- Learn how to harden the Windows Server operating system using LAPS for local admin password management, Privileged Access Workstations (PAWs), domain controller hardening with Server Core and BitLocker, security baselines with the Microsoft Security Compliance Toolkit, and SMB encryption.
After completing this module, you will be able to:
Manage local administrator passwords using Local Administrator Password Solution
Limit administrative access to Privileged Access Workstations (PAWs)
Explain how to secure domain controllers from being compromised
Describe how to use the Microsoft Security Compliance Toolkit to harden servers
Secure SMB traffic using SMB encryption
- This module explores using Microsoft Defender for Endpoint to provide additional protection and monitor devices against threats.
After this module, you should be able to:
Describe Microsoft Defender for Endpoint.
Describe key capabilities of Microsoft Defender for Endpoint.
Describe Microsoft Defender Application Guard.
Describe Microsoft Defender Exploit Guard.
Describe Windows Defender System Guard.
- This module explains the built-in security features of Windows clients and how to implement them using policies.
After this module, you should be able to:
- Describe Windows Security capabilities
- Describe Windows Defender Credential Guard
- Manage Microsoft Defender Antivirus
- Manage Windows Defender Firewall
- Manage Windows Defender Firewall with Advanced Security
- Learn how to configure, audit, and manage Group Policy Security Settings in Active Directory environments.
By the end of this module, you're able to:
- Describe how Group Policy security settings are structured, processed, and targeted, and select the right tool to author and test them.
- Configure Account Policies (password, lockout, and Kerberos) and explain the domain-scope rule and fine-grained password policies.
- Assign user rights and configure security options to enforce least privilege and harden authentication.
- Configure auditing, secure group membership, services, registry, file system, and event logs.
- Deploy network and application security policies, and manage security settings at scale with the Windows Server 2025 OSConfig baseline.
- Learn how to manage security in Active Directory, including configuring user rights with least privilege, delegating permissions, using the Protected Users group and Credential Guard, blocking NTLM authentication, and finding problematic accounts.
By the end of this module, you'll be able to:
Configure user account rights.
Configure user account rights to restrict access.
Delegate permissions in Active Directory.
Protect User Accounts with the Protected Users group.
Describe Windows Defender Credential Guard.
Block Windows NTLM authentication.
Locate problematic accounts.
- Describe the purpose and common problems of Windows Server service accounts, and select and configure the correct local or managed account type, including the Windows Server 2025 delegated Managed Service Account (dMSA).
By the end of this module, you're able to:
- Describe the purpose of Windows Server service accounts and the common problems associated with them.
- Identify and configure the local service account types.
- Compare the managed service account types (sMSA, gMSA, and dMSA) and select the correct one for a workload.
- Learn how to secure Active Directory user accounts using least privilege, Protected Users group, authentication policy silos, Windows Defender Credential Guard, NTLM blocking, and account remediation techniques.
After completing this module, you'll be able to:
- Configure and manage user accounts to limit security threats across an organization
- Apply Protected Users settings, policies, and authentication silos to protect highly privileged user accounts
- Describe and configure Windows Defender Credential Guard
- Configure Group Policy to block the use of NTLM for authentication
- This module focuses on effectively managing security controls in Microsoft Entra ID by securing identities, authentication, and authorization to protect users, groups, and external identities against threats while ensuring secure and seamless access to resources.
By the end of this module, participants will be able to:
Secure user identities in Microsoft Entra ID by implementing strong authentication and access management controls.
Protect groups and access management by enforcing security measures to prevent unauthorized changes or misuse.
Manage external identities securely by defining policies that ensure confidentiality, integrity, and proper access control.
Implement Microsoft Entra ID Protection to detect, investigate, and mitigate identity-related security threats.
Apply Conditional Access policies to enforce security controls based on user behavior, device compliance, and contextual risks.
- Learn security monitoring and governance with Microsoft Defender for Cloud, Azure Policy, resource locks, Microsoft Defender for Identity, and GitHub Advanced Security integration for comprehensive DevSecOps protection.
By the end of this module, you're able to:
Implement pipeline security best practices and secure DevOps workflows.
Configure Microsoft Defender for Cloud for threat protection and compliance monitoring.
Create and manage Azure policies for governance and compliance enforcement.
Understand policy initiatives, resource locks, and governance frameworks.
Deploy Microsoft Defender for Identity threat detection.
Integrate GitHub Advanced Security with Microsoft Defender for Cloud.
Configure GitHub Advanced Security features including code scanning, secret scanning, and dependency scanning.
