ACTV-DIRECT.AJ1 ISBN: 978-1-64459-590-9
Mastering Active Directory
Master Active Directory from the ground up. Learn to design, secure, and manage AD on-prem and in Azure. Get job-ready fast.
What you will be able to do
- Learn AD structure design and deployment according to organizational needs.
- Manage user access, protect sensitive data with best practices to secure AD environments.
- Build hybrid cloud solutions and integrate on-premises AD with Microsoft Azure Active Directory.
- Use PowerShell 7.x to automate key administrative tasks and save valuable time.
- Master PowerShell 7.x and automate key administrative tasks efficiently.
- Creation, management, and troubleshooting of Group Policy Objects (GPOs) and enforcing security and user configurations.
- Diagnose and resolve complex AD issues in no time.
Intermediate Self-paced · 1 year access
49 Hands-On LiveLabs
Practice real IT tasks in guided environments.
- Real environments
- Auto-graded
- No installation
01 / About
About This Course
Try Free →
No credit card required
Frustrated by misconfiguration, security risks, or hybrid sync failure? Take a deep breath. Much better, right?
Now, get ready to learn AD through trial and error. Our Active Directory Training teaches you to:
- Design, secure, and troubleshoot enterprise AD environments
- Master hybrid Azure AD integration
Enroll now before your next AD crisis hits.
02 / Lessons & labs
See exactly what you will learn and practice
Lessons
20 Interactive Lessons · 208 topics01 Preface 3 topics +
- Who this course is for?
- What this course covers?
- To get the most out of this course
02 Active Directory Fundamentals 7 topics · 1 LiveLab +
- Modern access management
- The future of Identity and Access Management (IAM)
- Hybrid Identity and Active Directory Domain Services
- Benefits of using Active Directory
- Understanding Active Directory components
- Understanding Active Directory objects
- Summary
1 LiveLab in this lesson — see the labs panel →
03 Active Directory Domain Services 2022 6 topics · 1 LiveLab +
- The features of AD DS 2022
- Privileged Access Management (PAM)
- What does PAM have to do with AD DS 2022?
- Windows Hello for Business
- PowerShell 7
- Summary
1 LiveLab in this lesson — see the labs panel →
04 Designing an Active Directory Infrastructure 12 topics · 2 LiveLab +
- What makes a good system?
- Gathering business requirements
- Designing the forest structure
- Creating the forest structure
- Selecting forest design models
- Designing the domain structure
- Deciding on the domain and forest functional levels
- Designing the OU structure
- Designing the physical topology of Active Directory
- Designing a hybrid identity
- Identifying business needs
- Summary
2 LiveLab in this lesson — see the labs panel →
05 Active Directory Domain Name System 13 topics · 5 LiveLab +
- What is DNS?
- Hierarchical naming structures
- How DNS works
- DNS infrastructure design
- DNS essentials
- Conditional forwarders
- DNS policies
- Secure DNS client over HTTPS (DoH)
- DNS server operation modes
- Zone transfers
- DNS delegation
- DNS service providers
- Summary
5 LiveLab in this lesson — see the labs panel →
06 Placing Operations Master Roles 6 topics · 1 LiveLab +
- FSMO roles
- Active Directory's logical and physical topology
- Best practices
- Moving FSMO roles
- Seizing FSMO roles
- Summary
1 LiveLab in this lesson — see the labs panel →
07 Migrating to Active Directory 2022 5 topics · 3 LiveLab +
- AD DS installation prerequisites
- AD DS installation methods
- AD DS deployment scenarios
- How to plan AD migrations
- Summary
3 LiveLab in this lesson — see the labs panel →
08 Managing Active Directory Objects 9 topics · 2 LiveLab +
- Tools and methods for managing objects
- AD object administration with PowerShell
- Creating computer objects
- Modifying AD objects
- Removing AD objects
- Finding objects in AD
- Preventing the accidental deletion of objects
- AD recycle bin
- Summary
2 LiveLab in this lesson — see the labs panel →
09 Managing Users, Groups, and Devices 8 topics · 2 LiveLab +
- Object attributes
- Custom attributes
- Syncing custom attributes to Azure AD
- User accounts
- Groups
- Devices and other objects
- Best practices
- Summary
2 LiveLab in this lesson — see the labs panel →
10 Designing the OU Structure 6 topics · 1 LiveLab +
- OUs in operations
- Containers vs. OUs
- Active Directory Groups vs. OUs
- OU design models
- Managing the OU structure
- Summary
1 LiveLab in this lesson — see the labs panel →
11 Managing Group Policies 15 topics · 6 LiveLab +
- Benefits of group policies
- Group Policy capabilities
