Title: Module 12: Implementing an Active Directory
1- Module 12 Implementing an Active Directory
Domain Services Infrastructure
2Module Overview
- Overview of the AD DS Deployment
- Planning a Group Policy Strategy
3Lesson 1 Overview of the AD DS Domain
- Overview of the Current AD DS Domain Design
- Overview of the Required AD DS Domain Design
- Overview of the AD DS Site Design
4Overview of the Current AD DS Domain Design
Forest Root Domain
WoodgroveBank.com
Asia.WoodgroveBank.com
EMEA.WoodgroveBank.com
5Overview of the Required AD DS Domain Design
Forest Root Domain
Separate Tree
WoodgroveBank.com
Contoso.com
Asia.WoodgroveBank.com
EMEA.WoodgroveBank.com
Contoso.com will join the WoodgroveBank forest in
a separate tree
6Overview of the AD DS Site Design
London_Site
New Site
NYC-Head-Office
NYC-Branch-Office
Tokyo_Site
Miami_Site
- Two new sites will be created
- Contoso site
- NYC-Branch-Office site
7Lesson 2 Planning a Group Policy Strategy
- Overview of the AD DS Domain Controller
Deployment - Overview of Forest Trust Relationships
8Overview of Domain Controller Deployment
New
London_Site
RODC NYC-DC3
NYC_Site
NYC-Branch-Office
New
ContosoDC
Tokyo_Site
Contoso
RODC
Miami_Site
9Lab A Deploying Active Directory Domain
Services
- Exercise 1 Installing an RODC onto Server Core
and Creating a Branch Office Site - Exercise 2 Creating a Domain in a Separate Tree
and Separate Site
Logon information
Virtual machine NYC-DC1, NYC-SRV1
User name Administrator
Password Paw0rd
Estimated time 120 minutes
10Lab A Review
- How do sites control logon traffic?
- What is the advantage of having separate trees in
the forest for Woodgrove Bank?
11Overview of Forest Trust Relationship
Forest Root Domain
Forest Root Domain
Separate Tree
Forest Trust
WoodgroveBank.com
Contoso.com
Fabrikam.com
Asia.WoodgroveBank.com
EMEA.WoodgroveBank.com
The Fabrikam.com forest will have a forest trust
relationship with the WoodgroveBank forest
12Lab B Configuring Forest Trusts
- Exercise Upgrading the Fabrikam Domain and
Create a Forest Trust with Woodgrove Bank
Logon information
Virtual machine NYC-DC1, NYC-DC2, VAN-DC1, NYC-SRV1, NYC-RAS
User name Administrator
Password Paw0rd
Estimated time 60 minutes
13Lab B Review
- What tasks must be performed before a Windows
Server 2008 can be added to a Windows 2003 domain
as a member server? - What tasks must be performed before a Windows
Server 2008 can be added to a Windows 2003 domain
as a domain controller?
14Overview of the AD DS Group Policy Object Design
15Lab C Designing a Group Policy Strategy
- Exercise 1 Planning Group Policies
- Exercise 2 Planning a Group Policy Strategy
Logon information
Virtual machine NYC-DC1
User name Administrator
Password Paw0rd
Estimated time 30 minutes
16Lab C Review
- How would you ensure that a policy will always be
applied? - How would you exempt certain users or computers
from being affected by a GPO?
17Module Review and Takeaways
18Beta Feedback Tool
- Beta feedback tool helps
- Collect student roster information, module
feedback, and course evaluations. - Identify and sort the changes that students
request, thereby facilitating a quick team
triage. - Save data to a database in SQL Server that you
can later query. - Walkthrough of the tool
19Beta Feedback
- Overall flow of module
- Which topics did you think flowed smoothly, from
topic to topic? - Was something taught out of order?
- Pacing
- Were you able to keep up? Are there any places
where the pace felt too slow? - Were you able to process what the instructor said
before moving on to next topic? - Did you have ample time to reflect on what you
learned? Did you have time to formulate and ask
questions? - Learner activities
- Which demos helped you learn the most? Why do you
think that is? - Did the lab help you synthesize the content in
the module? Did it help you to understand how you
can use this knowledge in your work environment? - Were there any discussion questions or reflection
questions that really made you think? Were there
questions you thought werent helpful?
20Course Evaluation