Active Directory Administration: Complete Course

📚 On-Premises · Windows Server · Intermediate

Active Directory

Active Directory Administration
Complete Course

The definitive hands-on course for Active Directory Domain Services (AD DS) — from domain setup and user management to Group Policy, replication, FSMO roles, security hardening, and disaster recovery. AZ-800 aligned.

🟡 Intermediate📦 8 Modules⌛ ~8 Hours💻 Windows Server + PowerShell🎯 AZ-800 Aligned
Start Module 1 →
All Courses
AZ-800

🎯 Aligned to AZ-800: Administering Windows Server Hybrid Core Infrastructure

AZ-800 is Microsoft’s Associate-level certification for Windows Server and hybrid infrastructure administrators. The Active Directory modules of AZ-800 map directly to the content in this course — covering AD DS deployment, user and group management, Group Policy, sites and replication, FSMO roles, and identity integration with Microsoft Entra ID. Every module includes exam alignment notes and a 5-question scenario-based mock test.

Deploy & Manage AD DS
Users, Groups & Computers
OUs & Delegation of Control
Group Policy Management
DNS & DHCP Integration
Sites & Replication
FSMO Roles & Trusts
AD Security & Backup

What You’ll Learn

By the end of this course you will be able to deploy, manage, and secure an Active Directory environment — from a single domain to a multi-site enterprise forest

Install and configure Active Directory Domain Services (AD DS) on Windows Server and promote a domain controller
Understand forest, domain, and tree architecture — including schema, global catalog, and functional levels
Create and manage user accounts, UPN suffixes, bulk operations, and account lifecycle management
Configure group types and scopes — Domain Local, Global, and Universal — with nesting best practices
Design and implement an OU hierarchy with delegation of control and protected object settings
Create, link, and troubleshoot Group Policy Objects — including inheritance, filtering, and ADMX templates
Configure AD-integrated DNS zones, SRV records, conditional forwarders, and DNS scavenging
Install and manage DHCP with failover, option sets, and DNS dynamic registration integration
Create and configure AD Sites, subnets, and site links to control inter-site replication
Deploy and manage Read-Only Domain Controllers (RODCs) for branch offices with password replication policies
Understand and manage the five FSMO roles — PDC Emulator, RID Master, Infrastructure Master, Schema Master, and Domain Naming Master
Configure external trusts, forest trusts, and shortcut trusts with trust verification and monitoring
Implement fine-grained password policies using Password Settings Objects (PSOs)
Harden Active Directory using the tiered administration model, Protected Users group, and AdminSDHolder
Back up and restore Active Directory including authoritative and non-authoritative restores using Windows Server Backup
Automate Active Directory administration using Windows PowerShell with the ActiveDirectory module

📋 Prerequisites

  • Basic familiarity with Windows Server — Server Manager, installing roles and features, and GUI navigation
  • Understanding of basic networking — IP addressing, subnets, DNS fundamentals, and DHCP concepts
  • Some experience with Windows environments (workstations or servers) is helpful but not required
  • No prior Active Directory experience needed — the course builds from the ground up

Course Modules

Eight modules covering the complete Active Directory administration lifecycle — each with PowerShell commands, real-world scenarios, and AZ-800 mock test questions

01
AZ-800 Aligned · 6 Topics

Active Directory Overview & Installation

AD DS concepts — domain, forest, tree, schema, and global catalog. Installing the AD DS role and promoting a domain controller using Server Manager and PowerShell (Install-ADDSForest). Domain and forest functional levels. Post-installation management tools: ADUC, ADAC, ADSI Edit, and the PowerShell ActiveDirectory module.

→


02
AZ-800 Aligned · 7 Topics

Managing Users, Groups & Computer Accounts

Creating and managing user accounts — required attributes, UPN suffixes, account options, and expiry. Group types (Security vs Distribution) and scopes (Domain Local, Global, Universal) with AGDLP nesting. Computer accounts and domain-join process. Bulk user creation via CSV and PowerShell (New-ADUser, Set-ADUser, Get-ADGroupMember).

→


03
AZ-800 Aligned · 5 Topics

Organizational Units & Delegation of Control

OU design principles — by location, department, and object type. Creating and managing OUs in ADUC and via PowerShell (New-ADOrganizationalUnit). Delegation of Control wizard — granting granular administrative permissions without full Domain Admin rights. Protecting OUs and objects from accidental deletion. GPO scope and filtering using OU structure.

→


04
AZ-800 Aligned · 7 Topics

Group Policy Management & Configuration

GPO creation and linking at site, domain, and OU level. GPO inheritance, enforcement, and blocking inheritance. Security filtering and WMI filtering. ADMX templates and the Central Store for enterprise-wide policy management. Common policy settings — default domain password policy, drive mapping, software deployment, and desktop restrictions. Troubleshooting with RSoP, gpresult, and gpupdate.

→


05
AZ-800 Aligned · 6 Topics

DNS & DHCP Integration with Active Directory

AD-integrated DNS zones — primary, secondary, and stub zones. Forward and reverse lookup zones, SRV records for AD service location, and dynamic DNS registration. Conditional forwarders, root hints, DNS aging and scavenging. DHCP server role — scope creation, reservations, exclusions, and option sets. DHCP failover for high availability and DHCP-DNS dynamic registration integration.

→


06
AZ-800 Aligned · 6 Topics

Active Directory Sites & Replication

AD Sites and Subnets — mapping your network topology to Active Directory. Site links, cost, replication intervals, and site link bridges. KCC (Knowledge Consistency Checker) and automatic replication topology generation. Intra-site vs inter-site replication and bridgehead servers. Read-Only Domain Controllers (RODCs) for branch offices — Password Replication Policy (PRP) and administrator role separation. Monitoring replication health with repadmin and Event Viewer.

→


07
AZ-800 Aligned · 5 Topics

FSMO Roles, Trusts & Forest Management

The five FSMO roles — PDC Emulator, RID Master, Infrastructure Master, Schema Master, and Domain Naming Master — their responsibilities and failure impact. Viewing, transferring, and seizing FSMO roles. Trust types — external, forest, shortcut, and realm trusts — with direction and transitivity. Adding and removing domain controllers. Raising domain and forest functional levels safely.

→


08
AZ-800 Aligned · 7 Topics

AD Security, Monitoring, Backup & Recovery

Fine-grained password policies (PSOs) using Password Settings Objects and PSO precedence. Tiered administration model and Privileged Access Workstations (PAWs). AD security hardening — AdminSDHolder, Protected Users security group, and Credential Guard. Audit policies and monitoring critical AD events in Windows Event Viewer (Event IDs 4720, 4740, 4726). AD Recycle Bin. NTDS.dit backup with Windows Server Backup and Wbadmin. Authoritative and non-authoritative restore procedures.

→

Ready to Start?

Begin with Module 1 and build your Active Directory administration skills from the ground up. Every module includes PowerShell commands and AZ-800 exam questions to prepare you for the certification.

Begin Module 1: AD Overview & Installation →