6426:
Configuring Identity and Access Solutions with Windows Server 2008
Active Directory
Three DayInstructor-led

Introduction
This three-day instructor-led course provides the knowledge and skills
that IT Professionals need to configure identity and access solutions
with Windows Server 2008 Active Directory.
Audience
The audience for this course is IT Professionals interested in IDA
solutions in their enterprise environment. Most students will be IT
professionals who are responsible for integrating applications and
platforms with enterprise directory and security services while
increasing access to a growing number of customers and partners.
At Course Completion
After completing this course, students will be able to:
Describe identity and access solutions.
Configure Active Directory Certificate Services.
Deploy and manage certificates.
Configure Active Directory Lightweight Directory Services.
Configure Active Directory Federation Services.
Configure Active Directory Rights Management Services.
Maintain access management solutions.
Troubleshoot identity and access solutions.
Prerequisites
This course requires that students meet the following prerequisites:
Technical knowledge equivalent to 6424: Fundamentals of Microsoft
Server 2008 Active Directory
Technical background knowledge and hands-on experience of Active
Directory Domain Services (AD DS from the AD TS foundation exam). This
includes technical knowledge equivalent to 6425A: Configuring Windows
Server 2008 Active Directory Domain Services
Course Outline
Module 1: Exploring Identity and Access Solutions
After completing this module, students will be able to explore identity
and access solutions.
Lessons
Overview of Identity and Access Management
Active Directory Server Roles in Identity and Access Management
Identity Lifecycle Manager
Lab: Exploring Identity and Access Solutions 2008
Exploring how Active Directory server roles will provide identity and
access management solutions
After completing this module, students will be able to:
Describe identity and access management.
Identify Active Directory server roles in identity and access
management.
Understand Identity Lifecycle Manager.
Module 2: Configuring Active Directory Certificate Services
After completing this module, students will be able to configure Active
Directory Certificate Services.
Lessons
Overview of Public Key Infrastructure
Deploying a Certification Authority Hierarchy
Installing Active Directory Certificate Services
Managing a Certification Authority
Lab: Configuring Active Directory Certificate Services
Installing AD CS as an Enterprise Root CA
Installing Enterprise Subordinate CA
Configuring CA
Configuring AD CS
After completing this module, students will be able to:
Describe Public Key Infrastructure.
Deploy a Certification Authority hierarchy.
Install Active Directory Certificate Services.
Manage a Certification Authority.
Module 3: Deploying and Managing Certificates
After completing this module, students will be able to deploy and manage
certificates.
Lessons
Deploying Certificates by Using AD CS
Deploying Certificates by Using Autoenrollment
Revoking Certificates
Configuring Certificate Templates
Configuring Certificate Recovery
Lab: Deploying and Managing Certificates
Issuing and Automating the Issuing of Certificates by Using AD CS
Managing Enrollment
Revoking Certificates
Configuring and Issuing Certificate Templates
Configuring Certificate Recovery
After completing this module, students will be able to:
Deploy certificates by using AD CS.
Use autoenrollment to deploy certificates.
Revoke certificates.
Configure certificate templates.
Configure certificate recovery.
Module 4: Configuring Active Directory Lightweight Directory Services
After completing this module, students will be able to configure Active
Directory Lightweight Directory Services.
Lessons
Installing and Configuring AD LDS
Configuring AD LDS Instances
Configuring AD LDS Replication
Configuring AD LDS Integration with AD DS
Lab: Configuring Active Directory Lightweight Directory Services
Installing and Configuring AD LDS
Creating AD LDS Partitions and Instances
Configuring AD LDS Replication Discussions about Exercise 1-3 results
After completing this module, students will be able to:
Install and configure AD LDS.
Configure AD LDS instances.
Configure AD LDS replication.
Configure AD LDS integration with AD DS.
Module 5: Configuring Active Directory Federation Services
After completing this module, students will be able to configure Active
Directory Federation Services.
Lessons
Overview of AD FS
AD FS Deployment Scenarios
Deploying AD FS
Implementing AD FS Claims
Lab: Configuring AD FS
Installing AD FS in the Partner and Account Organization
Configuring AD FS Proxy Servers
Configuring Web Application Server
Configuring Claims Aware Application
Testing the Functionality of AD FS
Installing Identity Management for UNIX (Server-only)
After completing this module, students will be able to:
Describe AD FS.
Understand AD FS deployment scenarios.
Deploy AD FS.
Implement AD FS claims.
Module 6: Configuring Active Directory Rights Management Services
After completing this module, students will be able to configuring
Active Directory Rights Management Services.
Lessons
Overview of AD RMS
Installing and Configuring AD RMS Server Components
Administering AD RMS
Implementing AD RMS Trust Policies
Lab: Configuring Active Directory Rights Management Services
Installing and Configuring AD RMS
Configuring ADRMS Client Settings and AD RMS Templates
Testing AD RMS Functionality
After completing this module, students will be able to:
Describe AD RMS.
Install and configure AD RMS server components.
Administer AD RMS.
Implement AD RMS trust policies.
Module 7: Maintenance of Access Management Solutions
After completing this module, students will be able to maintain access
management solutions.
Lessons
Support for AD CS
Maintenance of AD LDS
Long-term support for AD FS
Preservation of AD RMS
Lab: Maintaining Access Management Solutions
Maintaining AD CS
Maintaining AD LDS
Maintaining AD FS
Maintaining AD RMS
After completing this module, students will be able to:
Support AD CS.
Maintain AD LDS.
Provide long-term support for AD FS.
Preserve AD RMS.
Module 8: Troubleshooting Identity and Access Solutions
After completing this module, students will be able to Design Active
Directory disaster recovery in Windows Server 2008.
Lessons
Troubleshooting AD CS
Troubleshooting AD LDS
Troubleshooting AD FS
Troubleshooting AD RMS
Lab: Troubleshooting Active Directory Server Roles
Troubleshooting AD CS
Troubleshooting AD LDS
Troubleshooting AD FS
Troubleshooting AD RMS
After completing this module, students will be able to:
Troubleshoot AD CS.
Troubleshoot AD LDS.
Resolve AD FS issues.
Solve AD RMS problems.