePoint Governance Cabarrus County SharePoint Governance Table of Contents Table of Contents... 2 Document Control... 3 Executive Summary... 3 Strategic Goals... 3 Roles and Responsibilities... 3 Operations and Support...

More information

6436: Designing a Windows Server 2008 Active Directory Infrastructure and Services (5 Days)

6436: Designing a Windows Server 2008 Active Directory Infrastructure and Services (5 Days) www.peaklearningllc.com 6436: Designing a Windows Server 2008 Active Directory Infrastructure and Services (5 Days) Introduction At the end of this five-day course, students will learn how to design an

More information

With ADManager Plus, there are no extra installations required, and no OPEX, no dependencies on other software!

With ADManager Plus, there are no extra installations required, and no OPEX, no dependencies on other software! Document Objective: This document focuses on several key areas related to account management, reporting, delegation where a considerable amount of savings can be achieved upon deployment of ManageEngine

More information

Course: Configuring and Troubleshooting Windows Server 2008 Active Direct-ory Domain Services

Course: Configuring and Troubleshooting Windows Server 2008 Active Direct-ory Domain Services Page 1 of 7 Course: Configuring and Troubleshooting Windows Server 2008 Active Direct-ory Domain Services Course 6425A Duration: 5 Days About this Course This five-day instructor-led course provides to

More information

Course Outline: 6433 _ Planning and Implementing Windows Server 2008 Clustering

Course Outline: 6433 _ Planning and Implementing Windows Server 2008 Clustering Course Outline: 6433 _ Planning and Implementing Windows Server 2008 Clustering Learning Method: Instructor-led Classroom Learning Duration: 5.00 Day(s)/ 40 hrs Overview: This five day course is intended

More information

M6425a Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

M6425a Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services M6425a Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services Course 6425A: Five days; Instructor-Led Introduction This five-day instructor-led course provides to teach Active

More information

MS 20341B: Core Solutions of Microsoft Exchange Server 2013

MS 20341B: Core Solutions of Microsoft Exchange Server 2013 MS 20341B: Core Solutions of Microsoft Exchange Server 2013 Description: In this course, students will learn to configure and manage a Microsoft Exchange Server 2013 messaging environment. This course

More information

10 Steps to Cleaning Up Active Directory User Accounts and Keeping Them That Way

10 Steps to Cleaning Up Active Directory User Accounts and Keeping Them That Way 10 Steps to Cleaning Up Active Directory User Accounts and Keeping Them That Way Written by Randy Franklin Smith, CEO of Monterey Technology Group, Inc. and CTO of LOGbinder Software Introduction AD security

More information

Microsoft. Official Course. Introduction to Active Directory Domain Services. Module 2

Microsoft. Official Course. Introduction to Active Directory Domain Services. Module 2 Microsoft Official Course Module 2 Introduction to Active Directory Domain Services Module Overview Overview of AD DS Overview of Domain Controllers Installing a Domain Controller Lesson 1: Overview of

More information

Configuring, Managing and Maintaining Windows Server 2008 Servers

Configuring, Managing and Maintaining Windows Server 2008 Servers Configuring, Managing and Maintaining Windows Server 2008 Servers Elements of this syllabus are subject to change Course Details Course Code: 6419 Duration: Notes: 5 day(s) This course syllabus should

More information

How to leverage SAP NetWeaver Identity Management and SAP Access Control combined solutions

How to leverage SAP NetWeaver Identity Management and SAP Access Control combined solutions How to leverage SAP NetWeaver Identity Management and SAP Access Control combined solutions Introduction This paper provides an overview of the integrated solution and a summary of implementation options

More information

Course 20341B: Core Solutions of Microsoft Exchange Server 2013 OVERVIEW

Course 20341B: Core Solutions of Microsoft Exchange Server 2013 OVERVIEW Course 20341B: Core Solutions of Microsoft Exchange Server 2013 OVERVIEW About this Course This course will provide you with the knowledge and skills to plan, deploy, manage, secure, and support Microsoft

More information

Using PowerBroker Identity Services to Comply with the PCI DSS Security Standard

Using PowerBroker Identity Services to Comply with the PCI DSS Security Standard White Paper Using PowerBroker Identity Services to Comply with the PCI DSS Security Standard Abstract This document describes how PowerBroker Identity Services Enterprise and Microsoft Active Directory

More information

Netwrix Auditor. Сomplete visibility into who changed what, when and where and who has access to what across the entire IT infrastructure

Netwrix Auditor. Сomplete visibility into who changed what, when and where and who has access to what across the entire IT infrastructure Netwrix Auditor Сomplete visibility into who changed what, when and where and who has access to what across the entire IT infrastructure netwrix.com netwrix.com/social 01 Product Overview Netwrix Auditor

More information

Build Your Knowledge!

Build Your Knowledge! About this Course This course will provide you with the knowledge and skills to plan, deploy, manage, secure, and support. This course will teach you how to configure Exchange and supply you with the information

More information

TOP. Steps to Success. TOP 10 Best Practices. Password Management With a Plan. www.avatier.com

TOP. Steps to Success. TOP 10 Best Practices. Password Management With a Plan. www.avatier.com Best Practices Allowing business users to manage their own password changes can significantly reduce help desk calls. Most importantly, having a centralized password management process and solution in

More information

Backup Exec 15: Administration

Backup Exec 15: Administration Course Code: VERIDP0137 Vendor: Veritas Course Overview Duration: 5 RRP: 2,540 Backup Exec 15: Administration Overview The Symantec Backup Exec 15: Administration course is designed for the data protection

More information

Core Solutions of Microsoft Exchange Server 2013 Course 20341A; 5 Days

Core Solutions of Microsoft Exchange Server 2013 Course 20341A; 5 Days Core Solutions of Microsoft Exchange Server 2013 Course 20341A; 5 Days Lincoln Land Community College Capital City Training Center 130 West Mason Springfield, IL 62702 217-782-7436 www.llcc.edu/cctc Course

More information

Implementing HIPAA Compliance with ScriptLogic

Implementing HIPAA Compliance with ScriptLogic Implementing HIPAA Compliance with ScriptLogic A ScriptLogic Product Positioning Paper By Nick Cavalancia 1.800.424.9411 www.scriptlogic.com Table of Contents INTRODUCTION... 3 HIPAA BACKGROUND... 3 ADMINISTRATIVE

More information

Administering the Web Server (IIS) Role of Windows Server

Administering the Web Server (IIS) Role of Windows Server Course 10972B: Administering the Web Server (IIS) Role of Windows Server Page 1 of 7 Administering the Web Server (IIS) Role of Windows Server Course 10972B: 4 days; Instructor-Led Introduction This course

More information

PowerBroker for Windows

PowerBroker for Windows PowerBroker for Windows Desktop and Server Use Cases February 2014 1 Table of Contents Introduction... 4 Least-Privilege Objectives... 4 Least-Privilege Implementations... 5 Sample Regulatory Requirements...

More information