- Group Policy objects
- The Group Policy template
- Group Policy processing
- Group Policy inheritance
- Group Policy conflicts
- Administrative templates
- Group Policy filtering
- Group Policy preferences
- Item-level targeting
- Loopback processing
- Group Policy best practices
- Useful group policies
- Summary
6 LiveLab in this lesson — see the labs panel →
12 Active Directory Services - Part 01 6 topics · 3 LiveLab +
- Overview of AD LDS
- Where to use LDS
- The LDS installation
- AD replication
- Sites
- Summary
3 LiveLab in this lesson — see the labs panel →
13 Active Directory Services – Part 02 5 topics · 1 LiveLab +
- Active Directory trusts
- RODCs
- Active Directory database maintenance
- Active Directory Backup and Recovery
- Summary
1 LiveLab in this lesson — see the labs panel →
14 Active Directory Certificate Services 11 topics · 6 LiveLab +
- PKI in action
- SSL certificates
- AD CS components
- Planning PKI
- PKI deployment models
- Setting up a PKI
- Certificate templates
- Requesting certificates
- Migrating AD CS from Windows Server 2008 R2 to Windows Server 2022
- AD CS disaster recovery
- Summary
6 LiveLab in this lesson — see the labs panel →
15 Active Directory Federation Services 7 topics · 1 LiveLab +
- How does AD FS work?
- AD FS components
- AD FS configuration database
- AD FS deployment topologies
- AD FS deployment
- Azure AD federation with AD FS
- Summary
1 LiveLab in this lesson — see the labs panel →
16 Active Directory Rights Management Services 6 topics · 1 LiveLab +
- What is AD RMS?
- AD RMS components
- How does AD RMS work?
- How do we deploy AD RMS?
- Azure Information Protection (AIP)
- Summary
1 LiveLab in this lesson — see the labs panel →
17 Active Directory Security Best Practices 23 topics · 6 LiveLab +
- AD authentication
- The Kerberos protocol
- Authentication in an AD environment
- Delegating permissions
- Predefined AD administrator roles
- Using object ACLs
- Using the delegate control method in AD
- Implementing fine-grained password policies
- Limitations
- Resultant Set of Policy (RSoP)
- Configuration
- Pass-the-hash attacks
- The Protected Users security group
- Restricted admin mode for RDP
- Authentication policies and authentication policy silos
- Authentication policies
- Authentication policy silos
- Creating authentication policies
- Creating authentication policy silos
- Secure LDAP
- Microsoft Local Administrator Password Solution (LAPS)
- On-prem Azure AD Password Protection
- Summary
6 LiveLab in this lesson — see the labs panel →
18 Advanced AD Management with PowerShell 20 topics · 2 LiveLab +
- AD management with PowerShell – preparation
- AD management commands and scripts
- Replication
- Replicating a specific object
- Users and groups
- Last login date report
- Login failures report
- Finding the locked-out account
- Password expire report
- Review the membership of the high-level administrative groups
- Dormant accounts
- Users with the Password Never Expires setting
- Azure Active Directory PowerShell
- Installation
- General commands
- Managing users
- Managing groups
- Microsoft Graph
- Microsoft Graph Explorer
- Summary
2 LiveLab in this lesson — see the labs panel →
19 Hybrid Identity 18 topics · 1 LiveLab +
- Extending on-prem AD to Azure AD
- Evaluating the present business requirements
- Evaluating an organization's infrastructure road map
- Evaluating the security requirements
- Selecting the Azure AD version
- Federation with Azure AD
- Step-by-step guide to integrating an on-prem AD environment with Azure AD
- Creating a virtual network
- Setting up an Azure AD managed domain
- Adding DNS server details to the virtual network
- Creating a Global Administrator account for Azure AD Connect
- Setting up Azure AD Connect
- Installing the Pass-through Authentication agent
- Azure AD Connect configuration
- Syncing NTLM and Kerberos credential hashes to Azure AD
- Enabling secure LDAP (LDAPS) for an Azure AD DS managed domain
- Enable secure LDAP (LDAPS)
- Summary
1 LiveLab in this lesson — see the labs panel →
20 Active Directory Audit and Monitoring 22 topics · 4 LiveLab +
- Auditing and monitoring AD using built-in Windows tools and techniques
- Windows Event Viewer
- Custom Views
- Windows Logs
- Applications and Services Logs
- Subscriptions
- AD DS event logs
- AD DS log files
- AD audit
- Demonstration
- Setting up event subscriptions
- Security event logs from domain controllers
- Enabling advanced security audit policies
- Enforcing advanced auditing
- Reviewing events with PowerShell
- Microsoft Defender for Identity
- What is Microsoft Defender for Identity?
