Administer Active Directory Domain Services (AZ-1008)
Course 8736
1 DAY COURSE

Price: $644.00
Course Outline

Learn the essential skills to create, deploy, and maintain an Active Directory Domain Services (AD DS) environment. This learning path is designed for administrators seeking to deepen their expertise in managing Active Directory, securing user access, and enforcing organizational policies.

Administer Active Directory Domain Services (AZ-1008) Benefits

  • In this course, you will:

    • Understand the role of domain controllers in AD DS, learn to deploy them effectively, and migrate them across environments.
    • Configure and manage users, groups, and organizational units to streamline access control and domain operations.
    • Use Group Policy to enforce security policies, manage configurations, and implement password policies.
    • Manage permissions, enforce authentication protections, and identify potential security risks.
    • Apply your skills in a real-world guided project that covers domain deployment, Group Policy configuration, and security enforcement.
  • Prerequisites

    Knowledge of and experience working with:

    • Windows Server.
    • Core networking technologies.

Administer Active Directory (AZ-1008) Training Outline

Learning Objectives

Deploy and Manage Active Directory Domain Services Domain Controllers

  • Understand the role and topology of domain controllers in an AD environment.
  • Define forests and domains within Active Directory.
  • Deploy and migrate domain controllers across different sites.
  • Manage operations masters for domain-wide control.

Create and Manage Active Directory Objects

  • Define and manage users, groups, and computers.
  • Organize directory objects using Organizational Units (OUs).
  • Configure and modify Active Directory object properties.
  • Perform bulk management tasks for user accounts.
  • Maintain Active Directory domain controllers.

Create and Configure Group Policy Objects in Active Directory

  • Define Group Policy Objects (GPOs) and their scope.
  • Implement domain-wide and fine-grained password policies.
  • Configure domain-based Group Policy Objects.
  • Apply security and access management policies across the organization.

Manage Security in Active Directory

  • Configure user account rights and access restrictions.
  • Delegate permissions to enforce role-based access control.
  • Secure accounts using the Protected Users group.
  • Implement Windows Defender Credential Guard for enhanced security.
  • Block Windows NTLM authentication and identify problematic accounts.

Guided Project: Administer Active Directory Domain Services

  • Configure and deploy domain controllers.
  • Implement user and group management strategies.
  • Establish and enforce password policies.
  • Configure security settings to protect Active Directory.
Course Dates

For course questions or any customer service inquiry, please contact your Customer Service team at BAHCustomerService@LearningTree.com.

We are excited that Learning Tree now offers a deferred direct bill payment option for Booz Allen employees. The deferred direct bill payment option enables employees to enroll in learning opportunities with no upfront costs. This payment option will require the employee to sign a Family Educational Rights and Privacy Act (FERPA) agreement with Learning Tree to release grades/completion to Booz Allen to satisfy the FlexEd Program completion requirement. Note, Learning Tree may also be used for the FlexEd Program reimbursement payment option.

Attendance Method
Additional Details (optional)

Private Team Training

Interested in this course for your team? Please complete and submit the form below and we will contact you to discuss your needs and budget.