Securing Windows Server 2016

1. Attacks, Breach Detection, and Sysinternals Tools
   • Understanding attacks
   • Detecting security breaches
   • Examining activity with the Sysinternals tools
2. Protecting Credentials and Privileged Access
   • Understanding User Rights
   • Computer and Service Accounts
   • Protecting Credentials
   • Privileged Access Workstations and jump servers
   • Local administrator password solution
3. Limiting Administrator Rights with Just Enough Administration (JEA)
   • Understanding JEA
   • Verifying and Deploying JEA
4. Privileged Access Management and Administrative Forest
   • ESAE forests
   • Overview of Microsoft Identity Manager (MIM)
   • Overview of JIT administration and PAM
5. Mitigating Malware and Threats
   • Configuring and Managing Windows Defender
   • Restricting software
   • Configuring and Using Device Guard
6. Analyzing Activity with Advanced Auditing and Log Analytics
   • Overview of Auditing
   • Advanced Auditing
   • Windows PowerShell Auditing and Logging
7. Deploying and Configuring Advanced Threat Analytics (ATA) and Operations Management Suite (OMS)
   • Deploying and configuring ATA
   • Deploying and configuring Microsoft Operations Management Suite
   • Deploying and configuring Azure Security Center
8. Secure Virtualization Infrastructure
   • Guarded Fabric
   • Shielded and Encryption-Supported VMs
9. Securing Application Development and Server-Workload Infrastructure
   • Using Security Compliance Manager
   • Understanding Containers
10. Planning and Protecting Data
    • Planning and Implementing Encryption
    • Planning and Implementing BitLocker
    • Protecting data by using Azure Information Protection
11. Optimizing and Securing File Services
    • Introduction to FSRM
    • Implementing Classification and File-Management Tasks
    • Access Control (DAC)
12. Securing Network Traffic with Firewalls and Encryption
    • Understand network-related security threats
    • Understanding Windows Firewall with Advanced Security
    • Configuring IPsec
    • Datacenter Firewall
13. Securing Network Traffic
    • Configuring Advanced DNS Settings
    • Examining Network Traffic with Microsoft Message Analyzer
    • Securing Server Analyzing SMB Traffic

• Secure Windows Server
• Protect credentials and implement privileged access workstations.
• Limit administrator rights with Just Enough Administration.
• Manage privilege access
• Mitigate malware and threats
• Analyze activity with advanced auditing and log analytics.
• Deploy and configure Advanced Threat Analytics and Microsoft Operations Management Suite.
• Configure Guarded Fabric virtual machines (VMs).
• Use the Security Compliance Toolkit (SCT) and containers to improve security.
• Plan and protect data.
• Optimize and secure file services.
• Secure network traffic with firewalls and encryption.
• Secure network traffic by using DNSSEC and Message Analyzer.

• Lab 1: Basic Breach Detection and Incident Response Strategies
• Lab 2: Implementing User Rights, Security Options, and Group-Managed Service Accounts
• Lab 3: Configuring and Deploying LAPs
• Lab 4: Limiting Administrator Privileges with JEA
• Lab 5: Limiting Administrator Privileges with Privileged Access Management
• Lab 6: Securing Applications by with Windows Defeder, AppLocker, , Device Guard Rules.
• Lab 7: Configuring Advanced Auditing
• Lab 8: Deploying Advanced Threat Analytics and Operations Management Suite and Azure Security Center
• Lab 9: Guarded Fabric with Administrator-Trusted Attestation and Shielded VMs
• Lab 10: Using Security Compliance Manager
• Lab 11: Deploying and Configuring Containers
• Lab 12: Protecting Data by Using Encryption and BitLocker
• Lab 13: Quotas and File Screening
• Lab 14: Implementing DAC
• Lab 15: Configuring Windows Firewall with Advanced Security
• Lab 16Securing DNS
• Lab 17: Microsoft Message Analyzer and SMB Encryption

At least two years of experience in the IT field as well as:

• A solid, practical understanding of networking fundamentals, including TCP/IP, User Datagram Protocol (UDP), and Domain Name System (DNS)
• A solid, practical understanding of Active Directory Domain Services (AD DS) principles
• A solid, practical understanding of Microsoft Hyper-V virtualization fundamentals
• An understanding of Windows Server security principles

IT professionals who need to administer Windows Server 2016 networks securely and work with networks that are configured as Windows Server domain-based environments with managed access to the Internet and cloud services.