
This video will give you an overview about the course.
Introduction to Defense in Depth, the foundation for implementing and maintaining a secure server infrastructure.
• Learn about the Defense in Depth model
• Relate the Defense in Depth to network architecture components
Implementing security requires a comprehensive set of policies, procedures, as well as, user awareness. This video explains how to implement policies and procedures on Windows Server 2019 to enforce security.
• Document security policies
• Document procedures for implementing security
• Provide user awareness on how to maintain a secure computing environment
Auditing is necessary to ensure that policies and procedures are being followed. Group Policy provides the mechanism to ensure that computer policies are being followed.
• Understand the importance of auditing
• Conceptual understanding of Group Policy and how settings are applied
• Learn about the Audit Policy settings available in Group Policy
Security polices follow the Principle of Least Privilege, granting users just enough rights to perform their job. Group Policy can grant specific computer rights to users and groups.
• Understand the concept of Principle of Least Privilege
• Understand what User Rights are, with regards to compute resources
• Learn how to apply User Rights Assignment settings to computers
Managing and maintaining the configuration settings for servers is a challenging, but necessary part of server security. Security baselines are templates with security settings, that can be used to test and configure Windows computers.
• Understand the purpose of baselines, and how they are used to maintain and configure security settings in Group Policy
• Identify the Group Policy settings that comprise the security settings managed by the Security Configuration and Analysis tool
• Configure and apply a security baseline to a Windows Server 2019 server
The need to protect corporate and end user data, while at rest, that is, stored on file servers or local workstations.
• Overview of EFS
• Encrypt files and sharing encrypted files
• Recover encrypted files
Secure data stored on disk drives of servers and client workstations, that are at risk.
• Overview of BitLocker whole drive encryption
• Encrypt operating system drives
• Encrypt removable storage devices
Manage the keys associated with BitLocker and the status of a BitLocker deployment.
• Address the needs to centrally manage BitLocker deployments
• Download and installing MBAM
• Use MBAM to manage BitLocker keys and deployments
Grant user permissions just when needed, instead of permanently.
• Overview of PAM components
• Create user and shadow principles
• Manage and configure PAM roles
Learn industry best practices for Application Security.
• Go through the best practices for applications
• Go through the updates and patches
• Understand Signed applications
Understand how Windows Defender protects the data again threats.
• Understand the concept of Network Intrusion Detection Systems
• Go through an overview of Advanced Threat Analytics (ATA)
• Understand ATA architecture and requirements
Learn about Privileged Access Workstations.
• Understand secure hosts concepts
• Learn about jump servers
Learn how to use Local Administrator Password Solution.
• Understand Local Administration Solution Overview
• Understand LAPS Requirements
• Use LAPS to manage Local Administrator Passwords
Learn how to use Windows Advanced Firewall.
• Learn about Host-Based Firewalls
• Learn about Windows Defender Firewall
• Understand the importance of IP Security (IPSec)
Learn industry best practices for protecting internal and perimeter networks.
• Identify common network security threats
• Explore the best practices for perimeter networks
• Best practices for internal networks
Understand how Software-defined networking is used to centrally manage and configure physical and virtual network devices.
• Understand the concept of a Software-defined network
• Learn the features of a Software-defined networking
• Learn how to implement a Software-defined networking
Learn how to protect Hyper-V virtual networks in a software defined datacenter.
• Understand Datacenter firewall concepts
• Learn the features of Datacenter firewall
• Learn how to implement Datacenter firewall
Learn how to use cloud-based solutions for managing and protecting cloud and on-premises environments.
• Understand Microsoft Azure overview
• Learn about Azure Security Center
• Learn how to use security center To monitor Windows Server resources
Understand server virtualization and the management of virtual machines in Hyper-V.
• Understand server virtualization and the Hyper-V virtualization role
• Identify the main components in Hyper-V
• Identify the Windows security groups used for managing Hyper-V
Understand the concept of shielded virtual machines.
• Recognize the deployment scenarios that may require shielded virtual machines
• Identify which virtual machines can be shielded
• Understand the prerequisites for shielded virtual machines.
Understand the guarded fabric deployment process.
• Deploy the Host Guardian Service
• Create templates for shielded VMs
• Create shielded virtual machines
Identify the improvements made to the shielded virtual machines in Windows Server 2019.
• Go through shielded Linux virtual machines
• Host a key attestation mode
Windows Server has built-in security features to help you a better understanding of the operating system and detect malicious activity. It helps you protect your networks and ensure that valuable resources are efficiently secured.
In this course, we’ll begin by taking a look at Windows Server 2019, configuring disk and file encryption, implementing malware protection, and creating security baselines. You’ll learn how to manage privileged access management by implementing the different features of Windows Server.
Moving on, you’ll learn to implement threat detection solutions to determine threats and keep your application protected. You’ll configure network security, including firewalls, implement a Software Defined Data center Firewall, secure network traffic, and look at secure virtualization, such as encryption-supported virtual machines.
During the course, you’ll work on live demos, participate in hands-on labs, as you shore up your skills for ongoing security management. By the end of the course, you’ll be able to create a protected and agile application environment using the both stability and flexibility of Windows Server 2019.
About the Author
Jeffery Stillman is a technical trainer and developer living in Arizona, USA. He has been teaching Microsoft server and client operating systems since 1993 and has been a Microsoft Certified Trainer since 2001. He holds certifications in Windows Server 2008, 2012, and 2016 and specializes in server virtualization, scripted deployments, and management of servers using Windows PowerShell.