Identity with Windows Server 2016 (70-742)

Overview

This section gives the information about The 70-697 Configuring Windows Devices exam. It covers topics that are responsible for deploying, maintaining and supporting Windows desktops and other devices in a corporate or enterprise environment. It also covers the features that are designed for environments with a large quantity of computers.

Install / Configure Domain Controllers

This section introduces several fundamental components of an Active Directory Directory Services infrastructure. It also explains the difference between physical and logical AD DS components.

Install AD DS on Server Core

This section demonstrates how to install AD DS on Server Core.

Configuring a Global Catalog Server

This section demonstrates how to configure a global catalog server.

Manage DNS SRV Records

This section demonstrates how to manage DNS Service Records.

Transferring and Seizing FSMO Roles

This section discusses and demonstrate transferring as well as seizing FSMO Roles.

Domain Controller Cloning

This section discusses and demonstrate how to clone a Domain Controller.

Installing a Domain Controller using IFM

This section explains what it means to Install From Media (IFM) and when it may be optimal to do so.

Installing a Read Only Domain Controller

This section explains what a Read Only Domain Controller is and how to set it up. During the setup process factors such as security, budget and bandwidth play an important decision. It also demonstrates setup process step by step.

Managing Objects in AD DS

This section discusses what an object is and how different attributes and values can be set. It covers various tabs within the Active Directory Users. It also explains the purpose of a user profile and the different values that can be used for custom settings.

Advanced AD DS Infrastructure Mgmt

This section explains logical boundaries with in AD DS. It covers domain boundries such as replication, administration, Group Policy, audit and password/account policy boundaries. It also discusses Active Directory Management Tool (ADMT).

Configuring a Forest Trust Relationship

This section discusses AD DS Trust Types. It explains what is one-way, two-way, and transitive trusts. It demonstrates special and guest appearance.

Creating an External Trust

This section demonstrates how to configure trust relationships. It shows how to create an external trust. It also covers step by step process such as SID filtering and more.

Name Suffix Routing

This section covers name suffix routing. It is a mechanism for managing authentication requests route across forests joined with trusts. It demonstrates step by step walk through and explains how to allow or block authentication.

AD DS Sites and Replication

This section explains different partitions associated with AD DS. It shows the difference between configuration, schema, domain, and application partitions. It demonstrates how to use the ADSI edit tool.

Implementing Group Policy

This section introduces Group Policy. It covers fundamentals and explains use of group policy to get hands on experience. It demonstrates how to access local policy in a Windows 10 machine as well as domain policy on a domain controller to see how the interfaces differ. It walks thru the interface showing basics such as templates, RSOP and more. It shows the order of GPO inheritance and demonstrates how to block, link, and delegate those policies. It also covers how to re-link the default domain policy after blocking an OU level policy.

Managing User Settings with Group Policy

This section covers the ways to manage users via group policy. It explores administrative templates, .adml and .admx file extensions. It also demonstrates filter options and shows how to create a Policy definitions folder if not using a central share.

Securing AD DS

This section covers security awareness using AD DS. It explains Default Domain Policy vs Default Domain Controllers Policy. It also shows security settings in the Group Policy Manager.

Password Replication Policy for RODCs

This section discusses how to configure Password Replication Policy for RODCs. It shows the default allow and deny group settings. It demonstrates how to add a group to allow credential caching for both user user and computer accounts.

Deploying and Managing AD CS

This section introduces Active Directory Certificate Services. It defines components that make up a Public Key Infrastructure (PKI) . It discusses the differences between standalone and enterprise CA, configuring a root CA and how to create a CA via PowerShell.

Auto Enrollment and Key Archiving

This section discuss certificate services. It explains the ways to deploy and manage certificates. It covers how to create a Secure User template and how to link a certificate through group policy to set up auto enrollment. It also talks about what an enrollment agent is and how to configure it.

Install and Configure Online Responder

This section walks through the steps to configure the template for Online Certificate Status Protocol (OCSP) response. It also demonstrates how to add responder configurations.

Implementing and Administering AD FS

This section covers Active Directory Federation Services. It discusses its key terms and components. It shows how to install and configure ADFS. It also explains how to set up the claim provider trust.

Implementing and Administering AD RMS

This section introduces Active Directory Rights Management Service. It explains the concept and underpinning key architecture. It discusses components such as the AD RMS sever, client and AD RMS-enabled apps.

Maintain the AD DS

This section covers NTDS files and its locations. It uses NTDSUtil.exe to simulate a failure by shutting down the Domain Controller and removing the failed object, often called a metadata cleanup. It demonstrates how to create and use Active Directory snapshots and how to enable the Active Directory Recycle Bin.