Share via


Study guide for the Applied Skills assessment lab: Administer Active Directory Domain Services

Purpose of this document

This study guide provides a summary of the topics covered in the assessment lab, along with additional resources to help you prepare. Note that the learning path on the credential details page may include more modules than the "Tasks performed" to provide a cohesive learning experience.

Tasks at a glance

Deploy and manage AD DS domain controllers

Configure Active Directory topology

  • Raise the functional level of a domain or forest

  • Create a new site and map it to a subnet

  • Move domain controllers between sites

Supporting module(s):

Deploy and manage AD DS domain controllers

Create and manage AD DS objects

  • Create a user account

  • Perform bulk management tasks for user accounts

  • Manage disabled users accounts

  • Reset user passwords

  • Implement a group Managed Service Account (gMSA)

  • Create groups

  • Add users to groups, including privileged groups and the Protected Users group

  • Create and manage organizational units

  • Recover items from the AD DS recycle bin

    Supporting module(s):

Create and configure Group Policy Objects (GPOs) in AD DS

  • Create and link a GPO

  • Configure Group Policy settings

  • Configure Group Policy scope and processing order

    Supporting module(s):

Manage security in AD DS

  • Delegate permissions in AD DS

  • Configure the domain password policy

  • Configure and apply a fined-grained password policy

  • Configure auditing, including advanced audit policy

  • Configure user rights assignment by using Group Policy

    Supporting module(s):