uCertify

Mastering Active Directory

Master Active Directory from the ground up. Learn to design, secure, and manage AD on-prem and in Azure. Get job-ready fast.

(ACTV-DIRECT.AJ1) / ISBN : 978-1-64459-590-9
Lessons
Lab
TestPrep
AI Tutor (Add-on)
Get A Free Trial

About This Course

Frustrated by misconfiguration, security risks, or hybrid sync failure? Take a deep breath. Much better, right?

Now, get ready to learn AD through trial and error. Our Active Directory Training teaches you to: 

  • Design, secure, and troubleshoot enterprise AD environments
  • Master hybrid Azure AD integration

Enroll now before your next AD crisis hits. 

Skills You’ll Get

  • Learn AD structure design and deployment according to organizational needs. 
  • Manage user access, protect sensitive data with best practices to secure AD environments.
  • Build hybrid cloud solutions and integrate on-premises AD with Microsoft Azure Active Directory.
  • Use PowerShell 7.x to automate key administrative tasks and save valuable time.
  • Master PowerShell 7.x and automate key administrative tasks efficiently. 
  • Creation, management, and troubleshooting of Group Policy Objects (GPOs) and enforcing security and user configurations. 
  • Diagnose and resolve complex AD issues in no time.
Download Course Outline

1

Preface

  • Who this course is for
  • What this course covers
  • To get the most out of this course
2

Active Directory Fundamentals

  • Modern access management
  • The future of Identity and Access Management (IAM)
  • Hybrid Identity and Active Directory Domain Services
  • Benefits of using Active Directory
  • Understanding Active Directory components
  • Understanding Active Directory objects
  • Summary
3

Active Directory Domain Services 2022

  • The features of AD DS 2022
  • Privileged Access Management (PAM)
  • What does PAM have to do with AD DS 2022?
  • Windows Hello for Business
  • PowerShell 7
  • Summary
4

Designing an Active Directory Infrastructure

  • What makes a good system?
  • Gathering business requirements
  • Designing the forest structure
  • Creating the forest structure
  • Selecting forest design models
  • Designing the domain structure
  • Deciding on the domain and forest functional levels
  • Designing the OU structure
  • Designing the physical topology of Active Directory
  • Designing a hybrid identity
  • Identifying business needs
  • Summary
5

Active Directory Domain Name System

  • What is DNS?
  • Hierarchical naming structures
  • How DNS works
  • DNS infrastructure design
  • DNS essentials
  • Conditional forwarders
  • DNS policies
  • Secure DNS client over HTTPS (DoH)
  • DNS server operation modes
  • Zone transfers
  • DNS delegation
  • DNS service providers
  • Summary
6

Placing Operations Master Roles

  • FSMO roles
  • Active Directory's logical and physical topology
  • Best practices
  • Moving FSMO roles
  • Seizing FSMO roles
  • Summary
7

Migrating to Active Directory 2022

  • AD DS installation prerequisites
  • AD DS installation methods
  • AD DS deployment scenarios
  • How to plan AD migrations
  • Summary
8

Managing Active Directory Objects

  • Tools and methods for managing objects
  • AD object administration with PowerShell
  • Creating computer objects
  • Modifying AD objects
  • Removing AD objects
  • Finding objects in AD
  • Preventing the accidental deletion of objects
  • AD recycle bin
  • Summary
9

Managing Users, Groups, and Devices

  • Object attributes
  • Custom attributes
  • Syncing custom attributes to Azure AD
  • User accounts
  • Groups
  • Devices and other objects
  • Best practices
  • Summary
10

Designing the OU Structure

  • OUs in operations
  • Containers vs. OUs
  • Active Directory Groups vs. OUs
  • OU design models
  • Managing the OU structure
  • Summary
11

Managing Group Policies

  • Benefits of group policies
  • Group Policy capabilities
  • Group Policy objects
  • The Group Policy template
  • Group Policy processing
  • Group Policy inheritance
  • Group Policy conflicts
  • Administrative templates
  • Group Policy filtering
  • Group Policy preferences
  • Item-level targeting
  • Loopback processing
  • Group Policy best practices
  • Useful group policies
  • Summary
12

Active Directory Services – Part 01

  • Overview of AD LDS
  • Where to use LDS
  • The LDS installation
  • AD replication
  • Sites
  • Summary
13

Active Directory Services – Part 02

  • Active Directory trusts
  • RODCs
  • Active Directory database maintenance
  • Active Directory Backup and Recovery
  • Summary
14

