Deploy and manage identity infrastructure

Microsoft via Microsoft Learn

Go to class Write review

Introduction to AD DS
After completing this module, you'll be able to:
- Describe AD DS.
- Describe users, groups, and computers.
- Identify and describe AD DS forests and domains.
- Describe OUs.
- Manage objects and their properties in AD DS.
Manage AD DS domain controllers and FSMO roles
After completing this module, you'll be able to:
- Deploy AD DS domain controllers.
- Maintain AD DS domain controllers.
- Describe the AD DS global catalog role and its placement considerations.
- Describe AD DS operations master roles, their placement considerations, and their management tasks.
- Describe AD DS schema and its management tasks.
Implement Group Policy Objects
After completing this module, you'll be able to:
- Describe GPOs.
- Describe GPO scope and inheritance.
- Describe domain-based GPOs.
- Create and configure GPOs.
- Explain GPO storage.
- Describe administrative templates and the Central Store.
Manage advanced features of AD DS
After completing this module, you'll be able to:
- Identify the purpose, types, and the process of creating trust relationships.
- Describe the purpose and the process of implementing ESAE forests.
- Monitor and troubleshoot AD DS replication.
- Identify the purpose and the process of creating custom AD DS partitions.
Implement hybrid identity with Windows Server
After completing this module, you'll be able to:
- Select a Microsoft Entra integration model.
- Plan for Microsoft Entra integration.
- Prepare on-premises AD DS for directory synchronization.
- Install and configure directory synchronization using Microsoft Entra Connect.
- Implement Seamless Single Sign-on (SSO).
- Enable Microsoft Entra login for an Azure Windows virtual machine (VM).
- Describe Microsoft Entra Domain Services.
- Implement and configure Microsoft Entra Domain Services.
- Manage Windows Server in a Microsoft Entra Domain Services instance.
- Join a Windows Server VM to a managed domain.
Learn to deploy and manage Azure IaaS Active Directory domain controllers in Azure.
After completing this module, you'll be able to:
- Select an option to implement directory and identity services by using Active Directory Domain Services (AD DS) in Azure.
- Deploy and configure AD DS domain controllers in Azure VMs.
- Install a replica AD DS domain controller in an Azure VM.
- Install a new AD DS forest on an Azure VNet.

Syllabus

Introduction to AD DS
- Introduction
- Define AD DS
- Define users, groups, and computers
- Define AD DS forests and domains
- Define OUs
- Manage objects and their properties in AD DS
- Module assessment
- Summary
Manage AD DS domain controllers and FSMO roles
- Introduction
- Deploy AD DS domain controllers
- Maintain AD DS domain controllers
- Manage the AD DS Global Catalog role
- Manage AD DS operations masters
- Manage AD DS schema
- Module assessment
- Summary
Implement Group Policy Objects
- Introduction
- Define GPOs
- Implement GPO scope and inheritance
- Define domain-based GPOs
- Create and configure a domain-based GPO
- Define GPO storage
- Define administrative templates
- Module assessment
- Summary
Manage advanced features of AD DS
- Introduction
- Create trust relationships
- Implement ESAE forests
- Monitor and troubleshoot AD DS
- Create custom AD DS partitions
- Module assessment
- Summary
Implement hybrid identity with Windows Server
- Introduction
- Select a Microsoft Entra integration model
- Plan for Microsoft Entra integration
- Prepare on-premises Active Directory for directory synchronization
- Install and configure directory synchronization with Microsoft Entra Connect
- Implement Seamless Single Sign-On
- Enable Microsoft Entra login in for Windows VM in Azure
- Knowledge check 1
- Describe Microsoft Entra Domain Services
- Implement and configure Microsoft Entra Domain Services
- Manage Windows Server in a Microsoft Entra Domain Services environment
- Create and configure a Microsoft Entra Domain Services instance
- Join a Windows Server VM to a managed domain
- Module assessment
- Summary
Deploy and manage Azure IaaS Active Directory domain controllers in Azure
- Introduction
- Select an option to implement directory and identity services using Active Directory Domain Services in Azure
- Deploy and configure Active Directory Domain Services domain controllers in Azure VMs
- Install a replica Active Directory domain controller in an Azure VM
- Install a new Active Directory forest on an Azure VNet
- Module assessment
- Summary