Administer Active Directory Domain Services

After completing this learning path, students will be able to:

• Define users, groups, and computers.
• Define organizational units.
• Manage objects and their properties in Active Directory.
• Create objects in Active Directory.
• Configure objects in Active Directory.
• Perform bulk management tasks for user accounts.
• Maintain Active Directory Domain Services domain controllers.
• Define Group Policy Objects.
• Implement Group Policy Object scope and inheritance.
• Define domain-based Group Policy Objects.
• Create and configure a domain-based Group Policy Object.
• Configure a domain password policy.
• Configure and apply a fine-grained password policy.
• Configure user account rights.
• Configure user account rights to restrict access.
• Delegate permissions in Active Directory.
• Protect User Accounts with the Protected Users group.
• Describe Windows Defender Credential Guard.
• Block Windows NTLM authentication.
• Locate problematic accounts.
• Configure Domain Controller Operations.
• Configure User Management Operations.
• Manage Password Policies.
• Configure Security Settings.

Knowledge of and experience working with:
• Windows Server.
• Core networking technologies.

Deploy and manage Active Directory Domain Services domain controllers

• Introduction
• Define Active Directory Domain Services
• Define Active Directory Domain Services forests and domains
• Deploy Active Directory Domain Services domain controllers
• Migrate a domain controller to a new site
• Manage Active Directory Domain Services operations masters
• Knowledge check

Create and manage Active Directory objects

• Introduction
• Define users, groups, and computers
• Define organizational units
• Manage objects and their properties in Active Directory
• Create objects in Active Directory
• Configure objects in Active Directory
• Perform bulk management tasks for user accounts
• Maintain Active Directory Domain Services domain controllers

Create and configure Group Policy Objects in Active Directory

• Introduction
• Define Group Policy Objects
• Implement Group Policy Object scope and inheritance
• Define domain-based Group Policy Objects
• Create and configure a domain-based Group Policy Object
• Configure a domain password policy

3• Configure and apply a fine-grained password policy Manage security in Active Directory

• Introduction
• Configure user account rights
• Configure user account rights to restrict access
• Delegate permissions in Active Directory
• Protect User Accounts with the Protected Users group
• Describe Windows Defender Credential Guard
• Block Windows NTLM authentication
• Locate problematic accounts

Guided project - Administer Active Directory Domain Services (Note: This is a Guided Project module where you’ll complete an end-to-end project by following step-by-step instructions.)

• Introduction
• Prepare
• Exercise - Configure domain controller operations
• Exercise - Configure user management operations
• Exercise - Manage password policies
• Exercise - Configure security settings