Administer Active Directory Domain Services

Microsoft via Microsoft Learn

Go to class Write review

Overview

Module 1: This module introduces you to the topology of domain controllers within an Active Directory environment. It also starts you down the path of deploying, managing, and migrating a domain controller between servers.
By the end of this module, you'll be able to:
- Define Active Directory Domain Services.
- Define Active Directory Domain Services forests and domains.
- Deploy Active Directory Domain Services domain controllers.
- Migrate a domain controller to a new site.
- Manage Active Directory Domain Services operations masters.
Module 2: This module focuses on the tasks associated with managing Active Directory objects and AD domain services domain controllers.
By the end of this module, you'll be able to:
- Define users, groups, and computers.
- Define organizational units.
- Manage objects and their properties in Active Directory.
- Create objects in Active Directory.
- Configure objects in Active Directory.
- Perform bulk management tasks for user accounts.
- Maintain Active Directory Domain Services domain controllers.
Module 3: This module focuses on Group Policy objects, including using them to enforce a robust password policy.
By the end of this module, you'll be able to:
- Define Group Policy Objects.
- Implement Group Policy Object scope and inheritance.
- Define domain-based Group Policy Objects.
- Create and configure a domain-based Group Policy Object.
- Configure a domain password policy.
- Configure and apply a fine-grained password policy.
Module 4: This module focuses on maintaining security in an Active Directory environment. It covers things from permissions management to authentication methods to identifying problematic accounts.
By the end of this module, you'll be able to:
- Configure user account rights.
- Configure user account rights to restrict access.
- Delegate permissions in Active Directory.
- Protect User Accounts with the Protected Users group.
- Describe Windows Defender Credential Guard.
- Block Windows NTLM authentication.
- Locate problematic accounts.
Module 5: This guided project helps prepare you to manage Active Directory Domain services, including creating and deploying domains, configuring group policy objects, establishing and enforcing passwords, and maintaining security of Active Directory.
In this module, you'll practice how to:
- Configure Domain Controller Operations.
- Configure User Management Operations.
- Manage Password Policies.
- Configure Security Settings.

Syllabus

Module 1: Module 1: Deploy and manage Active Directory Domain Services domain controllers
- Introduction
- Define Active Directory Domain Services
- Define Active Directory Domain Services forests and domains
- Deploy Active Directory Domain Services domain controllers
- Migrate a domain controller to a new site
- Manage Active Directory Domain Services operations masters
- Knowledge check
- Summary
Module 2: Module 2: Create and manage Active Directory objects
- Introduction
- Define users, groups, and computers
- Define organizational units
- Manage objects and their properties in Active Directory
- Create objects in Active Directory
- Configure objects in Active Directory
- Perform bulk management tasks for user accounts
- Maintain Active Directory Domain Services domain controllers
- Knowledge check
- Summary
Module 3: Module 3: Create and configure Group Policy Objects in Active Directory
- Introduction
- Define Group Policy Objects
- Implement Group Policy Object scope and inheritance
- Define domain-based Group Policy Objects
- Create and configure a domain-based Group Policy Object
- Configure a domain password policy
- Configure and apply a fine-grained password policy
- Knowledge check
- Summary
Module 4: Module 4: Manage security in Active Directory
- Introduction
- Configure user account rights
- Configure user account rights to restrict access
- Delegate permissions in Active Directory
- Protect User Accounts with the Protected Users group
- Describe Windows Defender Credential Guard
- Block Windows NTLM authentication
- Locate problematic accounts
- Knowledge check
- Summary
Module 5: Module 5: Guided project - Administer Active Directory Domain Services
- Introduction
- Prepare
- Exercise - Configure domain controller operations
- Exercise - Configure user management operations
- Exercise - Manage password policies
- Exercise - Configure security settings
- Knowledge check
- Summary