In addition to their professional experience, students who attend this training should already have the following technical knowledge:

• Experience with AD DS concepts and technologies in Windows Server 2012 or Windows Server 2016.
• Experience working with and configuring Windows Server 2012 or Windows Server 2016.
• Basic experience with Windows PowerShell.
• Basic experience with cloud services such as Microsoft Office 365.
• Basic experience with the Azure platform.
• Basic experience with identities on premises or in cloud.

Delegates attending this course will receive access to a trial Azure subscription that includes additional free-of-charge benefit of 30 days, (maximum spend of £75), of access to Azure, post course. Delegates should be advised that any email account used to subscribe for the Azure trial subscriptions will locked to them and so cannot be used again with any other Azure subscription. To avoid any impact caused by this, delegates attending this course are required to create new Microsoft Outlook/Hotmail/Live email accounts in order to register for their trial Azure subscription (required for completion of the course labs).

After completing this course, students will be able to:

• Compare Azure AD to AD DS, perform Azure AD tenant provisioning, and manage objects and user roles in Azure AD.
• Implement and configure directory synchronization and manage synchronized directories.
• Use Azure AD as a directory service for an on-premises environment, configure single sign-on (SSO) in Azure AD, and protect privileged identities.
• Implement multi-factor authentication.
• Implement Azure RMS and integrate Azure RMS with on-premises services.
• Configure alerts and monitor directory services infrastructure

Module 1: Introducing Azure AD
This module describes the differences between Azure AD and AD DS, and the Azure AD versions. It also explains how to perform Azure AD tenant provisioning and how to manage objects and user roles in Azure AD.

Lessons

• Azure AD overview
• Implementing and configuring Azure AD
• Managing Azure AD

Lab : Creating and managing an Azure AD tenant

• Activating an Azure trial subscription
• Creating an Azure AD tenant and objects in Azure AD
• Configuring user roles in Azure AD

Module 2: Integrating on-premises AD DS with Azure
This module explains how to extend an on-premises Active Directory domain to Azure, and how directory synchronization works. It also describes how to implement and configure directory synchronization. Additionally, this module describes how to manage synchronized directories.

Lessons

• Extending an on-premises Active Directory domain to Azure
• Directory synchronization overview
• Implementing and configuring directory synchronization
• Managing synchronized directories

Lab : Implementing directory synchronization

• Implementing Azure AD Connect
• Managing directory synchronization

Module 3: Using Azure AD as a directory service in hybrid environments
This module explains how to use Azure AD as a directory service for an on-premises environment, and how to configure SSO in Azure AD. Also it describes how to implement privileged identity management in Azure AD.

Lessons

• Azure AD as a directory service for on-premises environments
• Configuring SSO with Azure AD
• Implementing privileged identity management in Azure AD

Lab : Using Azure AD in hybrid environments

• Joining a Windows 10 computer to Azure AD
• Implementing SSO with Azure AD
• Configuring and using Azure AD Privileged Identity Management

Module 4: Configuring and protecting authentication in hybrid environments
This module explains how authentication works in hybrid environments. In addition, it describes how to implement Azure Multi-Factor Authentication.

Lessons

• Authentication in hybrid environments
• Implementing Azure Multi-Factor Authentication

Lab : Configuring authentication in hybrid environments

• Implementing self-service password reset
• Implementing Azure Multi-Factor Authentication
• Implementing Azure Multi-Factor Authentication Server on-premises

Module 5: Deploying Azure RMS with on-premises services
This module explains how rights management technologies, Active Directory RMS, and Azure RMS work. In addition, it describes how to implement Azure RMS, and how to integrate Azure RMS with on-premises services.

Lessons

• RMS overview
• Implementing Azure RMS
• Integrating Azure RMS with on-premises services

Lab : Implementing Azure RMS

• Enabling and configuring Azure RMS
• Integrating Azure RMS with File Classification Infrastructure (FCI)
• Using the RMS sharing application on a client

Module 6: Monitoring Azure ADT
This module describes reports on Azure AD and explains how to configure alerts. It also describes how to monitor directory services infrastructure.

Lessons

• Azure AD reporting
• Monitoring Azure AD

Lab : Configuring reporting and monitoring

• Configuring Azure AD reports and notifications
• Configuring Azure AD monitoring