AZ-1008: Administer Active Directory Domain Services

 Module 1 – Deploy and manage Active Directory Domain Services domain controllers 

• Define Active Directory Domain Services 

• Define Active Directory Domain Services forests and domains 

• Deploy Active Directory Domain Services domain controllers 

• Migrate a domain controller to a new site 

• Manage Active Directory Domain Services operations masters
  

Module 2 – Create and manage Active Directory objects 

• Define users, groups, and computers 

• Define organizational units 

• Manage objects and their properties in Active Directory 

• Create objects in Active Directory 

• Configure objects in Active Directory 

• Perform bulk management tasks for user accounts 

• Maintain Active Directory Domain Services domain controllers

Module 3 – Create and configure Group Policy Objects in Active Directory 

• Define Group Policy Objects 

• Implement Group Policy Object scope and inheritance 

• Define domain-based Group Policy Objects 

• Create and configure a domain-based Group Policy Object 

• Configure a domain password policy 

• Configure and apply a fine-grained password policy

Module 4 – Manage security in Active Directory 

• Configure user account rights 

• Configure user account rights to restrict access 

• Delegate permissions in Active Directory 

• Protect User Accounts with the Protected Users group 

• Describe Windows Defender Credential Guard 

• Block Windows NTLM authentication 

• Locate problematic accounts