Deploy and manage identity infrastructure

Module 5

Implement hybrid identity with Windows Server

In this module, you’ll learn to configure an Azure environment so that Windows IaaS workloads requiring Active Directory are supported. You’ll also learn to integrate on-premises Active Directory Domain Services (AD DS) environment into Azure

• Introduction3 min
• Select an Azure Active Directory integration model13 min
  • Azure AD is part of the platform as a service (PaaS)  is it NOT an IaaS offering
  • Feature NOT available in AD DS ( MFA, Identity Protection, Self-service password reset – SSPR )
  • Azure AD tenants
    • Unlike on-premises AD DS, Azure AD is multitenant by design 
    • tenant represents an individual Azure AD instance
    • Within an Azure subscription, you can create multiple Azure AD tenants.
    • However, you can associate the same Azure AD tenant with multiple Azure subscriptions.
    • Each Azure AD tenant is assigned the default DNS domain name, followed by the onmicrosoft.com suffix.
    • Adding at least one custom domain name to the same Azure AD tenant
    • The Azure AD tenant serves as the security boundary and a container for Azure AD objects such as users, groups, and applications.
  • Characteristics of Azure AD
• Plan for Azure Active Directory integration13 min
• Prepare on-premises Active Directory for directory synchronization5 min
• Install and configure directory synchronization with Azure Active Directory Connect7 min
• Implement Seamless Single Sign-On11 min
• Enable Azure Active Directory login in for Windows VM in Azure7 min
• Knowledge check 13 min
• Describe Azure Active Directory Domain Services10 min
• Implement and configure Azure Active Directory Domain Services12 min
• Manage Windows Server 2019 in an Azure Active Directory Domain Services environment8 min
• Create and configure an Azure Active Directory Domain Services instance6 min
• Join a Windows Server VM to a managed domain5 min
• Knowledge check 23 min
• Summary3 min

Module 6