Active Directory Certificate Services

  • PKI in action
  • SSL certificates
  • AD CS components
  • Planning PKI
  • PKI deployment models
  • Setting up a PKI
  • Certificate templates
  • Requesting certificates
  • Migrating AD CS from Windows Server 2008 R2 to Windows Server 2022
  • AD CS disaster recovery
  • Summary
15

Active Directory Federation Services

  • How does AD FS work?
  • AD FS components
  • AD FS configuration database
  • AD FS deployment topologies
  • AD FS deployment
  • Azure AD federation with AD FS
  • Summary
16

Active Directory Rights Management Services

  • What is AD RMS?
  • AD RMS components
  • How does AD RMS work?
  • How do we deploy AD RMS?
  • Azure Information Protection (AIP)
  • Summary
17

Active Directory Security Best Practices

  • AD authentication
  • The Kerberos protocol
  • Authentication in an AD environment
  • Delegating permissions
  • Predefined AD administrator roles
  • Using object ACLs
  • Using the delegate control method in AD
  • Implementing fine-grained password policies
  • Limitations
  • Resultant Set of Policy (RSoP)
  • Configuration
  • Pass-the-hash attacks
  • The Protected Users security group
  • Restricted admin mode for RDP
  • Authentication policies and authentication policy silos
  • Authentication policies
  • Authentication policy silos
  • Creating authentication policies
  • Creating authentication policy silos
  • Secure LDAP
  • Microsoft Local Administrator Password Solution (LAPS)
  • On-prem Azure AD Password Protection
  • Summary
18

Advanced AD Management with PowerShell

  • AD management with PowerShell – preparation
  • AD management commands and scripts
  • Replication
  • Replicating a specific object
  • Users and groups
  • Last logon time
  • Last login date report
  • Login failures report
  • Finding the locked-out account
  • Password expire report
  • Review the membership of the high-level administrative groups
  • Dormant accounts
  • Users with the Password Never Expires setting
  • Azure Active Directory PowerShell
  • Installation
  • General commands
  • Managing users
  • Managing groups
  • Microsoft Graph
  • Microsoft Graph Explorer
  • Summary
19

Hybrid Identity

  • Extending on-prem AD to Azure AD
  • Evaluating the present business requirements
  • Evaluating an organization's infrastructure road map
  • Evaluating the security requirements
  • Selecting the Azure AD version
  • Federation with Azure AD
  • Step-by-step guide to integrating an on-prem AD environment with Azure AD
  • Creating a virtual network
  • Setting up an Azure AD managed domain
  • Adding DNS server details to the virtual network
  • Creating a Global Administrator account for Azure AD Connect
  • Setting up Azure AD Connect
  • Installing the Pass-through Authentication agent
  • Azure AD Connect configuration
  • Syncing NTLM and Kerberos credential hashes to Azure AD
  • Enabling secure LDAP (LDAPS) for an Azure AD DS managed domain
  • Enable secure LDAP (LDAPS)
  • Summary
20

Active Directory Audit and Monitoring

  • Auditing and monitoring AD using built-in Windows tools and techniques
  • Windows Event Viewer
  • Custom Views
  • Windows Logs
  • Applications and Services Logs
  • Subscriptions
  • AD DS event logs
  • AD DS log files
  • AD audit
  • Demonstration
  • Setting up event subscriptions
  • Security event logs from domain controllers
  • Enabling advanced security audit policies
  • Enforcing advanced auditing
  • Reviewing events with PowerShell
  • Microsoft Defender for Identity
  • What is Microsoft Defender for Identity?
  • Defender for Identity benefits
  • Azure AD Connect Health
  • Prerequisites
  • Configuration
  • Summary

Any questions?
Check out the FAQs

Read answers to commonly asked questions about this certification exam.

Contact Us Now

Nope! Active Directory isn’t going anywhere. It’s still a vital part of IT, especially with hybrid setups that mix on-prem and cloud. AD's here to stay, just like email.

Heck yes! Active Directory skills are like gold in IT. It’s the backbone of network security, and mastering it opens doors to awesome career opportunities. Don't miss out!

Here’s the quick rundown:

  • Domain Controller (DC): Authenticates and manages security.
  • Global Catalog (GC): The AD search engine.
  • FSMO: Keeps things running smoothly.
  • RODC: Secure remote sites with a read-only controller.
  • GPO: Centralizes settings and policies.

Related Courses

All Course