The primary product focus is on Microsoft Windows Server™ 2003 based infrastructure solutions but will include some client focused content where appropriate. This learning product is to provide functional skills in planning and implementing infrastructure security.

Prerequisites

• Course 2810: Fundamentals of Network Security or have equivalent knowledge and skills.
• Experience Implementing a Windows 2000 or Windows Server 2003 Active Directory Environment, Experience with organizational resources such as Web, FTP and Exchange servers, (not expected to have detailed knowledge) shared resources and network services such as DHCP, DNS, and WINS also helpful.

This course will help the student prepare for the following Microsoft Certified Professional exam:

·         Exam 70299: Implementing and Administering Security in a Microsoft Windows Server 2003 Network

Skills Gained

At the end of the course, students will be able to:

·         Determine the necessary group structure for a multi-domain or multi-forest environment.

·         Create trusts in a MS Windows Server 2003 environment.

·         Plan, implement, and maintain an authorization and authentication strategy in a multi-forest organization.

·         Plan and implement an authorization and authentication strategy in a multi-forest organization.

·         Install a certification authority (CA).

·         Create and publish Certificate Revocation Lists and Authority Information Access (AIA) distribution points.

·         Back up and restore a certification authority.

·         Configure certificate templates.

·         Deploy and revoke certificate templates.

·         Manage certificate templates.

·         Implement EFS in a standalone Microsoft Windows XP Environment.

·         Plan and implement EFS in a domain environment that uses public key infrastructure (PKI).

·         Implement EFS file sharing.

·         Troubleshoot EFS problems.

·         Plan for data transmission security.

·         Implement secure data transmission methods.

·         Troubleshoot data transmission errors.

·         Install ISA Server 2000.

·         Secure a screened subnet with ISA Server 2000.

·         Publish servers.

·         Plan a remote access strategy.

·         Implement and configure a VPN server.

·         Deploying network access Quarantine control components.

·         Plan a secure member server baseline.

·         Configuring additional security settings.

·         Deploy security templates.

·         Plan and configure a secure baseline for a server roles.

·         Plan, implement, and troubleshoot a smart card infrastructure.

·         Plan a secure client computer baseline.

·         Configure and deploy a client computer baseline.