Call Email Facebook Instagram Linkedin

AZ-1008: Administer Active Directory Domain Services

  • 4.9(31,452 Rating)

Course Overview

The AZ-1008: Administer Active Directory Domain Services (AD DS) course is designed for IT professionals responsible for deploying, managing, and securing identity infrastructure in enterprise environments. This course provides in-depth knowledge of administering on-premises Active Directory Domain Services and integrating it with modern Microsoft Azure and hybrid identity solutions.

Participants will gain practical expertise in managing domains, forests, organisational units (OUs), users, groups, and Group Policy Objects (GPOs). The course also covers advanced AD DS operations such as authentication and authorisation, replication, backup and recovery, security hardening, and troubleshooting complex directory service issues.

Through hands-on labs and real-world administrative scenarios, learners will develop the skills required to maintain a secure, scalable, and highly available Active Directory environment that supports business operations, compliance requirements, and hybrid cloud strategies.

This course is ideal for organisations modernising identity infrastructure or professionals seeking mastery of enterprise identity and access management using Microsoft technologies.

Key Learning Outcomes:

By completing this course, participants will be able to:

  • Deploy and manage Active Directory Domain Services
  • Administer users, groups, computers, and OUs
  • Configure and manage Group Policy Objects (GPOs)
  • Secure AD DS using best-practice security controls
  • Manage AD replication, trusts, and sites
  • Monitor, maintain, and troubleshoot AD environments

Prerequisites:

Knowledge of and experience working with:

  • Windows Server.
  • Core networking technologies.

Schedule Dates

06 April 2026
AZ-1008: Administer Active Directory Domain Services
06 July 2026
AZ-1008: Administer Active Directory Domain Services
12 October 2026
AZ-1008: Administer Active Directory Domain Services
18 January 2027
AZ-1008: Administer Active Directory Domain Services

Course Content

  • Understand the role and topology of domain controllers in an AD environment.
  • Define forests and domains within Active Directory.
  • Deploy and migrate domain controllers across different sites.
  • Manage operations masters for domain-wide control.

  • Define and manage users, groups, and computers.
  • Organize directory objects using Organizational Units (OUs).
  • Configure and modify Active Directory object properties.
  • Perform bulk management tasks for user accounts.
  • Maintain Active Directory domain controllers.

  • Define Group Policy Objects (GPOs) and their scope.
  • Implement domain-wide and fine-grained password policies.
  • Configure domain-based Group Policy Objects.
  • Apply security and access management policies across the organization.

  • Configure user account rights and access restrictions.
  • Delegate permissions to enforce role-based access control.
  • Secure accounts using the Protected Users group.
  • Implement Windows Defender Credential Guard for enhanced security.
  • Block Windows NTLM authentication and identify problematic accounts.

  • Configure and deploy domain controllers.
  • Implement user and group management strategies.
  • Establish and enforce password policies.
  • Configure security settings to protect Active Directory.

FAQs

AZ-1008 focuses on the administration and operational management of Active Directory Domain Services, including identity management, policy enforcement, security, and high availability in enterprise environments.

Yes. While the course focuses on on-premises AD DS, it also addresses hybrid identity scenarios, including integration with Azure Active Directory (Microsoft Entra ID).

Absolutely. The course is designed for enterprise-scale AD infrastructures, covering multi-domain, multi-forest, and distributed environments.

Yes. Learners gain in-depth knowledge of GPO design, implementation, troubleshooting, and best practices for enforcing security and configuration standards.

Yes. Participants will learn how to configure and troubleshoot AD replication, manage sites and services, and establish trust relationships between domains and forests.

Yes. The course includes practical, scenario-based labs that simulate real-world Active Directory administration tasks.

By mastering AD DS administration and hybrid integration, learners can support secure identity management, single sign-on (SSO), and cloud-ready authentication frameworks aligned with modern IT strategies.