Administer Active Directory Domain Services (AZ-1008)

Prerequisites:

Knowledge of and experience working with:

• Windows Server.
• Core networking technologies.

Target Audience:

Course Objectives:

Module in the Learning Path:

• Deploy & Manage Active Directory Domain Services Domain Controllers
• Create and manage Active Directory objects
• Create and configure Group Policy Objects in Active Directory
• Manage security in Active Directory
• Guided project – Administer Active Directory Domain Services

Course Outline:

Deploy & Manage Active Directory Domain Services Domain Controllers:

• This module introduces you to the topology of domain controllers within an Active Directory environment. It also starts you down the path of deploying, managing, and migrating a domain controller between servers.
  • Define Active Directory Domain Services
  • Define Active Directory Domain Services forests and domains
  • Deploy Active Directory Domain Services domain controllers
  • Migrate a domain controller to a new site
  • Manage Active Directory Domain Services operations masters

Create and manage Active Directory objects:

• This module focuses on the tasks associated with creating and managing Active Directory objects and AD domain services domain controllers.
  • Define users, groups, and computers
  • Define organizational units
  • Manage objects and their properties in Active Directory
  • Create objects in Active Directory
  • Configure objects in Active Directory
  • Perform bulk management tasks for user accounts
  • Maintain Active Directory Domain Services domain controllers

Create and configure Group Policy Objects in Active Directory:

• This module focuses on Group Policy objects, including using them to enforce a domain wide as well as fine-grained password policy.
  • Define Group Policy Objects
  • Implement Group Policy Object scope and inheritance
  • Define domain-based Group Policy Objects
  • Create and configure a domain-based Group Policy Object
  • Configure a domain password policy
  • Configure and apply a fine-grained password policy

Manage security in Active Directory:

• This module focuses on maintaining security in an Active Directory environment. It covers things from permissions management to authentication methods to identifying problematic accounts.
  • Configure user account rights
  • Configure user account rights to restrict access
  • Delegate permissions in Active Directory
  • Protect User Accounts with the Protected Users group
  • Describe Windows Defender Credential Guard
  • Block Windows NTLM authentication
  • Locate problematic accounts

Guided project – Administer Active Directory Domain Services:

• This guided project helps prepare you to manage Active Directory Domain services, including creating and deploying domains, configuring group policy objects, establishing and enforcing passwords, and maintaining security of Active Directory. (NOTE: This is a Guided Project module where you’ll complete an end-to-end project by following step-by-step instructions.)
  • Prepare
  • Exercise – Configure domain controller operations
  • Exercise – Configure user management operations
  • Exercise – Manage password policies
  • Exercise – Configure security settings