Deploy and manage Active Directory Domain Services

  • Learning Path
  • 8 Modules

At a glance

This learning path covers how to deploy and manage Active Directory Domain Services (AD DS) in on-premises and hybrid environments. You learn how to deploy domain controllers on-premises and in Azure, manage FSMO roles, create and manage users, groups, and organizational units, and extend your on-premises identity into Azure. You also configure Group Policy Objects to enforce security and desktop settings, and work with trusts, replication, and multi-site AD DS environments.

This learning path helps you prepare for Exam AZ-802: Administering Windows Server.

Prerequisites

  • Experience administering Windows Server operating systems
  • Familiarity with Active Directory Domain Services (AD DS) concepts and technologies
  • Basic knowledge of PowerShell

Modules in this learning path

Deploy and manage Active Directory Domain Services domain controllers

This module introduces you to the topology of domain controllers within an Active Directory environment. It also starts you down the path of deploying, managing, and migrating a domain controller between servers.

Deploy and manage Azure IaaS Active Directory domain controllers in Azure

This module covers how to implement Active Directory Domain Services (AD DS) domain controllers on Azure virtual machines. You learn how to choose between deploying a standalone Azure forest or extending an on-premises environment into Azure, configure cross-premises connectivity using site-to-site VPN or ExpressRoute, and plan for AD DS sites, trust relationships, read-only domain controllers (RODCs), FSMO role placement, and global catalog servers. You also walk through the steps to install a replica domain controller and create a new AD DS forest in Azure.

Manage AD DS domain controllers and FSMO roles

This module covers how to deploy and manage AD DS domain controllers and FSMO roles. You learn how to deploy domain controllers in on-premises environments using Server Manager and the AD DS Configuration Wizard, maintain domain controller availability through backup and recovery procedures, manage the global catalog role and its placement across sites, understand and manage the five FSMO roles (schema master, domain-naming master, RID master, infrastructure master, and PDC emulator), transfer FSMO roles between domain controllers and seize roles in emergency scenarios, and manage and extend the AD DS schema.

Create and manage Active Directory objects

This module covers how to create and manage the core objects in Active Directory Domain Services (AD DS). You learn how to create and configure user accounts, security groups, organizational units (OUs), and managed service accounts including group managed service accounts (gMSA). You also perform bulk management tasks such as moving accounts and forcing password resets, and maintain domain controller availability through multi-master replication, Active Directory Recycle Bin, and authoritative and nonauthoritative restore operations.

Implement hybrid identity with Windows Server

This module covers how to implement hybrid identity by integrating on-premises AD DS with Microsoft Entra ID. You learn how to select from Microsoft Entra integration models including extending AD DS to Azure, directory synchronization, password hash sync, and federation with AD FS, plan and prepare on-premises AD DS for synchronization with Microsoft Entra Connect, configure seamless single sign-on (SSO) and pass-through authentication, enable Microsoft Entra ID login for Azure VMs, and implement Microsoft Entra Domain Services for Kerberos authentication, LDAP, and Group Policy in the cloud without deploying domain controllers.

Create and configure Group Policy Objects in Active Directory

This module focuses on Group Policy objects, including using them to enforce a domain wide as well as fine-grained password policy.

Implement Group Policy Objects

Learn to implement Group Policy Objects (GPOs) in Active Directory Domain Services (AD DS).

Manage advanced features of AD DS

This module covers advanced Active Directory Domain Services (AD DS) administration tasks. You learn how to create and manage trust relationships including external, forest, and realm trusts, implement Enhanced Security Administrative Environment (ESAE) forests to protect privileged accounts using the clean-source principle, monitor and troubleshoot AD DS replication using Performance Monitor, Repadmin.exe, and Dcdiag.exe, and create custom AD DS application partitions using NtdsUtil.exe.

Start