Course 6425B - Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

Class Overview and Prerequisites
6425 Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services

Lesson 1

Max Number of Objects in AD

http://technet.microsoft.com/en-us/library/active-directory-maximum-limits-scalability(WS.10).aspx

RODC info

adprep http://technet.microsoft.com/en-us/library/cc731728(WS.10).aspx

http://technet.microsoft.com/en-us/library/cc731970(WS.10).aspx

http://technet.microsoft.com/en-us/library/cc771055(WS.10).aspx

http://technet.microsoft.com/en-us/library/cc754889(WS.10).aspx

Lesson 2
How to create OU with script
http://msdn.microsoft.com/en-us/library/aa705902(VS.85).aspx

Lesson 3

You can change the complex password requirements by a password filter

 http://msdn.microsoft.com/en-us/library/ms813420

Fine Grained Password Policy

http://technet.microsoft.com/en-us/library/cc770842(WS.10).aspx

Lesson 5
Reset LSA secret on computer accounts
http://support.microsoft.com/kb/216393

Lesson 6
Copy GPO from forest to forest or domain to domain

http://msdn.microsoft.com/en-us/library/aa814314(VS.85).aspx

UAC control with GPO

http://technet.microsoft.com/en-us/library/cc709628(WS.10).aspx

Change GPO refresh interval

http://technet.microsoft.com/en-us/library/cc757597(WS.10).aspx

http://www.windowsecurity.com/articles/Controlling-Group-Policy-Security-Settings-Refresh-Application.html

Group Policy Settings Reference for Windows and Windows Server

http://www.microsoft.com/downloads/details.aspx?FamilyID=18c90c80-8b0a-4906-a4f5-ff24cc2030fb&displaylang=en

Starter GPO

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=ae3ddba7-af7a-4274-9d34-1ad96576e823

Great web site on GPO - great reminder from Derek Rose - thank you

http://www.gpoguy.com/

GPO documentation

http://gps.cloudapp.net/

Lesson 7
Security Configuration and Analysis Tool Step by Step Guide
http://technet.microsoft.com/en-us/library/bb742512.aspx

Lesson 8
Active Directory Auditing Guidelines

AD DS Auditing Step-by-Step Guide

http://technet.microsoft.com/en-us/library/cc731607(WS.10).aspx

Lesson 11
DFS-R FAQ
http://technet.microsoft.com/en-us/library/cc773238(WS.10).aspx
NTDSUTIL
http://support.microsoft.com/kb/255504
RODC
http://technet.microsoft.com/en-us/library/cc732801(WS.10).aspx
Conversion SYSVOL from FRS to DFS Replication
http://technet.microsoft.com/en-us/library/dd641227(WS.10).aspx
SYSVOL migration states
http://technet.microsoft.com/en-us/library/dd641052(WS.10).aspx

Lesson 12

REPADMIN examples
http://technet.microsoft.com/en-us/library/cc773062(WS.10).aspx
Display replication partners
repadmin /showrepl hqdc01.contoso.com
Start a replication event between two replication partners
repadmin /replicate hqdc01.contoso.com hqdc02.contoso.com dc=contoso,dc=com
Start a replication event between all replication partners
repadmin /syncall hqdc01.contoso.com dc=contoso,dc=com
Show connections objects
repadmin /showconn hqdc01.contoso.com
Show replication status in forest
repadmin /replsummary

Extras
Domain Rename
http://technet.microsoft.com/en-us/library/cc794919(WS.10).aspx

FSMO Placement
http://technet.microsoft.com/en-us/library/cc754889(WS.10).aspx
Find all GC's using powershell or dsquery server -forest -isgc

• $forestinfo = [system.directoryservices.activedirectory.forest]::getcurrentforest()
• $forestinfo.findallglobalcatalogs()

http://exchangeshare.wordpress.com/2008/04/05/powershell-forest-information-find-all-gcs/
AD PREP
http://technet.microsoft.com/en-us/library/cc782481(WS.10).aspx
http://technet.microsoft.com/en-us/library/dd464018(WS.10).aspx
AD cleanup
http://support.microsoft.com/kb/216498

Additional Reading
http://www.pbbergs.com/windows/windows.htm