Windows Server 2016: Strengthen Security `{`20744`}`

  • Acquire the knowledge and skills to strengthen the security of an IT infrastructure.

System and network engineers.

Have taken the training “Windows Server 2016: Installation, Storage and Virtualization [20740]”, “Windows Server 2016: Network Services [20741]”, and “Windows Server 2016: Identity Management [20742]” or have the knowledge and equivalent skills, understanding of network fundamentals such as TCP / IP, UDP, DNS, AD DS principles and virtualization fundamentals with Hyper-V is fundamental, also have a good understanding of security principles in Windows Server.

3 Days.

Practical exercises and demonstrations will allow you to put into practice the theoretical concepts presented.

For “distance” training, they are carried out with a Teams or Zoom type videoconferencing tool, depending on the case, allowing the trainer to adapt his teaching methods.
Find all the details on distance sessions or virtual classes on our website.

Detect breaks using Sysinternals

General Sysinternals tools

Protect credentials and privileged access

User rights Computer and service accounts Identifier protection Dedicated stations and intermediate servers Deployment of a local administrator password management solution

Limit administrator rights with JEA (Just Enough Administration)

DescriptionImplementation and deployment

Manage privileged access and administrative forests

The concept of administrative forest Introduction to Microsoft Identity Manager “Just In Time” administration and privileged access management with Microsoft Identity Manager

Limit malware and threats

Configuring and Managing Microsoft Defender Software Restrictions Policies and AppLocker Configuring and Using Device Guard Using and Deploying the Enhanced Mitigation Experience Toolkit

Analyze activity using advanced verification

Introduction: System Auditing Advanced Auditing Strategies Auditing and Recording PowerShell Sessions

Analyze activity with Microsoft Advanced Threat Analytics (ATA) and Operations Management Suite (OMS) functionality

Advanced Threat AnalyticsIntro to OMS

Secure your virtualized infrastructure

Protected infrastructure (Guarded Fabric) Encrypted (encryption-supported) and shielded (shielded) virtual machines

Ensure application development and server load infrastructure

Security Compliance Manager Nano ServerContainers

Protect data with encryption

Planning and Implementing Encrypting File System (EFS) Planning and Implementing BitLocker

Limit access to files and folders

File Server Resource Manager (FSRM) Automation of file management and classification Dynamic Access Control

Control network flows by means of firewalls

Windows Firewall Distributed Firewalls

Secure network traffic

Network Threats and Connection Security Rules Advanced DNS Settings Network Traffic Analysis with Microsoft Message Analyzer SMB Traffic Security and Analysis

Windows Server Update

WSU Overview Deploying Updates with WSUS