WINDOWS SERVER 2016 HARDENING AND SECURITY

Understanding Attacks, Breaches, and Detection

· Types and Methods of Attack

· Incident Response Strategy

· Security Breaches Detection

Protecting Users and Computers

· Configuring User Rights and Privileges

· Delegating Administrative Control

· Local Administrator Password Solutions (LAPS)

· Working with Secure Channel Passwords and Credential Guard

· Group MSAs and Jump Servers

Managing and Controlling Access

· Understanding and Deploying JEA and Microsoft Identity Manager

· Enhanced Security Administrative Environments (ESAE) Forests

· Administrative Tiers and Privileged Access Management (PAM)

· Shadow Principals

Anti-Malware and Patch Management

· Malware and Windows Defender

· Restricting Software and Device Guard

· Patch Deployment using WSUS

Server Auditing and Advanced Threat Analytics

· Auditing in Windows Server 2016

· Advanced Auditing and Management

· Auditing with Windows PowerShell

· Operations Management

Infrastructure Security

· Securing Virtualization Infrastructure by using Guarded Fabric, Host Guardian Service

· Security Baselines and Security Compliance Manager (SCM)

· Deploying Nano Server

Data Protection

· Encryption and Decryption (EFS and BitLocker)

· Recovering EFS Files and BitLocker

· BitLocker on Hyper-V VMs and CSVs

· Network Unlock Process

Advanced File Server Management

· Capacity and Storage Management

· Installing and Configuring FSRM

· Dynamic Access Control

Network Infrastructure Security

· Windows Firewall with Advanced Security

· Datacenter Firewall

· Network Controller

· Using IPSec & DNS Security (DNSSEC)

· Monitoring Network Traffic