{"course":{"productid":30282,"modality":1,"active":true,"language":"en","title":"Master Class: Securing Active Directory Deep Dive LEVEL 2","productcode":"SADDD-L2","vendorcode":"MT","vendorname":"Master Class","fullproductcode":"MT-SADDD-L2","courseware":{"has_ekit":false,"has_printkit":true,"language":""},"url":"https:\/\/portal.flane.ch\/course\/masterclass-saddd-l2","objective":"<p>In this master class course LEVEL 2, the topic of Active Directory security is once again immensely deepened.<\/p>\n<p>Want to make your crown jewels even more secure?<\/p>\n<p>Is your environment critical or are you in the &quot;SupplyChain&quot;?<\/p>\n<p>Or are you even bound to secrecy?<\/p>\n<p>No problem: We will show you how to secure your environment extremely.<\/p>\n<p>After more than 100 trainings in this area, this course was created as a worthy successor to the well-known and highly booked MasterClass Active Directory Security.<\/p>\n<p>That&#039;s why: Understand, harden and monitor so you can sleep better.<\/p>","essentials":"<p>At least 5 years of experience with Active Directory and client systems<\/p>\n<p>Prior attendance of the <span class=\"cms-link-marked\"><a class=\"fl-href-prod\" href=\"\/swisscom\/en\/course\/masterclass-saddd-l1\"><svg role=\"img\" aria-hidden=\"true\" focusable=\"false\" data-nosnippet class=\"cms-linkmark\"><use xlink:href=\"\/css\/img\/icnset-linkmarks.svg#linkmark\"><\/use><\/svg>Master Class: Securing Active Directory Deep Dive <span class=\"fl-prod-pcode\">(SADDD-L1)<\/span><\/a><\/span> course is REQUIRED AND must be verified.<\/p>","audience":"<p>This course is designed for experienced system administrators, consultants and Active Directory designers. After this seminar, you will be able to design, implement and consult on Active Directory in a highly secure manner.<\/p>","contents":"<ul>\n<li>Review of best practices from the MasterClass Securing Active Directory FastPass.<\/li><li>LAPS for domain controllers - does NOT work - but it does!<br\/> We show you how to secure the DSRM password rolling and encrypted incl. password history!<\/li><li>DSRM-User: From emergency administrator to domain admin:<br\/>What a simple registry hack can do and what you should do about it...<\/li><li>Unified Write Filter - a completely unknown solution for Windows 10\/11 clients: Kiosk mode for professionals and for Privileged Admin Workstation - PAWs with &quot;sheriff cards&quot;)<\/li><li>Multi-tenant Active Directory - how to hide organizational units (Ous) for administrators who should not see them: Object List<br\/>No one dares to do it - how to show you how to do it and how the pros do it!<\/li><li>MBAM &amp; Bitlocker: Bitlocker on Steroids<br\/>Microsoft BitLocker Administration and Monitoring 2.5 - even if the extended support ends in 2026 - MBAM is absolutely worth a look!<\/li><li>Hiding TIER-0 admins via Powershell<br\/>What I can&#039;t see, I can&#039;t attack....<br\/>How to hide your crown jewels...<\/li><li>Bloodhound: Hunting for Privileges<br\/>Install and use Bloodhound - let&#039;s hunt for privileges!<\/li><li>PAM feature with Server 2016: JEA &amp; JIT<br\/>Just enough Administration with JustInTime Administration<br\/>With Server 2016 came - for most undiscovered - the PAM feature:<br\/>Privileged Access Management for Users: Time-to-Live for Administrators who manage the Tickets<\/li><li>When it should be less:<br\/>Authentication Silos &amp; Authentication Policies<br\/>Who, How, Where, and When...<\/li><li>Build, maintain and administer tier models en detail<br\/>Tier and ESAE model in practice.<\/li><li>Windows Defender for Identity<\/li><li>Lithnet Active Directory Password Protection<\/li><li>DNS-SEC - Run DNS in a highly secure way<br\/>Trust-Anchors<br\/>DNS over https ( DoH )<\/li><li>SMB encryption AES 256<br\/>Operate SMB highly secure<\/li><li>UNC Hardening<\/li><li>From DNS-Admin to DomainAdmin<br\/>How to go from small to big...<\/li><li>LocalAccountTokenFilterPolicy<\/li><li>LDAP-S, signing and channel binding<br\/>What exactly is it about and why LDAP-S is not LDAP-signing...<\/li><li>LDAP-S and SSL V2, V3 and TLS V1 - what then now<br\/>LDAP-S en detail<\/li><li>&quot;Notes from the field - our experience from 10 years of hardening Active Directory\n<ul>\n<li>LAPS<\/li><li>Protected Users<\/li><li>KRBTGT Reset<\/li><li>PingCastle<\/li><\/ul><\/li><li>Questions from the participants<\/li><\/ul><h4>Your Trainer<\/h4><p>The Advanced Master Class was developed by Andy Wendel and is delivered by himself and his experienced team.<\/p>\n<p>Andy Wendel is a Senior Data Center and Cloud Architect and Certified Security Master Specialization Advanced Windows Security. He was and is trained by the internationally renowned security experts <a class=\"cms-href-ext\" href=\"http:\/\/cqure.pl\/paula-januszkiewicz\/\" data-cms-evt-click=\"Outbound Links;click;http:\/\/cqure.pl\/paula-januszkiewicz\/\">Paula Januszkiewicz<\/a> and <a class=\"cms-href-ext\" href=\"https:\/\/www.samilaiho.com\/?\/\" data-cms-evt-click=\"Outbound Links;click;https:\/\/www.samilaiho.com\/?\/\">Sami Laiho<\/a>. This certification is renewed every year. Andy Wendel has been working as an IT trainer and consultant since the late 1990s and is also a Certified Microsoft Learning Consultant (MCLC). Worldwide, Microsoft has only awarded 56 Certified Learning Consultants.<\/p>","summary":"<p>In this follow-up to the Master Class Active Directory Security, you will learn everything that could not be discussed in the first course due to time and know-how constraints.<\/p>\n<p>We have added another &quot;spurt&quot; of security topics.<\/p>\n<p>Look forward to a worthy successor to our Master Class Active Directory Security.<\/p>\n<p>Please note:<\/p>\n<p>You can only participate in this follow-up course if you have previously attended the Master Class Active Directory Security with Andy Wendel as trainer.<\/p>\n<p>In the first MasterClass Active Directory Security course, we already covered the most important topics for securing your Active Directory.<\/p>\n<p>Over the last few years, the questions for even deeper topics and approaches have become louder and louder in our courses.<\/p>\n<p>Here comes our answer.<\/p>\n<p>Three days of intensive Active Directory security topics.<\/p>\n<p>Look forward to the successor.<\/p>\n<p>We promise: Our best know-how for you and your day-to-day work from our most experienced trainers and consultants.<\/p>","objective_plain":"In this master class course LEVEL 2, the topic of Active Directory security is once again immensely deepened.\n\nWant to make your crown jewels even more secure?\n\nIs your environment critical or are you in the \"SupplyChain\"?\n\nOr are you even bound to secrecy?\n\nNo problem: We will show you how to secure your environment extremely.\n\nAfter more than 100 trainings in this area, this course was created as a worthy successor to the well-known and highly booked MasterClass Active Directory Security.\n\nThat's why: Understand, harden and monitor so you can sleep better.","essentials_plain":"At least 5 years of experience with Active Directory and client systems\n\nPrior attendance of the Master Class: Securing Active Directory Deep Dive (SADDD-L1) course is REQUIRED AND must be verified.","audience_plain":"This course is designed for experienced system administrators, consultants and Active Directory designers. After this seminar, you will be able to design, implement and consult on Active Directory in a highly secure manner.","contents_plain":"- Review of best practices from the MasterClass Securing Active Directory FastPass.\n- LAPS for domain controllers - does NOT work - but it does!\n We show you how to secure the DSRM password rolling and encrypted incl. password history!\n- DSRM-User: From emergency administrator to domain admin:\nWhat a simple registry hack can do and what you should do about it...\n- Unified Write Filter - a completely unknown solution for Windows 10\/11 clients: Kiosk mode for professionals and for Privileged Admin Workstation - PAWs with \"sheriff cards\")\n- Multi-tenant Active Directory - how to hide organizational units (Ous) for administrators who should not see them: Object List\nNo one dares to do it - how to show you how to do it and how the pros do it!\n- MBAM & Bitlocker: Bitlocker on Steroids\nMicrosoft BitLocker Administration and Monitoring 2.5 - even if the extended support ends in 2026 - MBAM is absolutely worth a look!