Administer Active Directory Domain Services (AZ-1008)

Learn the essential skills to create, deploy, and maintain an Active Directory Domain Services (AD DS) environment. This learning path is designed for administrators seeking to deepen their expertise in managing Active Directory, securing user access, and enforcing organizational policies. Administer Active Directory Domain Services (AZ-1008) Benefits In this course, you will: Understand the role of domain controllers in AD DS, learn to deploy them effectively, and migrate them across environments. Configure and manage users, groups, and organizational units to streamline access control and domain operations. Use Group Policy to enforce security policies, manage configurations, and implement password policies. Manage permissions, enforce authentication protections, and identify potential security risks. Apply your skills in a real-world guided project that covers domain deployment, Group Policy configuration, and security enforcement. Prerequisites Knowledge of and experience working with: Windows Server. Core networking technologies. Administer Active Directory (AZ-1008) Training Outline Learning Objectives Deploy and Manage Active Directory Domain Services Domain Controllers Understand the role and topology of domain controllers in an AD environment. Define forests and domains within Active Directory. Deploy and migrate domain controllers across different sites. Manage operations masters for domain-wide control. Create and Manage Active Directory Objects Define and manage users, groups, and computers. Organize directory objects using Organizational Units (OUs). Configure and modify Active Directory object properties. Perform bulk management tasks for user accounts. Maintain Active Directory domain controllers. Create and Configure Group Policy Objects in Active Directory Define Group Policy Objects (GPOs) and their scope. Implement domain-wide and fine-grained password policies. Configure domain-based Group Policy Objects. Apply security and access management policies across the organization. Manage Security in Active Directory Configure user account rights and access restrictions. Delegate permissions to enforce role-based access control. Secure accounts using the Protected Users group. Implement Windows Defender Credential Guard for enhanced security. Block Windows NTLM authentication and identify problematic accounts. Guided Project: Administer Active Directory Domain Services Configure and deploy domain controllers. Implement user and group management strategies. Establish and enforce password policies. Configure security settings to protect Active Directory.