Microsoft · AZ-802
Securing AD DS
AZ-802 · Lesson 18 of 21 · 2:30:45
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the AZ-802 exam (Administering Windows Server). In this lesson: domain password policies and fine-grained password policies, Microsoft Entra Password Protection with domain controller agents and a proxy, the Protected Users group, authentication policies and silos, AdminSDHolder and privileged groups, delegation, hardening and restricting access to domain controllers with tiers and deny rights, and authentication protocols: auditing NTLM before blocking it, and LDAP signing. Includes three original practice questions.
Preview the topics
- Contoso’s administrators need a 16-character minimum password, while other users keep 12 characters, in the same domain. What should the team create?
- Contoso’s domain admins must never sign in to ordinary workstations, where their credentials could be stolen. What should the team configure?
- Contoso wants to block NTLM in the domain, but it does not know which applications still use it. What should the team do first?