\n- Hiding TIER-0 admins via Powershell\nWhat I can't see, I can't attack....\nHow to hide your crown jewels...\n- Bloodhound: Hunting for Privileges\nInstall and use Bloodhound - let's hunt for privileges!\n- PAM feature with Server 2016: JEA & JIT\nJust enough Administration with JustInTime Administration\nWith Server 2016 came - for most undiscovered - the PAM feature:\nPrivileged Access Management for Users: Time-to-Live for Administrators who manage the Tickets\n- When it should be less:\nAuthentication Silos & Authentication Policies\nWho, How, Where, and When...\n- Build, maintain and administer tier models en detail\nTier and ESAE model in practice.\n- Windows Defender for Identity\n- Lithnet Active Directory Password Protection\n- DNS-SEC - Run DNS in a highly secure way\nTrust-Anchors\nDNS over https ( DoH )\n- SMB encryption AES 256\nOperate SMB highly secure\n- UNC Hardening\n- From DNS-Admin to DomainAdmin\nHow to go from small to big...\n- LocalAccountTokenFilterPolicy\n- LDAP-S, signing and channel binding\nWhat exactly is it about and why LDAP-S is not LDAP-signing...\n- LDAP-S and SSL V2, V3 and TLS V1 - what then now\nLDAP-S en detail\n- \"Notes from the field - our experience from 10 years of hardening Active Directory\n\n- LAPS\n- Protected Users\n- KRBTGT Reset\n- PingCastle\n- Questions from the participants\nYour Trainer\n\nThe Advanced Master Class was developed by Andy Wendel and is delivered by himself and his experienced team.\n\nAndy Wendel is a Senior Data Center and Cloud Architect and Certified Security Master Specialization Advanced Windows Security. He was and is trained by the internationally renowned security experts Paula Januszkiewicz (http:\/\/cqure.pl\/paula-januszkiewicz\/) and Sami Laiho (https:\/\/www.samilaiho.com\/?\/). This certification is renewed every year. Andy Wendel has been working as an IT trainer and consultant since the late 1990s and is also a Certified Microsoft Learning Consultant (MCLC). Worldwide, Microsoft has only awarded 56 Certified Learning Consultants.","summary_plain":"In this follow-up to the Master Class Active Directory Security, you will learn everything that could not be discussed in the first course due to time and know-how constraints.\n\nWe have added another \"spurt\" of security topics.\n\nLook forward to a worthy successor to our Master Class Active Directory Security.\n\nPlease note:\n\nYou can only participate in this follow-up course if you have previously attended the Master Class Active Directory Security with Andy Wendel as trainer.\n\nIn the first MasterClass Active Directory Security course, we already covered the most important topics for securing your Active Directory.\n\nOver the last few years, the questions for even deeper topics and approaches have become louder and louder in our courses.\n\nHere comes our answer.\n\nThree days of intensive Active Directory security topics.\n\nLook forward to the successor.\n\nWe promise: Our best know-how for you and your day-to-day work from our most experienced trainers and consultants.","skill_level":"Expert","version":"1.0","duration":{"unit":"d","value":3,"formatted":"3 days"},"pricelist":{"List Price":{"IT":{"country":"IT","currency":"EUR","taxrate":20,"price":3800},"NL":{"country":"NL","currency":"EUR","taxrate":21,"price":3800},"PL":{"country":"PL","currency":"EUR","taxrate":23,"price":3800},"US":{"country":"US","currency":"USD","taxrate":null,"price":4135},"IN":{"country":"IN","currency":"USD","taxrate":12.36,"price":599},"GB":{"country":"GB","currency":"GBP","taxrate":20,"price":3160},"CA":{"country":"CA","currency":"CAD","taxrate":null,"price":5710},"DE":{"country":"DE","currency":"EUR","taxrate":19,"price":3890},"CH":{"country":"CH","currency":"CHF","taxrate":8.1,"price":3890},"AT":{"country":"AT","currency":"EUR","taxrate":20,"price":3890},"SE":{"country":"SE","currency":"EUR","taxrate":25,"price":3890},"SI":{"country":"SI","currency":"EUR","taxrate":20,"price":3890}}},"lastchanged":"2026-01-13T18:59:02+01:00","parenturl":"https:\/\/portal.flane.ch\/swisscom\/en\/json-courses","nexturl_course_schedule":"https:\/\/portal.flane.ch\/swisscom\/en\/json-course-schedule\/30282","source_lang":"en","source":"https:\/\/portal.flane.ch\/swisscom\/en\/json-course\/masterclass-saddd-l2"}}