MOD 20411: Administering Windows Server 2012


This self-study course provides hands-on instruction and practices administering Windows Server 2012, including Windows Server 2012 R2, in this five-day MOC (Microsoft Official Course) Is part one in a series of three courses that will provide the skills and knowledge needed to implement a core Windows Server 2012 infrastructure in an existing enterprise environment.

The three courses collectively cover implementing, managing, maintaining, and provisioning services and infrastructure in a Windows Server 2012 environment. There is some cross-over of skills and tasks across these courses; this course focuses on the administration tasks necessary to maintain a Windows Server 2012 infrastructure such as configuring and troubleshooting name resolution, user and group management with Active Directory Domain Services (AD DS) and Group Policy, implementing Remote Access solutions such as DirectAccess, VPNs, and Web Application Proxy, implementing Network Policies and Network Access Protection, Data Security, deployment and maintenance of server images, as well as update management and monitoring of Windows Server 2012 environments.

This course directly mapped to and is a preferred choice for hands-on preparation for MCSA: Exam 411: Administering Windows Server 2012, which is the second of three exams required for MCSA: Windows Server 2012 credential.

This course is built for IT Professionals who have hands-on experience working in a Windows server 2008 or Windows Server 2012 environment who would like to acquire the skills and knowledge necessary to be able to manage and maintain the core infrastructure required for a Windows Server 2012 and Windows Server 2012 R2 environment. The primary focus for students is to broaden the initial deployment of Windows Server 2012 services and infrastructure and provide the skills necessary to manage and maintain a domain based Windows Server 2012 environment, providing skills in areas such as User and Group management, Network Access and Data Security.

Typically candidates interested in this course include:
Windows Server Administrators experienced in working with Windows Server 2008 or Windows Server 2012 who wish to gain the skills necessary to perform daily management and maintenance tasks in a Windows Server 2012 or Windows Server 2012 R2 environment.
IT Professionals who are looking to take the 411, Administering Windows Server 2012 exam
IT professional wishing to take the Microsoft Certified Solutions Expert (MCSE) exams in DataCenter, Desktop Infrastructure, Messaging, Collaboration, and Communications will also be interested in taking this course as they prepare for the Microsoft Certified Solutions Associate (MCSA) exams, which are a pre-requisite for their individual specialties.

Upon completion of this course, students are able to:

Configure and Troubleshoot Domain Name System
Maintain Active Directory Domain Services
Manage User and Service Accounts
Implement Group Policy Infrastructure
Manage User Desktops using Group Policy
Install, Configure and Troubleshoot Network Policy Server
Implement Network Access Protection
Implement Remote Access
Optimize File Services
Configure Encryption and Advanced Auditing
Deploy and Maintain Server Images
Implement Update Management
Monitor Windows Server 2012


It is recommended that before attending this course, students have:

Knowledge and skills concerning the initial implementation and configuration of core Windows Server services including Active Directory Domain Services (AD DS), Networking Services, and Microsoft Hyper-V.

Course pre-requisites can be met by having knowledge equivalent to, or by attending:
20410: Installing and Configuring Windows Server 2012

What’s included?

  • Authorized Courseware
  • Intensive Hands on Skills Development with an Experienced Subject Matter Expert
  • Hands-on practice on real Servers and extended lab support 1.800.482.3172
  • Examination Vouchers & Onsite Certification Testing- (excluding Adobe and PMP Boot Camps)
  • Academy Code of Honor: Test Pass Guarantee
  • Optional: Package for Hotel Accommodations, Lunch and Transportation

With several convenient training delivery methods offered, The Academy makes getting the training you need easy. Whether you prefer to learn in a classroom or an online live learning virtual environment, training videos hosted online, and private group classes hosted at your site. We offer expert instruction to individuals, government agencies, non-profits, and corporations. Our live classes, on-sites, and online training videos all feature certified instructors who teach a detailed curriculum and share their expertise and insights with trainees. No matter how you prefer to receive the training, you can count on The Academy for an engaging and effective learning experience.


  • Instructor Led (the best training format we offer)
  • Live Online Classroom – Online Instructor Led
  • Self-Paced Video

Speak to an Admissions Representative for complete details

StartFinishPublic PricePublic Enroll Private PricePrivate Enroll


Module 1: Configuring and Troubleshooting Domain Name System
Configuring the DNS Server Role
Configuring DNS Zones
Configuring DNS Zone Transfers
Managing and Troubleshooting DNS
Lab: Configuring and Troubleshooting DNS
Configuring DNS Resource Records
Configuring DNS Conditional Forwarding
Installing and Configuring DNS Zones
Troubleshooting DNS

