Implement hybrid identity with Windows Server

Intermediate
Administrator
Solution Architect
Technology Manager
Azure
Microsoft Entra ID
Azure Cloud Shell
Azure Portal
Azure Virtual Machines

This module covers how to implement hybrid identity by integrating on-premises AD DS with Microsoft Entra ID. You learn how to select from Microsoft Entra integration models including extending AD DS to Azure, directory synchronization, password hash sync, and federation with AD FS, plan and prepare on-premises AD DS for synchronization with Microsoft Entra Connect, configure seamless single sign-on (SSO) and pass-through authentication, enable Microsoft Entra ID login for Azure VMs, and implement Microsoft Entra Domain Services for Kerberos authentication, LDAP, and Group Policy in the cloud without deploying domain controllers.

Learning objectives

After completing this module, you'll be able to:

  • Select a Microsoft Entra integration model.
  • Plan for Microsoft Entra integration.
  • Prepare on-premises AD DS for directory synchronization.
  • Install and configure directory synchronization using Microsoft Entra Connect.
  • Implement Seamless Single Sign-on (SSO).
  • Enable Microsoft Entra login for an Azure Windows virtual machine (VM).
  • Describe Microsoft Entra Domain Services.
  • Implement and configure Microsoft Entra Domain Services.
  • Manage Windows Server in a Microsoft Entra Domain Services instance.
  • Join a Windows Server VM to a managed domain.

Prerequisites

In order to get the best learning experience from this module, it's important that you have knowledge and experience of the following:

  • Managing Windows Server operating system and Windows Server workloads in on-premises scenarios, including Active Directory Domain Services (AD DS), Domain Name System (DNS), the Distributed File System (DFS), Hyper-V, and file and storage services.
  • Common Windows Server management tools.
  • Core Microsoft compute, storage, networking, and virtualization technologies.
  • On-premises resiliency Windows Server-based compute and storage technologies.
  • Implementing and managing IaaS services in Microsoft Azure.
  • Microsoft Entra ID.
  • Security-related technologies (firewalls, encryption, multifactor authentication).
  • Windows PowerShell scripting.
  • Automation and monitoring.

Get started with Azure

Choose the Azure account that's right for you. Pay as you go or try Azure free for up to 30 days. Sign up.