AZ-1008 Administer Active Directory Domain Services

1 – Deploy and manage Active Directory Domain Services domain controllers

• Define Active Directory Domain Services
• Define Active Directory Domain Services forests and domains
• Deploy Active Directory Domain Services domain controllers
• Migrate a domain controller to a new site
• Manage Active Directory Domain Services operations masters
• Module assessment

2 – Create and manage Active Directory objects

• Define users, groups, and computers
• Define organizational units
• Manage objects and their properties in Active Directory
• Create objects in Active Directory
• Configure objects in Active Directory
• Perform bulk management tasks for user accounts
• Maintain Active Directory Domain Services domain controllers
• Module assessment

3 – Create and configure Group Policy Objects in Active Directory

• Define Group Policy Objects
• Implement Group Policy Object scope and inheritance
• Define domain-based Group Policy Objects
• Create and configure a domain-based Group Policy Object
• Configure a domain password policy
• Configure and apply a fine-grained password policy
• Module assessment

4 – Manage security in Active Directory

• Configure user account rights
• Configure user account rights to restrict access
• Delegate permissions in Active Directory
• Protect User Accounts with the Protected Users group
• Describe Windows Defender Credential Guard
• Block Windows NTLM authentication
• Locate problematic accounts
• Module assessment

5 – Guided project – Administer Active Directory Domain Services

• Prepare
• Module assessment