- Defender for Identity benefits
- Azure AD Connect Health
- Prerequisites
- Configuration
- Summary
4 LiveLab in this lesson — see the labs panel →
Hands-On Labs Our edge
49 LiveLabs- Creating a User Account in AD
- Configuring Time-Based Group Memberships Using PAM
- Creating an AD Forest Structure
- Designing an OU Structure
- Verifying and Configuring Global Catalog and DNS Services
- Working with DNS Zones
- Implementing DNS Conditional Forwarders
- Creating a DNS Policy
- Configuring a DNS Zone Delegation
- Configuring the PDC Emulator
- Modifying and Removing AD Objects
- Promoting a Domain Controller
- Performing a Comprehensive Active Directory Health Check
- Using PowerShell to Manage an AD User and Group
- Preventing the Accidental Deletion of Objects
- Creating and Using a Custom Attribute
- Creating a User Template
- Delegating Administrative Control in AD Using OU
- Working with Group Policy Inheritance
- Managing Group Policy Mapping and Status
- Adding Security Filtering to a GPO
- Configuring and Managing Group Policy Preferences
- Working with Item-level Targeting
- Enabling Loopback Processing for Group Policy
- Installing AD LDS
- Creating an AD Subnet
- Creating an AD Site
- Using AD Recycle Bin
- Using a Hashing Algorithm
- Performing Symmetric Encryption
- Performing Asymmetric Encryption
- Performing EFS
- Creating an IPsec Policy
- Creating a Custom Certificate Template
- Deploying AD FS
- Setting Up an AD RMS Root Cluster
- Using Object ACLs
- Using the Delegate Control Method in AD
- Implementing Fine-Grained Password Policies
- Creating an Authentication Policy
- Creating an Authentication Policy Silo
- Enabling Secure LDAP
- Verifying and Forcing AD Replication
- Reviewing Membership of High-Level Administrative Groups
- Creating a Virtual Network in Azure
- Using Windows Event Viewer
- Setting Up an Event Subscription
- Enabling Advanced Security Audit Policies
- Reviewing Events with PowerShell
Labs run in your browser — nothing to install.
03 / FAQs
Questions before you start
Is Active Directory Being Phased Out?+
Nope! Active Directory isn’t going anywhere. It’s still a vital part of IT, especially with hybrid setups that mix on-prem and cloud. AD's here to stay, just like email.
Is It Worth Learning Active Directory?+
Heck yes! Active Directory skills are like gold in IT. It’s the backbone of network security, and mastering it opens doors to awesome career opportunities. Don't miss out!
What Are the Five Roles of Active Directory?+
Here’s the quick rundown:
- Domain Controller (DC): Authenticates and manages security.
- Global Catalog (GC): The AD search engine.
- FSMO: Keeps things running smoothly.
- RODC: Secure remote sites with a read-only controller.
- GPO: Centralizes settings and policies.
Keep going
You might also like
Ready to Master Active Directory
Don't wait to become the expert your team needs. Join our Active Directory course today and unlock the career growth you deserve.
- 1 year of full access
- 49 LiveLab included
- Certificate of completion
No credit card required