Active Directory Administration Cookbook

by Sander Berkouwer

Overview

Learn the intricacies of managing Azure AD and Azure AD Connect, as well as Active Directory for administration on cloud and Windows Server 2019

• Expert solutions for the federation, certificates, security, and monitoring with Active Directory
• Explore Azure AD and AD Connect for effective administration on cloud
• Automate security tasks using Active Directory and PowerShell

Active Directory is an administration system for Windows administrators to automate network, security and access management tasks in the Windows infrastructure.

This book starts off with a detailed focus on forests, domains, trusts, schemas and partitions. Next, you'll learn how to manage domain controllers, organizational units and the default containers.

Going forward, you'll explore managing Active Directory sites as well as identifying and solving replication problems. The next set of chapters covers the different components of Active Directory and discusses the management of users, groups and computers. You'll also work through recipes that help you manage your Active Directory domains, manage user and group objects and computer accounts, expiring group memberships and group Managed Service Accounts (gMSAs) with PowerShell.

You'll understand how to work with Group Policy and how to get the most out of it. The last set of chapters covers federation, security and monitoring. You will also learn about Azure Active Directory and how to integrate on-premises Active Directory with Azure AD. You'll discover how Azure AD Connect synchronization works, which will help you manage Azure AD.

By the end of the book, you have learned about Active Directory and Azure AD in detail.

• Manage new Active Directory features, such as the Recycle Bin, group Managed Service Accounts, and fine-grained password policies
• Work with Active Directory from the command line and use Windows PowerShell to automate tasks
• Create and remove forests, domains, and trusts
• Create groups, modify group scope and type, and manage memberships
• Delegate control, view and modify permissions
• Optimize Active Directory and Azure AD in terms of security

This book will cater to administrators of existing Active Directory Domain Services environments and/or Azure AD tenants, looking for guidance to optimize their day-to-day effectiveness. Basic networking and Windows Server Operating System knowledge would come in handy.

Product Details

ISBN-13:	9781789806984
Publisher:	Packt Publishing
Publication date:	05/03/2019
Pages:	620
Product dimensions:	7.50(w) x 9.25(h) x 1.25(d)

About the Author

Sander Berkouwer calls himself an Active Directory aficionado; he's done everything with Active Directory and Azure Active Directory, including decommissioning. He has been MCSA, MCSE, and MCITP-certified for ages, an MCT for the past 5 years and a Microsoft Most Valuable Professional (MVP) on Directory Services and Enterprise Mobility for over a decade. As the CTO at SCCT, Sander leads a team of architects performing many projects, most of them identity-related, throughout Europe.

Table of Contents

Table of Contents

1. Optimizing Forests, Domains and trusts
2. Managing Domain Controllers
3. Managing Active Directory Roles and Features
4. Managing Containers and Organizational Units
5. Managing Active Directory sites and troubleshooting replication
6. Managing Active Directory users
7. Managing Active Directory groups
8. Managing Active Directory computers
9. Getting the most out of Group Policy
10. Securing Active Directory
11. Managing federation
12. Handling authentication in a hybrid world (AD FS, PHS, PTA and 3SO)
13. Handling synchronization in a hybrid world (Azure AD Connect)
14. Hardening Azure AD