Visão Geral

Este curso apresenta a arquitetura, funções, administração e segurança dos Domain Controllers em ambientes Windows Server e Active Directory. O participante compreenderá serviços essenciais, autenticação, DNS, replicação, Global Catalog, operações de manutenção e mecanismos de proteção de controladores de domínio.

Objetivo

Após realizar este curso, você será capaz de:

• Compreender a função dos Domain Controllers
• Administrar serviços essenciais do AD
• Monitorar autenticação e replicação
• Aplicar hardening
• Investigar problemas comuns de Domain Controllers

Publico Alvo

• Administradores Windows Server
• Administradores de Active Directory
• Profissionais de infraestrutura
• Analistas de Cybersecurity
• Profissionais de suporte avançado

Pre-Requisitos

• Conhecimentos de Windows Server
• Familiaridade com Active Directory
• Conhecimentos básicos de DNS
• Conhecimentos básicos de redes
• Familiaridade com PowerShell é recomendada

Conteúdo Programatico

Module 1: Domain Controller Fundamentals

1. Domain Controller concepts
2. Active Directory Domain Services
3. Domain Controller roles
4. Domain authentication
5. Directory services
6. Security principals
7. Domain Controller architecture
8. Domain Controller lifecycle
9. Server Core considerations
10. Domain Controller management

Module 2: Active Directory Services

1. Directory database
2. SYSVOL
3. Global Catalog
4. DNS integration
5. Netlogon service
6. Kerberos Key Distribution Center
7. Windows Time Service
8. Active Directory Web Services
9. Supporting infrastructure services
10. Service dependencies

Module 3: Authentication and Authorization

1. Kerberos authentication
2. NTLM authentication
3. LDAP operations
4. User authentication
5. Computer authentication
6. Service authentication
7. Access tokens
8. Group memberships
9. Privileged authentication
10. Authentication troubleshooting

Module 4: Domain Controller Replication

1. Active Directory replication
2. Replication topology
3. Replication partners
4. Multi-master replication
5. Knowledge Consistency Checker
6. Replication metadata
7. SYSVOL replication
8. Replication health
9. Replication troubleshooting
10. Replication security

Module 5: Domain Controller Operations

1. Domain Controller promotion
2. Domain Controller demotion
3. Server role management
4. Global Catalog configuration
5. FSMO roles
6. Operations Master roles
7. DNS configuration
8. SYSVOL management
9. Backup and recovery
10. Domain Controller maintenance

Module 6: Domain Controller Security

1. Domain Controller attack surface
2. Privileged account protection
3. Credential protection
4. Administrative tiering
5. Secure administration
6. Least privilege
7. Security baselines
8. Network isolation
9. Endpoint protection
10. Domain Controller hardening

Module 7: Monitoring and Incident Response

1. Domain Controller event logging
2. Authentication monitoring
3. Privileged activity monitoring
4. Directory changes
5. Replication monitoring
6. Suspicious authentication
7. Credential access indicators
8. Domain compromise indicators
9. Incident containment
10. Security investigation

Module 8: Practical Domain Controller Administration

1. Domain Controller health assessment
2. Replication troubleshooting
3. Authentication troubleshooting
4. DNS troubleshooting
5. SYSVOL troubleshooting
6. Security configuration assessment
7. Event Log investigation
8. Backup validation
9. Hardening exercise
10. Practical Domain Controller administration cases