MS 10993A Integrating On-Premises Identity Infrastructure with Microsoft Azure

Module 1: Introducing Azure AD

This module describes the differences between Azure AD and AD DS, and the Azure AD versions. It also explains how to perform Azure AD tenant provisioning and how to manage objects and user roles in Azure AD.

Lessons

• Azure AD overview
• Implementing and configuring Azure AD
• Managing Azure AD

Lab : Creating and managing an Azure AD tenant

• Activating Azure and Office 365 trial subscriptions
• Configuring an Azure AD tenant and objects in Azure AD
• Configuring user roles in Azure AD

After completing this module, students will be able to:

• Describe Azure AD.
• Implement and configure Azure AD.
• Manage Azure AD.

Module 2: Integrating on-premises Active Directory with Azure

This module explains how to extend an on-premises Active Directory domain to Azure, and how directory synchronization works. It also describes how to implement and configure directory synchronization. Additionally, this module describes how to manage synchronized directories.

Lessons

• Extending an on-premises Active
• Directory domain to Azure Directory synchronization overview
• Implementing and configuring directory synchronization
• Managing synchronized directories

Lab : Implementing directory synchronization

• Implementing Azure AD Connect
• Managing directory synchronization

After completing this module, students will be able to:

• Describe how to extend on-premises Active Directory to Azure.
• Describe directory synchronization.
• Implement and configure directory synchronization.
• Manage synchronized directories.

Module 3: Using Azure AD as a directory service in hybrid environments

This module explains how to use Azure AD as a directory service for on-premises resources, and how to configure SSO in Azure AD. It also describes how to implement Azure AD Privileged Identity Management (PIM).

Lessons

• Azure AD as a directory service for on-premises environments
• Configuring SSO with Azure AD
• Implementing Azure AD PIM

Lab : Using Azure AD in hybrid environments

• Joining a Windows 10 computer to Azure AD
• Implementing SSO with Azure AD
• Configuring and using Azure AD PIM

After completing this module, students will be able to:

• Describe how to use Azure AD as a directory service for an on-premises resources.
• Configure SSO in Azure AD.
• Implement PIM with Azure AD.

Module 4: Configuring and protecting authentication in hybrid environments

This module explains how authentication works in hybrid environments. In addition, it describes how to implement Azure Multi-Factor Authentication.

Lessons

• Authenticating users in hybrid environments
• Implementing multi-factor authentication

Lab : Configuring authentication in hybrid environments

• Implementing user password reset policy
• Implementing Multi-Factor Authentication
• Implementing Multi-Factor Authentication Server on premises

After completing this module, students will be able to:

• Describe how authentication works in hybrid environments.
• Implement multi-factor authentication.

Module 5: Deploying Azure Information Protection with on-premises services

This module provides an overview of rights management, and describes the differences between Active Directory Rights Management Services (AD RMS) and Azure RMS. It also explains how to implement Azure Information Protection and Azure RMS and integrate these services with on-premises services.

Lessons

• RMS overview
• Implementing Azure RMS
• Integrating Azure RMS with on-premises services

Lab : Implementing Azure Information Protection

• Enabling and configuring Azure Information Protection
• Integrating Azure Information Protection with FCI
• Using the RMS sharing application on a client

After completing this module, students will be able to:

• Describe data protection technologies–based Microsoft Rights Management services (RMS).
• Implement Azure Information Protection.
• Integrate Azure Information Protection with on-premises services.

Module 6: Monitoring Azure AD

This module describes how to use Azure AD reporting, and how to configure Azure AD notifications. It also describes how to monitor AD DS and Azure AD by using Azure AD Connect Health and Microsoft Operations Management Suite (OMS).

Lessons

• Azure AD reporting
• Monitoring Azure AD

Lab : Configuring reporting and monitoring

• Configuring Azure AD reports and notifications
• Configuring Azure AD monitoring

After completing this module, students will be able to:

• Describe and use Azure AD reporting.
• Monitor Azure AD.