Manage Active Directory Groups
In this IT Pro Challenge virtual lab, you will get hands-on experience using several administrative tools to manage Active Directory. You will learn how to create groups, add users to groups, and administer group policy. You will gain experience using ADUC, ADAC, and PowerShell. These skills will help you become a Windows System Administrator.
This hands-on lab provides a Windows administrator with an understanding of how to accomplish administrative tasks for managing Active Directory using different tools within a Windows Server. You will become familiar with Active Directory Users and Computers (ADUC), the newer Activity Directory Administrative Center (ADAC), using the Active Directory cmdlets within Windows PowerShell and using the Group Policy Management Console to modify group policies. The skills learned in this lab are essential for someone pursuing a career path as a Windows System Administrator.
Understand the scenario
You are a Windows Server administrator, using a Windows Server 2016 domain controller, assigned to manage your organization's Active Directory Domain Services environment. You need to create new Active Directory (AD) groups and manage group membership. First, you will create distribution and security groups by using both Active Directory User and Computers (ADUC) and the Active Directory Administrative Center (ADAC). Then you will add members to the groups. Next, you will create and manage an AD group by using Windows PowerShell, and then you will enumerate the Active Directory group membership. Finally, you will use Group Policy to control membership of the Domain Admins group. Because you are new to your role, you will use a variety of methods to achieve your goals. This will allow you to evaluate the benefits and drawbacks of each method.
Create and manage Active Directory groups by using Active Directory Users and Computers:
Active Directory Users and Computers (ADUC) is a Microsoft Management Console (MMC) snap-in that enables administrators to manage Active Directory objects, users, computers, groups, organizational units (OUs), and attributes. You will first learn how to use ADUC to perform the administrative task of creating security and distribution groups. Then you will learn how to add users to the groups and convert a security group to a distribution group.
Create and manage Active Directory groups by using the Active Directory Administrative Center:
Active Directory Administrative Center (ADAC) is a newer method for managing Active Directory and provides a Graphical User Interface (GUI) on top of the Windows PowerShell. You will perform similar tasks in this lesson, to become familiar with ADAC and evaluate the differences between ADUC and ADAC. You will also learn about the different types of group scoping: Local, Domain-Local, Global, and Universal.
Create, manage, and enumerate Active Directory groups by using Windows PowerShell:
For this task, you will learn how to use Windows PowerShell to manage Active Directory. You will learn the PowerShell command syntax to create groups, add users to groups, and enumerate the membership of a group. The AD module for PowerShell consolidates a group of cmdlets that can be used to manage your Active Directory domains.
Manage Active Directory group membership by using Group Policy:
In this lesson, you will learn how to edit Group Policy within the Group Policy Management Console. You will gain experience modifying the policy for Restricted Groups, which allows an administrator to define properties for security-sensitive groups.
Lab Summary Conclusion:
In this hands-on virtual lab, you will learn several methods of managing Active Directory for a Windows Domain. You will gain experience using ADUC, ADAC, PowerShell, and Group Policy Management Console to perform the basic tasks of creating groups, adding users to groups, and editing group policy. These skills are essential for someone pursuing a career as a Windows System Administrator.
Other Challenges in this series
- GUIDED CHALLENGE: Manage Active Directory Users
- ADVANCED CHALLENGE: Can You Create and Manage Active Directory Users and Groups?
LEARN MORE. ACHIEVE MORE.
Completing a Learn On Demand Pro Series is one thing, mastering the skill is another.
Master the skill and take this learn on demand pro series in an expertly designed Course.
In this “Configure Account Lockout Policy Settings” hands-on lab, learners will learn how to configure ...
In this IT Pro Challenge virtual lab, you will get hands-on experience using several administrative ...