MOC-2820 Implementing and Administering Security in a Microsoft® Windows® 2000 Network

TEMARIO Y CONTENIDOS

Implementing and Administering Security in a Microsoft Windows 2000 Network

MOC-2820

Introduction

This five-day instructor-led course provides students with the knowledge and skills required to implement and administer security services on Windows® 2000.

Audience

Attendees will be current information technology (IT) professionals close to completion of the MCSA, partial or completed MCSE certifications, or equivalent experience. The students will be in an environment where they are responsible for aspects of security management and deployment associated with their internal network infrastructure and services available from the Internet.

This course is intended for IT professionals who need to design, plan, implement, and support a Microsoft Windows 2000 network infrastructure or who plan to take the related Microsoft Certified Professional exam 70-214, Implementing and Administering Security in a Microsoft Windows 2000 Network.

At Course Completion

After completing this course, students will be able to:

•

Implement Group Policy.

•

Create and work with user accounts and security groups.

•

Implement account policies and security templates.

•

Administer account based security.

•

Install and maintain certificate authorities.

•

Manage a public key infrastructure (PKI).

•

Secure early versions of Windows clients.

•

Configure and troubleshoot IPSec.

•

Secure remote access and VPNs.

•

Configure wireless security.

•

Secure public application servers.

•

Secure Web services.

•

Monitor events and intruder detection.

•

Maintain software, service pack, and hotfix deployments.

Prerequisites

Before attending this course, students must have:

•

Familiarity with Windows 2000 core technologies, such as those described in the following Microsoft Official Curriculum (MOC) course:

•

Course 2152: Implementing Microsoft Windows 2000 Professional and Server

•

Familiarity with Windows 2000 networking technologies, such as those described in the following MOC course:

•

Course 2153: Implementing a Microsoft Windows 2000 Network Infrastructure

•

Familiarity with Windows 2000 directory services technologies, such as those described in the following MOC course:

•

Course 2154: Implementing and Administering Microsoft Windows 2000 Directory Services

•

Familiarity with fundamental network security technologies, such as those described in the following MOC course:

•

Course 2810: Fundamentals of Network Security, or equivalent knowledge

Microsoft Certified Professional Exams

This course will help the student prepare for the following Microsoft Certified Professional exam:

•

Exam 70-214: Implementing and Administering Security in a Microsoft Windows 2000 Network

Course Materials

The student kit includes a comprehensive workbook and other necessary materials for this class.

Course Outline

Module 1: Implementing Group Policy

•

Introducing Active Directory® and Group Policy

•

Configuring and Managing Group Policy

•

Configuring Client Computer Security Policy

•

Troubleshooting Group Policy Application

Module 2: Creating User Accounts and Security Groups

•

Creating and Managing Local User Accounts and Security Groups

•

Creating and Managing Active Directory Domain Accounts and Security Groups

Module 3: Restricting Accounts, Users, and Groups

•

Introducing Account Policies

•

Managing User Rights

•

Using Restricted Groups

•

Administering Security Templates

Module 4: Configuring Account Based Security

•

Managing NTFS File System Permissions

•

Implementing Share Security

•

Implementing Audit Policies

•

Securing the Registry

Module 5: Managing Certificate Authorities

•

Introducing Certificates

•

Implementing Windows 2000 Certificate Services

•

Maintaining Certificate Authorities

Module 6: Managing a Public Key Infrastructure

•

Deploying Computer Certificates

•

Deploying User Certificates

•

Deploying Smart Card Certificates

•

Deploying S/MIME Certificates

Module 7: Increasing Authentication Security

•

Supporting Earlier Versions of Windows Clients

•

Supporting Macintosh Clients

•

Configuring Trust Relationships

Module 8: Implementing IP Security

•

Configuring IPSec Within a Domain

•

Configuring IPSec Between Untrusted Networks

•

Configuring IPSec on Internet Servers

•

Troubleshooting IPSec Configuration

Module 9: Securing Remote Access and VPN

•

Securing RRAS Servers

•

Managing RRAS Authentication

•

Securing Remote Clients

•

Securing Communications Using a VPN

Module 10: Configuring Clients for Wireless Security

•

Setting Up a Wireless Network

•

Securing Wireless Networks

•

Configuring Clients for Wireless Security

Module 11: Securing Public Application Servers

•

Securing Public Services

•

Providing Internet Security

•

Configuring Microsoft SQL Server™ for Internet Security

•

Securing Microsoft Exchange Server for the Internet

Module 12: Implementing Web Service Security

•

Configuring Public Web Servers

•

Configuring Web Authentication

•

Using Secure Sockets Layer to Encrypt Communications

Module 13: Detecting Intrusions and Monitoring Events

•

Establishing Intrusion Detection for Public Servers

•

Event Monitoring in the Private Network

Module 14: Maintaining Software

•

Installing and Managing Service Packs and Hotfixes

•

Automating Updates with Microsoft Software Update Services

•

Deploying Updates Throughout the Network

v