Minimum installation option and Core mode
User account control (UAC)
Windows firewall

Workshop: Basic settings and adjustments for securing a Windows server 2019

Environmental scan: the Hfnetchk tool Patch
management scripts, deployment

Workshop: Patch chaining, use of MBSA

Basic principle for AD
security Object protection by ACLs
RODC servers: interest and implementation

Workshop: Securing the Active Directory. Granularity of passwords. Installation and configuration of an RODC

The basics of PKI
Management of certificates and private keys
The role of certificate server

Workshop: Setting up a certificate server. Basic certificate administration. Secure web access with HTTPS

How the Kerberos protocol works Kerberos
with smart cards and biometrics

Workshop: Tests of the Kerberos protocol. Access audit

Reminder on the fundamentals of NTFS security
Setting up EFS. Limitations of EFS. BitLocker

Workshop: Setting up EFS. Data recovery with an agent

Principles and implementation
Centralized access
rules Central audit rules

Workshop: Setting up dynamic access controls on a Windows 2012 server file

Principles and installation
Homogeneous configuration of server clusters

Workshop: Installation of a website

NPS servers. Implementation of access strategy
Control of internal and external PCs

Workshop: Implementation of NAP with mandatory access controls. Limit network access for machines that do not comply with DHCP. Quarantine clients

Securing access to the domain with IPsec
Configuration and administration of the RAS service
VPNs: principle of tunneling

Workshop: Implementation of IPSec under Windows. Advanced firewall settings. Setting up a RAS server and a RADIUS server under Windows Server 2019