n3k - Active Directory Specialist Forum, London, Tuesday 21st February, 2012
Key Speaker: Guido Grillenmeier (Microsoft MVP) - Sponsored by n3k Informatik and Blackbird Group
n3k and Blackbird Group are pleased to invite to their first Active Directory Specialist Forum in the U.K. which will deliver highest quality, independent technical expertise for AD specialists.
Attendance is free of charge at this one day event. The speakers will deliver practical, useable information in three key sessions:
Some details:
Attendance is free of charge at this one day event. The speakers will deliver practical, useable information in three key sessions:
- Best Practices for Securing AD
- Tales from the deployment of RODCs in large enterprises
- Optimizing Service Delivery
This one day event starts at 10:00 a.m. and is expected to last until 4:00 p.m.
Register
here – now!
Places are limited and demand will be strong!
Places are limited and demand will be strong!
Guido Grillenmeier is a well-known expert on Active Directory with sound, detailed, practical hands-on experience. He is a Chief Engineer within the Enterprise Services Group at Hewlett Packard. He has often spoken at the Directory Experts Conference (DEC), now The Experts Conference (TEC). Guido also speaks regularly at various other Microsoft technology related conferences, such as Microsoft Tech-ED, IT Forum and Windows Connections. He has been a Microsoft MVP for Directory Services since 2003. In addition to writing articles for technical magazines, Guido is also the co-author of Microsoft Windows Security Fundamentals (Digital Press).
Session 1 - Best Practices for Securing AD
An acknowledged independent AD expert - Guido Grillenmeier - will guide review, summarize and put into context a wide variety of security “highlights” that have arisen over the past 10 years. The session presents a comprehensive update for a key topic that continues to be a non-trivial task: “hiding” data in Active Directory. AD has a good range of capabilities to set permissions on objects in the directory to allow delegated administration of things like users, groups or computers, so that many of the daily operational tasks do not have to be performed by domain administrators. But when it comes to making specific data visible to only those users who need to see them, either because normal users should simply not see the objects or because the data is truly confidential, the default AD permissions can make this a rather complex task. This session discusses the different options for hiding data in AD and gives a guideline as to when it is appropriate to leverage these options. Topics covered include hiding data using the "normal" AD permissions (incl. List Mode and adjusting the Default Security of objects), as well as two more advanced options (adjusting the built-in Property Sets and Using the Confidentiality Bit). We’ll also discuss how this model is extended when using RODCs with Windows server 2008 or 2008 R2.
An acknowledged independent AD expert - Guido Grillenmeier - will guide review, summarize and put into context a wide variety of security “highlights” that have arisen over the past 10 years. The session presents a comprehensive update for a key topic that continues to be a non-trivial task: “hiding” data in Active Directory. AD has a good range of capabilities to set permissions on objects in the directory to allow delegated administration of things like users, groups or computers, so that many of the daily operational tasks do not have to be performed by domain administrators. But when it comes to making specific data visible to only those users who need to see them, either because normal users should simply not see the objects or because the data is truly confidential, the default AD permissions can make this a rather complex task. This session discusses the different options for hiding data in AD and gives a guideline as to when it is appropriate to leverage these options. Topics covered include hiding data using the "normal" AD permissions (incl. List Mode and adjusting the Default Security of objects), as well as two more advanced options (adjusting the built-in Property Sets and Using the Confidentiality Bit). We’ll also discuss how this model is extended when using RODCs with Windows server 2008 or 2008 R2.
Session 2 - Tales from the deployment of RODCs in large enterprises
Guido will also present this session with a focus on deploying Win2008 with RODCs at large scale which requires considerable, careful planning. Deployments have already thrown up quite a few surprises! Some of these are related to being able to manage the required replication policies sufficiently well – and what happens if you don’t. This session assumes that the audience understands the basics of how an RODC generally works, and will further expand that knowledge including what to consider during a rollout.
Guido will also present this session with a focus on deploying Win2008 with RODCs at large scale which requires considerable, careful planning. Deployments have already thrown up quite a few surprises! Some of these are related to being able to manage the required replication policies sufficiently well – and what happens if you don’t. This session assumes that the audience understands the basics of how an RODC generally works, and will further expand that knowledge including what to consider during a rollout.
Session 3 - Optimizing Service Delivery
Morgan Holm, Director of Product Management at Blackbird Group, will introduce the well established Active Directory solutions delivered by the Blackbird Group, which simplify the daily life of every AD Administrator. The Blackbird Management Suite permits optimization of Microsoft DNS and DHCP service management; recovery and auditing of AD and GPO of the complete environment; Change Protection and Real Time Alarming on object changes. A live demonstration of the Blackbird Management Suite will show how it will assist you achieve better AD Management.
Morgan Holm, Director of Product Management at Blackbird Group, will introduce the well established Active Directory solutions delivered by the Blackbird Group, which simplify the daily life of every AD Administrator. The Blackbird Management Suite permits optimization of Microsoft DNS and DHCP service management; recovery and auditing of AD and GPO of the complete environment; Change Protection and Real Time Alarming on object changes. A live demonstration of the Blackbird Management Suite will show how it will assist you achieve better AD Management.
To the
printversion in pdf format.


