Microsoft Official Course

20742B
Identity with Windows Server 2016
Welcome
Thank you for joining us today.
Weve worked together with the
Microsoft Partner Network and
Microsoft IT Academies to bring you
a world-class learning experience.
Microsoft Certified Trainers +
Instructors. Your instructor is a
premier technical and instructional
expert who meets ongoing
certification requirements.
Customer Satisfaction Guarantee.
Our partners offer a satisfaction
guarantee, and we hold them
accountable for it.
At the end of class, please complete
an evaluation of todays experience.
We value your feedback!
Certification Exam Benefits. After
training, consider pursuing a
Microsoft Certification to help
distinguish your technical expertise
and experience. Ask your instructor
about available exam promotions
and discounts.
We wish you a great learning
experience and ongoing career
success!
Hello! Instructor introduction

Instructor: <Name>
<Title or other credentials, e.g.
Microsoft Certified Trainer>
<Affiliation/Company>
<A few words about my technical
and professional experience>
Hello! Student introductions

Lets get acquainted:

Your name
Company affiliation
Title/function
Windows Server 2012 or Windows Server 2016
experience
Active Directory experience
Your expectations for the course
 Facilities

Class hours
Building hours
Parking
Restrooms
Meals
Phones
Messages
Smoking
Internet access
Recycling
Emergency procedures
About this course: Audience

Candidates who attend this course typically are IT professionals who:

Have some AD DS knowledge and experience and who aim to

develop knowledge about identity and access technologies in
Windows Server 2016. This would typically include:
AD DS administrators who want to train in identity and access technologies with
Windows Server 2016
System or infrastructure administrators with general AD DS experience and
knowledge who want to cross-train in core and advanced identity and access
technologies in Windows Server 2016
The secondary audience for this course includes IT professionals
who are looking to consolidate their knowledge about Active
Directory Domain Services (AD DS) and related technologies, in
addition to IT professionals who want to prepare for the 70-742
exam.
About this course: Prerequisites

Before attending this course, students should have:

Some exposure to and experience with AD DS concepts and technologies
in Windows Server 2012 or Windows Server 2016
Experience working with and configuring Windows Server 2012 or
Windows Server 2016
Experience with and an understanding of core networking technologies
such as IP addressing, name resolution, and Dynamic Host Configuration
Protocol (DHCP)
Experience working with and an understanding of Microsoft Hyper-V and
basic server virtualization concepts
An awareness of basic security best practices
Hands-on working experience with Windows client operating systems such
as Windows 7, Windows 8, Windows 8.1, or Windows 10
Basic experience with the Windows PowerShell command-line interface
About this course: Objectives

After completing this course, students will be able to:

Install and configure domain controllers
Manage objects in AD DS by using graphical tools and Windows
PowerShell
Implement AD DS in complex environments
Implement AD DS sites, and configure and manage replication
Implement and manage Group Policy Objects (GPOs)
Manage user settings by using GPOs
Secure AD DS and user accounts
Implement and manage a certificate authority (CA) hierarchy with AD CS
Deploy and manage certificates
Implement and administer Active Directory Federation Services (AD FS)
Implement and administer Active Directory Rights Management Services
(AD RMS)
Implement synchronization between AD DS and Azure AD
Monitor, troubleshoot, and establish business continuity for AD DS services
Your course materials

Designed to optimize your classroom learning experience

and support you back on the job

Microsoft Official Course handbook

Organized by modules
Includes Labs and Lab Answer Keys
Module Reviews and Takeaways
make great on-the-job references

Digital Companion Content

Supplemental content and helpful
links
Download at:
http://www.microsoft.com/learning/
companionmoc
Your course materials

Microsoft Official Course Handbook (Digital)

Access online using the Skillpipe reader by arvato, at
https://skillpipe.courseware-marketplace.com
/en-GB/Account/Login
Register/sign in and redeem your digital courseware
Easily add notes and comments, and highlight
content
Organized by module
Includes Labs and Lab Answer Keys
Module Reviews and Takeaways make great on-the-
job references

Digital Companion Content

Supplemental content and helpful links
Download at:
http://www.microsoft.com/learning/companionmoc
Course outline

Module 1
Installing and configuring domain controllers

Module 2
Managing objects in AD DS

Module 3
Advanced AD DS infrastructure management

Module 4
Implementing and administering AD DS sites and replication

Module 5
Implementing Group Policy

Module 6
Managing user settings with Group Policy
Course outline, continued

Module 7
Securing Active Directory Domain Services

Module 8
Deploying and managing AD CS

Module 9
Deploying and managing certificates

Module 10
Implementing and administering AD FS

Module 11
Implementing and administering AD RMS

Module 12
Implementing AD DS synchronization with Microsoft Azure AD

Module 13
Monitoring, managing, and recovering AD DS
Related Courses

20740: Installing, Storing, and Computing with Windows Server 2016

20741: Networking with Windows Server 2016
20743: Upgrading Your Skills to Windows Server 2016 MCSA
20744: Securing Windows Server 2016

See the full line of Microsoft Training and Certification

resources at: http://www.microsoft.com/learning/
Microsoft Certification Program

Get trained. Get certified.

