Azure Active Directory Identity and Access Management Course

TOPICS COVERED INCLUDING HANDS ON LECTURE AND SIMULATIONS:

Introduction

• Welcome to the course
• Understanding the Microsoft Environment
• A Foundation of Active Directory Domains
• A Foundation of RAS, DMZ, and Virtualization
• A Foundation of the Microsoft Cloud Services
• Creating a free Microsoft 365 Azure AD Account

Setting Up a Practice Lab

• Introduction to setting up a practice lab
• Downloading a Windows 10 ISO
• Downloading Windows Server 2019 ISO
• Getting Hyper-V Installed on Windows
• Creating a Virtual Switch in Hyper-V
• Installing a Windows 10 Virtual Machine
• Installing a Windows Server 2019 Virtual Machine
• Installing Active Directory on Windows Server 2019
• Joining a Windows 10 Computer to a Microsoft Domain

Getting Started with Azure Active Directory

• Quick Message from the Instructor Don’t Skip
• Understanding Microsoft’s IaaS, PaaS, and SAAS
• The First Concept of Microsoft’s Cloud
• The Basics of Using the Azure AD Portal
• Understanding the available Versions and Licenses of Azure AD
• Azure and Microsoft 365 both share the Azure AD Services
• A Foundation of Administration with PowerShell
• Using PowerShell to Manage Cloud Services

User Identities in Azure AD

• The Concept of User Identities
• Creating and Licensing User Identities
• Bulk User Management in Azure AD
• Managing Product Licenses for User Identities

Working with Groups in Azure AD

• Understanding Groups in Azure AD
• Adding Groups to Azure AD through Microsoft 365
• Creating Groups in Azure AD

Managing Roles in Azure AD

• Understanding User Roles in Azure AD
• Planning Roles in Azure AD
• Configuring Role Based Access Control
• Administrative Account Roles in Azure AD
• Delegating and Allocating Roles

Privileged Identity Management

• Understanding the use of Privileged Identity Management (PIM)
• Configuring Privileged Identity Management (PIM) in Azure AD
• Activating a Privileged Identity Management (PIM) role as a user

Planning an Azure AD/Microsoft 365 implementation

• Planning for Azure AD/Microsoft 365 On-Premises Infrastructure
• Planning Identity and Authentication Solutions

Managing Domains for Connecting Azure AD/Microsoft 365 Services with On-Premise

• Configuring Active Directory Domain Services to Support Additional Domain Names
• Adding and Verifying Additional Domains Names
• Setting the Primary Domain Name
• Configuring User Identities for supporting a New Domain Name
• Additional Configurations for a New Domain Name

Understanding the Identity Strategies

• Evaluating the Requirements and Solutions for Synchronization
• Evaluating the Requirements and Solutions for Identity Management
• Evaluating the Requirements and Solutions for Authentication

Planning, Implementing Identity Sync and Migration by using Azure AD Connect

• Planning the Migration of On-Prem Users and Groups
• Understanding the Designs of Directory Synchronizations
• Cleaning Active Directory using the Idfix Tool
• Implementing Directory Synchronization with Directory Services, Federation Services, and Azure Endpoints
• Identifying the Users and Mailboxes to be Migrated and Method
• Identifying Data to be Migrated and the Method and the Sync Process
• Monitoring Azure AD Connect Health

Managing Azure AD identities

• Managing Passwords Settings for ADDS and Azure AD
• Implementing and Configuring Azure AD SSPR (Self-Service Password Reset)
• Using Access Reviews in Azure AD

Implementing Multi-Factor Authentication and Azure AD Identity Protection

• Understanding MFA (Multi-Factor Authentication)
• Administering MFA (Multi Factor Authentication)
• Configuring MFA (Multi Factor Authentication) Apps or Users
• Reporting Data for MFA (Multi Factor Authentication) Utilization
• Understanding Azure AD Identity Protection
• Configuring Azure AD Identity Protection