Module 2: Maintaining Active Directory Domain Services
Overview of AD DS
Implementing Virtualized Domain Controllers
Implementing RODCs
Administering AD DS
Managing the AD DS Database
Lab: Maintaining AD DS
Installing and Configuring an RODC
Configuring AD DS Snapshots
Configuring the Active Directory Recycle Bin
Optional Exercise- Cloning a domain controller

Module 3: Managing User and Service Accounts
Configuring Password Policy and User Account Lockout Settings
Configuring Managed Service Accounts
Lab: Managing User and Service Accounts
Configuring Password Policy and Account Lockout Settings
Creating and Associating a Managed Service Account

Module 4: Implementing a Group Policy Infrastructure
Introducing Group Policy
Implementing and Administering GPOs
Group Policy Scope and Group Policy Processing
Troubleshooting the Application of GPOs
Lab: Implementing a Group Policy Infrastructure
Creating and Configuring Group Policy Objects
Managing GPO Scope
Verify GPO Application
Managing GPOs

Module 5: Managing User Desktops with Group Policy
Implementing Administrative Templates
Configuring Folder Redirection and Scripts
Configuring Group Policy Preferences
Managing Software with Group Policy
Lab: Managing User Desktops with Group Policy
Implement Settings by Using Group Policy Preferences
Managing Office 2013 by using Administrative Templates
Deploying Software by using Group Policy
Configuring Folder Redirection

Module 6: Installing, Configuring, and Troubleshooting the Network Policy Server Role
Installing and Configuring a Network Policy Server
Configuring RADIUS Clients and Servers
NPS Authentication Methods
Monitoring and Troubleshooting a Network Policy Server
Lab: Installing and Configuring a Network Policy Server
Installing and Configuring NPS to Support RADIUS
Configuring and Testing a RADIUS Client

Module 7: Implementing Network Access Protection
Overview of Network Access Protection
Overview of NAP Enforcement Processes
Configuring NAP
Configuring IPSec Enforcement for NAP
Monitoring and Troubleshooting NAP
Lab: Implementing Network Access Protection
Configuring NAP Components
Configuring Virtual Private Network Access
Configuring the Client Settings to Support NAP

Module 8: Implementing Remote Access
Overview of Remote Access
Implementing DirectAccess by Using the Getting Started Wizard
Implementing and Managing an Advanced DirectAccess Infrastructure
Implementing VPN
Implementing Web Application Proxy
Lab: Implementing DirectAccess by Using the Getting Started Wizard
Verifying readiness for a DirectAccess Deployment
Configuring DirectAccess
Validating the DirectAccess Deployment
Lab: Deploying an Advanced DirectAccess Solution
Preparing the Environment for DirectAccess
Implementing the Advanced DirectAccess Infrastructure
Validating the DirectAccess Deployment
Lab: Implementing VPN
Implementing VPN
Validating the VPN Deployment
Lab: Implementing Web Application Proxy
Implementing Web Application Proxy
Validating the Web Application Proxy Deployment

Module 9: Optimizing File Services
Overview of FSRM
Using FSRM to Manage Quotas, File Screens, and Storage Reports
Implementing Classification and File Management Tasks
Overview of DFS
Configuring DFS Namespaces
Configuring and Troubleshooting DFS Replication
Lab: Configuring Quotas and File Screening Using File Server Resource Manager
Configuring File Server Resource Manager Quotas
Configuring File Screening and Storage Reports
Lab: Implementing a Distributed File System
Installing the DFS role service
Configuring a DFS Namespace
Configuring DFS Replication

Module 10: Configuring Encryption and Advanced Auditing
Encrypting Drives by Using BitLocker
Encrypting Files by Using EFS
Configuring Advanced Auditing
Lab: Configuring Encryption and Advanced Auditing
Using Windows BitLocker Drive Encryption to Secure Data Drives
Encrypting and Recovering Files
Configuring Advanced Auditing

Module 11: Deploying and Maintaining Server Images
Overview of Windows Deployment Services
Managing Images
Implementing Deployment with Windows Deployment Services
Administering Windows Deployment Services
Lab: Using Windows Deployment Services to Deploy Windows Server 2012
Installing and Configuring Windows Deployment Services
Creating Operating System Images with Windows Deployment Services
Configuring Custom Computer Naming
Deploying Images with Windows Deployment Services

Module 12: Implementing Update Management
Overview of WSUS
Deploying Updates with WSUS
Lab: Implementing Update Management
Implementing the WSUS Server Role
Configuring Update Settings
Approving and Deploying an Update by using WSUS

Module 13: Monitoring Windows Server 2012
Monitoring Tools
Using Performance Monitor
Monitoring Event Logs
Lab: Monitoring Windows Server 2012
Establishing a Performance Baseline
Identifying the Source of a Performance Problem
Viewing and Configuring Centralized Event Logs