Get ahead.
Microsoft Certifications demonstrate that Microsoft Certified
you have the skills to design, deploy, and Solutions Expert
optimize the latest technology solutions.
(MCSE)
Ask your Microsoft Learning Partner how you
can prepare for certification.

For more information about Microsoft Microsoft Certified

Certifications, go to:
Solutions Associate
http://www.microsoft.com/learning
/certification (MCSA)
 Windows Server 2016 certification path

MCSA: Windows Server 2016

Exam 70-740 Exam 70-741 Exam 70-742 Exam 70-743

Installation, Storage Networking with Identity with Upgrading Your

and Compute with Windows Server Windows Server Skills to MCSA:
Windows Server 2016 2016 Windows Server
2016 2016

OR

Course 20740B Course 20741B Course 20742B Course 20743B

Installation, Storage, Networking with Identity with Upgrading Your

and Compute with Windows Server Windows Server Skills to MCSA:
Windows Server 2016 2016 Windows Server
2016 2016
Preparing for the labs

Your lab activities will be centered around a fictitious company that we will call
A. Datum Corporation, through which you will learn how to:

Deploy and administer AD DS

Manage AD DS objects
Administer AD DS
Manage domains and trust in AD DS
Implement AD DS sites and replication
Implement a Group Policy infrastructure
Troubleshoot a Group Policy infrastructure
Manage user settings with GPOs
Secure AD DS
Deploy and configure a two-tier CA hierarchy
Deploy and use certificates
Implement AD FS
Implement an AD RMS infrastructure
Configure directory synchronization
Recover objects in AD DS
 VM environment

VM name: Use as:

20742B-LON-DC1 Domain controller in the Adatum.com domain

20742B-TOR-DC1 Domain controller in the Adatum.com domain (in

another site)
20742B-TREY-DC1 Domain controller in Treyresearch.com domain

20742B-LON-SVR1 Member server in the Adatum.com domain

20742B-LON-SVR2 Member server in the Adatum.com domain with Web

server role
20742B-CA-SRV1 Server not joined to the domain to be used as offline
root CA
20742B-LON-CL1 Windows 10 client with Microsoft Office 2016 installed

20742B-LON-CL2 Windows 10 client with Office 2016 installed

Microsoft Learning Azure Pass

You will use the Microsoft Learning Azure Pass to provide access to
Microsoft Azure for demonstrations and labs

Microsoft Learning Azure Pass access and configuration

Best practices for Microsoft Learning Azure Pass usage:

Check the dollar balance of your Azure Pass within Microsoft Azure after
you have set up your subscription, and be aware of how much you are
consuming as you proceed through the labs
Do not allow Microsoft Azure components to run overnight or for extended
periods unless you need to do so
Remove any Microsoft Azurecreated components or services such as
storage, virtual machines, or cloud services, after you finish your lab to
help minimize cost usage and extend the life of your Microsoft Learning
Azure Pass
WARNING You might experience UI discrepancies

Given the dynamic nature of Microsoft cloud tools, you

may experience Microsoft Office 365 and/or Azure user
interface (UI) changes that were made following
courseware development and that do not match up
with lab instructions.

The Microsoft Learning team will document these

changes for instructors as they are brought to our
attention. However, given the dynamic nature of cloud
updates, you may run into changes before we become
aware of them.

If this occurs, you will have to adapt to the changes and

work through them in the labs as necessary.
Demonstration: Using Microsoft Labs Online (optional)

In this demonstration, you will learn how to:

Access the Microsoft Labs Online lab environment
Switch between VMs

Read the online Lab Notes carefully, because some procedures

related to on-premises labs versus online labs may have slightly
different steps. Any differences will be called out in the Lab Notes.
Demonstration: Using Hyper-V Manager (optional)

In this demonstration, you will learn how to:

Open Hyper-V Manager
Navigate the various sections/panes within Hyper-V Manager:
VMs, snapshots, and actions (server-specific and VM-specific)
Identify the VMs that you will use in the labs for this course
Take a snapshot and apply a snapshot
Connect to a VM
Start and sign in to a VM
Switch between full screen and window modes
Revert to the previous snapshot
Shut down a VM
Know when to shut down versus turn off a VM
Close Hyper-V Manager