Visão Geral

Este curso apresenta os fundamentos do Active Directory Domain Services (AD DS), sua arquitetura, componentes, objetos, serviços e mecanismos de administração e segurança. O participante compreenderá como domínios, florestas, unidades organizacionais, grupos, usuários e políticas se relacionam, desenvolvendo uma base sólida para administração e proteção de ambientes corporativos Windows.

Objetivo

Após realizar este curso, você será capaz de:

• Compreender a arquitetura do Active Directory
• Administrar usuários, grupos e computadores
• Compreender domínios, florestas e OUs
• Aplicar políticas de segurança
• Identificar riscos básicos de segurança do AD

Publico Alvo

• Administradores Windows
• Analistas de Cybersecurity
• Profissionais de infraestrutura
• Analistas de SOC e Blue Team
• Profissionais de suporte técnico

Pre-Requisitos

• Conhecimentos básicos de Windows Server
• Familiaridade com redes TCP/IP
• Noções de DNS
• Conhecimentos básicos de administração de sistemas
• Familiaridade com PowerShell é recomendada

Conteúdo Programatico

Module 1: Active Directory Fundamentals

1. Active Directory Domain Services concepts
2. Directory services architecture
3. Domain concepts
4. Forests and trees
5. Domains and domain boundaries
6. Organizational Units
7. Active Directory objects
8. Users, groups and computers
9. Security principals
10. Active Directory administrative model

Module 2: Active Directory Architecture

1. Domain Controllers
2. Global Catalog
3. Active Directory partitions
4. Schema
5. Configuration partition
6. Domain partition
7. Application partitions
8. Directory replication
9. Sites and subnets
10. Active Directory topology

Module 3: Users, Groups and Computers

1. User account management
2. Computer account management
3. Security groups
4. Distribution groups
5. Group scopes
6. Nested groups
7. Group membership management
8. Service accounts
9. Managed service accounts
10. Privileged accounts

Module 4: Organizational Units and Group Policy

1. Organizational Unit design
2. Group Policy fundamentals
3. Group Policy Objects
4. Group Policy inheritance
5. Group Policy processing
6. Security policies
7. Password policies
8. Account lockout policies
9. Administrative restrictions
10. Group Policy troubleshooting

Module 5: Active Directory Authentication

1. Windows authentication architecture
2. Kerberos authentication
3. NTLM authentication
4. LDAP authentication concepts
5. Authentication protocols
6. Logon processes
7. Security tokens
8. Service authentication
9. Authentication delegation
10. Authentication security

Module 6: Active Directory Replication

1. Replication fundamentals
2. Multi-master replication
3. Replication topology
4. Replication partners
5. Knowledge Consistency Checker
6. Replication metadata
7. Replication troubleshooting
8. Replication security
9. Directory synchronization
10. Monitoring replication health

Module 7: Active Directory Security

1. Active Directory security model
2. Access Control Lists
3. Security descriptors
4. Delegation of administration
5. Least privilege
6. Privileged group protection
7. Service account security
8. Credential protection
9. Administrative tiering
10. Active Directory attack surface

Module 8: Monitoring and Troubleshooting

1. Active Directory event logging
2. Authentication monitoring
3. Account activity monitoring
4. Group membership monitoring
5. Directory changes
6. Domain Controller monitoring
7. Replication monitoring
8. Common Active Directory failures
9. Troubleshooting methodology
10. Practical Active Directory administration and security cases