Deploy and manage identity infrastructure

After completing this module, you'll be able to:

• Describe AD DS.
• Describe users, groups, and computers.
• Identify and describe AD DS forests and domains.
• Describe OUs.
• Manage objects and their properties in AD DS.

After completing this module, you'll be able to:

• Deploy AD DS domain controllers.
• Maintain AD DS domain controllers.
• Describe the AD DS global catalog role and its placement considerations.
• Describe AD DS operations master roles, their placement considerations, and their management tasks.
• Describe AD DS schema and its management tasks.

After completing this module, you'll be able to:

• Describe GPOs.
• Describe GPO scope and inheritance.
• Describe domain-based GPOs.
• Create and configure GPOs.
• Explain GPO storage.
• Describe administrative templates and the Central Store.

After completing this module, you'll be able to:

• Identify the purpose, types, and the process of creating trust relationships.
• Describe the purpose and the process of implementing ESAE forests.
• Monitor and troubleshoot AD DS replication.
• Identify the purpose and the process of creating custom AD DS partitions.

After completing this module, you will be able to:

• Select an Azure AD integration model.
• Plan for Azure AD integration.
• Prepare on-premises AD DS for directory synchronization.
• Install and configure directory synchronization using Azure AD Connect.
• Implement Seamless Single Sign-on (SSO).
• Enable Azure AD login for an Azure Windows virtual machine (VM).
• Describe Azure AD DS.
• Implement and configure Azure AD DS.
• Manage Windows Server 2019 in an Azure AD DS instance.
• Join a Windows Server VM to a managed domain.

After completing this module, you will be able to:

• Select an option to implement directory and identity services by using Active Directory Domain Services (AD DS) in Azure.
• Deploy and configure AD DS domain controllers in Azure VMs.
• Install a replica AD DS domain controller in an Azure VM.
• Install a new AD DS forest on an Azure VNet.

• Introduction
• Define AD DS
• Define users, groups, and computers
• Define AD DS forests and domains
• Define OUs
• Manage objects and their properties in AD DS
• Knowledge check
• Summary

• Introduction
• Deploy AD DS domain controllers
• Maintain AD DS domain controllers
• Manage the AD DS Global Catalog role
• Manage AD DS operations masters
• Manage AD DS schema
• Knowledge check
• Summary

• Introduction
• Define GPOs
• Implement GPO scope and inheritance
• Define domain-based GPOs
• Create and configure a domain-based GPO
• Define GPO storage
• Define administrative templates
• Knowledge check
• Summary

• Introduction
• Create trust relationships
• Implement ESAE forests
• Monitor and troubleshoot AD DS
• Create custom AD DS partitions
• Knowledge check
• Summary

• Introduction
• Select an Azure Active Directory integration model
• Plan for Azure Active Directory integration
• Prepare on-premises Active Directory for directory synchronization
• Install and configure directory synchronization with Azure Active Directory Connect
• Implement Seamless Single Sign-On
• Enable Azure Active Directory login in for Windows VM in Azure
• Knowledge check 1
• Describe Azure Active Directory Domain Services
• Implement and configure Azure Active Directory Domain Services
• Manage Windows Server 2019 in an Azure Active Directory Domain Services environment
• Create and configure an Azure Active Directory Domain Services instance
• Join a Windows Server VM to a managed domain
• Knowledge check 2
• Summary

• Introduction
• Select an option to implement directory and identity services using Active Directory Domain Services in Azure
• Deploy and configure Active Directory Domain Services domain controllers in Azure VMs
• Install a replica Active Directory domain controller in an Azure VM
• Install a new Active Directory forest on an Azure VNet
• Knowledge check
• Summary