One Day Course, Offered two days

Mon, July 29 & Tues, July 30

A comprehensive one day course, Using Active Directory to Manage Security explores the most powerful, yet least understood, part of Windows 2000- Active Directory. Active Directory is the place to manage some of the most significant aspects of your security infrastructure, but its functionality is often underutilized or misunderstood.

This will be a “from the ground up” training session, covering:

• Active Directory Components, both logical and “physical”, providing the basis for AD design structures
• Group Policy, perhaps the single most powerful functionality provided by Active Directory, including
  • Organizational Unit structures and effective design for both delegation of administration and effective application of Group Policy
  • Security Policy Deployment using Group Policy and .inf files
  • Customization of .inf files to extend the capabilities of Group Policy’s security settings
  • Patch Deployment via Group Policy using .msi files
  • IPSec Policies for automatic deployment of IPSec encryption functionality
    
• Security-Sensitive Accounts, including all of the built-in administrative accounts and groups (Administrators, Domain Admins, Enterprise Admins and Schema Admins), why you should be concerned about them, and how to secure them
• Common Weaknesses in Active Directory Design and how to avoid them
• Active Directory and NetworkAuditing, without which your security might as well be nonexistent

This is a hands-on course, and all attendees are expected to bring a laptop and Windows 2000 Server or Advanced Server CD, as we will be building an Active Directory infrastructure in class and testing the results of the policies and settings we implement.