This document summarizes a Microsoft Technical Bootcamp on Active Directory. It includes links and information on Active Directory templates, the central store, an Excel sheet template, and cleaning up the OU structure and using group and WMI filtering. It also discusses why modernizing Active Directory is important and the benefits of the Windows 10 Enterprise Mobility Suite, including mobile device and app management, information protection, identity and access management, and its integration with Microsoft Azure. Security topics like second factor authentication are also briefly mentioned.

1. Microsoft Technical Bootcamp
Active Directory
Name: Olav Tvedt
Title: Chief Consultant
MVP – Cloud & Server Installation and Servicing
@olavtwitt olavtvedt.blogspot.com

2. Basics
• Templates
http://www.microsoft.com/en-us/download/details.aspx?id=48257
• Central Store
http://blogs.technet.com/b/askpfeplat/archive/2011/12/12/how-to-
implement-the-central-store-for-group-policy-admin-templates-
completely-hint-remove-those-adm-files.aspx
• Excel Sheet
http://www.microsoft.com/en-us/download/details.aspx?id=25250
http://blogs.technet.com/b/askds/archive/2015/08/07/windows-10-group-policy-admx-templates-now-available-for-download.aspx

3. Clean UP
• OU Structur
• Group Filtering
• Wmi Filtering

4. Wmi Filters
• Process Order
• 8 > 10
http://blogs.technet.com/b/askds/archive/2008/09/11/fun-with-wmi-filters-in-group-policy.aspx

5.  Why 8 > 10
http://olavtvedt.blogspot.no/2011/10/controlling-your-group-policies-with.html

6. Wmi Filters
• 8 > 10
• ‘8’ < ‘10’
• Caption LIKE
http://www.billamoore.com/2015/03/13/windows-10-group-policy-and-wmi-version-challenge/
wmic os get Name
Select * FROM Win32_OperatingSystem WHERE Caption LIKE ‘%Windows 10%’

7.  Wim filters
http://olavtvedt.blogspot.no/2011/10/controlling-your-group-policies-with.html

8. Active Directory
Modernification

9. Why?

12. Windows 10
Enterprise
Mobility
Suite
EMS benefits for Windows
Mobile device and app
management
Information
protection
• Single sign-on for business cloud
apps
• Device set up and registration for
Windows devices
• Windows Store for Business
• Traditional domain join
manageability
• Manageability via MDM and MAM
• Encryption for data at rest and
generated on device
• Encryption for data included in
roaming settings
• Conditional access policies for
enhanced single sign on security
• MDM auto enrollment
• Self-service group and application
management
• Password reset with write-back to
on-premises directory
• Cloud based advanced security
reports
• Microsoft Identity Manager
• Mobile device management
• Mobile app management
• Secure content viewer
• Certificate, WiFi, VPN, email profile
provisioning
• Agent-based management of
Windows devices (domain joined via
ConfigMgr and internet-based via
Intune)
• Tracking and notifications for shared
documents
• Protection for content stored in
Office & Office 365
• Protection for on-premises Windows
Server file shares
• Behavioral analytics for advanced
threat detection
• Detection for known malicious
attacks and security issues
Identity and access
management

13. Microsoft Azure
Microsoft Azure

14. Second Factor