Active Directory: Managing Groups, Computers and OUs

Name: Active Directory: Managing Groups, Computers and OUs
Rating: 4.5 (73 reviews)

Group types and scopes, default groups, special identities, computer accounts, OU hierarchy, ADDS permissions, and more

Created byVitalii Shumylo

Last updated 10/2025

English

What you'll learn

Group types and scopes
Default groups
Special identities
Computer accounts
Join a computer to a domain
Much more...

Course content

4 sections • 46 lectures • 5h 1m total length

Managing groups in AD DS Section Overview2:02
Use groups in Active Directory Domain Services to assign permissions and manage access, describe group types and scopes, manage membership with group policy, and cover default groups and special identities.
Group types3:16
Demo: Group types4:13
Group scopes7:21
Examine the four Active Directory group scopes: local, domain local, global, and universal, and how each defines membership and permissions across domains and resources.
Demo: Group scopes10:58
Knowledge Check: Group types and group scopes7:03
Implementing group management6:32
Demo: Implementing group management (IGDLA)18:00
Learn to implement group management in Active Directory with nested and domain local groups, role based access, and secure resource sharing, including finance reports on a Windows 11 client.
Knowledge Check: Implementing group management6:56
Managing members with GPO3:31
Learn to manage local and domain group memberships with restricted groups in group policy, applying to OUs and domain controllers, including nesting and automatic removal of non-designated members.
Default groups8:58
Demo: Using Account Operators Groups and Delegate Control8:05
Knowledge Check: Default groups6:13
Explore default and protected groups in Active Directory, including Enterprise Admins and Schema Admins, and learn best practices for managing administrative privileges and ACLs.
Special identities3:58
Demonstration: Managing groups in Windows Server2:52
Learn to create a new group, add members, change the group type to universal, adjust the scope, and configure a group manager in the Active Directory Administrative Center.

Section overview2:19
Explore managing computer objects in Active Directory, including joining computers to a domain, configuring computer accounts and secure channels, and performing offline domain join.
Specifying the location of computer accounts5:11
Create dedicated organizational units for client and server computer objects instead of using the default computers container to enable delegation and targeted group policy application.
Knowledge Check: Specifying the location of computer accounts7:06
Controlling permissions to create computer accounts3:41
Ensure you have permissions on the computer object, are in the local administrators group, stay under the machine account quota, and recreate computer object in the correct OU before joining.
Joining a computer to a domain1:16
Learn how to join a Windows computer to a domain by accessing the computer name tab in advanced system settings, providing domain credentials, and restarting after the join.
Resetting the computer account (secure channel)7:26
Knowledge Check: Resetting the computer account (secure channel)6:45
Performing an offline domain join4:26

Implementing and managing OUs Section Overview2:06
Planning OUs9:25
Knowledge Check: Planning OUs6:57
Evaluate OU design in Active Directory through location-based, resource-based, organization-based, multi-tenant, and hybrid strategies. The knowledge check tests understanding of planning OUs and delegated administration.
OU hierarchy considerations3:36
Considerations for using OUs4:46
Explore considerations for using organizational units in Active Directory, including creating OUs with graphical tools or PowerShell, protecting them from accidental deletion, and moving them with permission implications.
Knowledge Check: OU considerations8:35
Explore Active Directory OU design, delegation, and GPO application. Learn about inheritance, change management, and the practical steps to create or move OUs.
AD DS permissions5:44
Explore how Active Directory delegation works, including OU-based permissions, inheritance, and security descriptors, and learn how to configure delegated admins and review access using the security tab.
Delegating AD DS permissions6:16
Delegate Active Directory permissions by using object type delegation or role-based delegation, assigning rights to groups rather than individuals for targeted tasks across OUs and resources.
Knowledge Check: Delegating AD DS permissions6:57

Using Windows PowerShell for AD DS administration Section Overview1:09
Use Windows PowerShell to automate AD DS administration, manage groups, computer accounts, and OUs, perform bulk operations, query and modify objects, and work with comma-separated files.
Using Windows PowerShell cmdlets to manage groups5:06
PowerShell: Managing, configuring and modifying Group objects. Part 113:50
PowerShell: Managing, configuring and modifying Group objects. Part 27:30
PowerShell: Managing, configuring and modifying Group objects. Part 35:07
PowerShell: Managing, configuring and modifying Group objects. Part 45:50
PowerShell: Managing, configuring and modifying Group objects. Part 512:40
Windows PowerShell cmdlets to manage computers and OUs4:56
PowerShell: Managing, configuring and modifying Computer objects. Part 110:42
PowerShell: Managing, configuring and modifying Computer objects. Part 26:15
Introduction. PowerShell Key Concepts16:07
Learn the foundations of PowerShell, including pipelines, aliases, navigation, and common commands like Get-ChildItem, Get-Command, and Get-Help, to build scripts and manage objects.
Intro to WMI and CIM8:14
What are Operations Masters8:15
Transferring Roles3:24
Transfer or seize Fisma roles in an Active Directory environment, using GUI tools or NTDSUTIL and PowerShell, to move roles between domain controllers while understanding replication and last-resort seizing.
Active Directory Administration & Configuration Assessment

Requirements

Familiarity with general Windows and Microsoft server administration and technologies

Description

Immerse yourself in the exciting world of Active Directory (AD) management with our comprehensive and hands-on course: "Active Directory: Managing Groups, Computers and OUs". This course offers over 3 hours of high-quality video content, specially designed to help you gain a deep understanding of Active Directory Domain Services (AD DS).

This course is perfect for IT administrators, professionals, and enthusiasts who want to expand their knowledge base and improve their skills in managing Active Directory. Whether you're just starting out or have some experience under your belt, this course provides you with the tools you need to excel in your role.

In Section 1, we explore the management of groups in AD DS. Learn about different group types, scopes, and how to effectively implement group management. You'll understand managing members with Group Policy Object (GPO), dealing with default groups, and understanding special identities. Plus, a hands-on demonstration will give you real-world insights into managing groups in Windows Server.

In Section 2, we delve into managing computer objects in AD DS. We cover everything from specifying the location of computer accounts to controlling permissions and performing an offline domain join. You'll be equipped to manage computer objects like a pro.

Section 3 guides you through the process of implementing and managing Organizational Units (OUs). With lectures focused on planning OUs, considering OU hierarchy, and delegating AD DS permissions, you'll understand the nuances of OU management in no time.

Finally, Section 4 introduces you to the power of Windows PowerShell for AD DS administration. Get hands-on with managing, configuring, and modifying group and computer objects using PowerShell cmdlets. An introduction to Windows Management Instrumentation (WMI) and Common Information Model (CIM) wraps up this section, cementing your understanding of AD DS administration.

This course offers a balanced mix of theory and practical knowledge, ensuring you not only understand the concepts but can apply them in real-life scenarios. Are you ready to up your game in Active Directory management? Join us in "Active Directory: Managing Groups, Computers and OUs". Don't just learn it; master it!

Who this course is for:

Active Directory Administrators
System Administrators
IT Specialists
Automation Specialists
Power Users

Active Directory: Managing Groups, Computers and OUs

What you'll learn

Explore related topics

Course content

Managing groups in AD DS15 lectures • 1hr 40min

Managing computer objects in AD DS8 lectures • 38min

Implementing and managing OUs9 lectures • 54min

Using Windows PowerShell for groups and computers administration14 lectures • 1hr 49min

Requirements

Description

Who this course is for: