Administer Active Directory Domain Services (AZ-1008)

Our Administer Active Directory Domain Services course is designed to equip you with essential skills for effectively managing and deploying Active Directory within your organization's infrastructure. Whether you're looking to enhance your team's capabilities or upskill yourself, this course offers a practical approach to understanding and utilizing Active Directory Domain Services (AD DS).

You will start the course with a focus on Deploying and Managing Active Directory Domain Services Domain Controllers. Here, you’ll define the core concepts of AD DS, including forests and domains, and learn how to deploy domain controllers efficiently. You'll also gain insights on migrating domain controllers to new sites and managing AD DS operations masters.

The next section on Creating and Managing Active Directory Objects covers the creation and configuration of users, groups, and computer objects. You'll explore organizational units and learn to manage object properties within Active Directory. Practical exercises will guide you through bulk management tasks for user accounts and maintaining domain controllers, ensuring both individual growth and team readiness.

As you progress, the lesson on Creating and Configuring Group Policy Objects will enhance your understanding of Group Policy Objects (GPOs). You'll learn to implement scope and inheritance, and create domain-based GPOs. Additionally, you’ll configure domain password policies and apply fine-grained password policies to secure your network environment.

The course also includes a module on Managing Security in Active Directory, where you’ll configure user account rights and delegate permissions. You will explore user protection strategies, such as using the Protected Users group and Windows Defender Credential Guard, and learn techniques to block Windows NTLM authentication while identifying problematic accounts.

In a guided project titled Administer Active Directory Domain Services, you'll apply your learning in a practical environment, allowing you to consolidate and practice your skills in real-world scenarios.

By the conclusion of this course, you will have developed a strong foundation in administering Active Directory Domain Services, empowering you to confidently manage your organization’s AD infrastructure. The skills gained will benefit your team and contribute to the efficient and secure operation of your network.

1. Deploy and manage Active Directory Domain Services domain controllers
   1. Define Active Directory Domain Services
   2. Define Active Directory Domain Services forests and domains
   3. Deploy Active Directory Domain Services domain controllers
   4. Migrate a domain controller to a new site
   5. Manage Active Directory Domain Services operations masters
2. Create and manage Active Directory objects
   1. Define users, groups, and computers
   2. Define organizational units
   3. Manage objects and their properties in Active Directory
   4. Create objects in Active Directory
   5. Configure objects in Active Directory
   6. Perform bulk management tasks for user accounts
   7. Maintain Active Directory Domain Services domain controllers
3. Create and configure Group Policy Objects in Active Directory
   1. Define Group Policy Objects
   2. Implement Group Policy Object scope and inheritance
   3. Define domain-based Group Policy Objects
   4. Create and configure a domain-based Group Policy Object
   5. Configure a domain password policy
   6. Configure and apply a fine-grained password policy
4. Manage security in Active Directory
   1. Configure user account rights
   2. Configure user account rights to restrict access
   3. Delegate permissions in Active Directory
   4. Protect User Accounts with the Protected Users group
   5. Describe Windows Defender Credential Guard
   6. Block Windows NTLM authentication
   7. Locate problematic accounts
5. Guided project - Administer Active Directory Domain Services

Each student receives a comprehensive set of materials, including course notes and all class examples.

Experience in the following is required for this Windows Server class: