- This module introduces you to the topology of domain controllers within an Active Directory environment. It also starts you down the path of deploying, managing, and migrating a domain controller between servers.
By the end of this module, you'll be able to:
Define Active Directory Domain Services.
Define Active Directory Domain Services forests and domains.
Deploy Active Directory Domain Services domain controllers.
Migrate a domain controller to a new site.
Manage Active Directory Domain Services operations masters.
- Learn to deploy and manage Azure IaaS Active Directory domain controllers in Azure.
After completing this module, you'll be able to:
Select an option to implement directory and identity services by using Active Directory Domain Services (AD DS) in Azure.
Deploy and configure AD DS domain controllers in Azure VMs.
Install a replica AD DS domain controller in an Azure VM.
Install a new AD DS forest on an Azure VNet.
- Manage AD DS domain controllers and FSMO roles
After completing this module, you'll be able to:
- Deploy AD DS domain controllers.
- Maintain AD DS domain controllers.
- Describe the AD DS global catalog role and its placement considerations.
- Describe AD DS operations master roles, their placement considerations, and their management tasks.
- Describe AD DS schema and its management tasks.
- This module focuses on the tasks associated with managing Active Directory objects and AD domain services domain controllers.
By the end of this module, you'll be able to:
Define users, groups, and computers.
Define organizational units.
Manage objects and their properties in Active Directory.
Create objects in Active Directory.
Configure objects in Active Directory.
Perform bulk management tasks for user accounts.
Maintain Active Directory Domain Services domain controllers.
- Implement hybrid identity with Windows Server
After completing this module, you'll be able to:
- Select a Microsoft Entra integration model.
- Plan for Microsoft Entra integration.
- Prepare on-premises AD DS for directory synchronization.
- Install and configure directory synchronization using Microsoft Entra Connect.
- Implement Seamless Single Sign-on (SSO).
- Enable Microsoft Entra login for an Azure Windows virtual machine (VM).
- Describe Microsoft Entra Domain Services.
- Implement and configure Microsoft Entra Domain Services.
- Manage Windows Server in a Microsoft Entra Domain Services instance.
- Join a Windows Server VM to a managed domain.
- This module focuses on Group Policy objects, including using them to enforce a robust password policy.
By the end of this module, you'll be able to:
Define Group Policy Objects.
Implement Group Policy Object scope and inheritance.
Define domain-based Group Policy Objects.
Create and configure a domain-based Group Policy Object.
Configure a domain password policy.
Configure and apply a fine-grained password policy.
- Implement Group Policy Objects
After completing this module, you'll be able to:
- Describe GPOs.
- Describe GPO scope and inheritance.
- Describe domain-based GPOs.
- Create and configure GPOs.
- Explain GPO storage.
- Describe administrative templates and the Central Store.
- Manage advanced features of AD DS
After completing this module, you'll be able to:
- Identify the purpose, types, and the process of creating trust relationships.
- Describe the purpose and the process of implementing ESAE forests.
- Monitor and troubleshoot AD DS replication.
- Identify the purpose and the process of creating custom AD DS partitions.
