Azure AD (Microsoft Entra ID) Administration course

Sign up for an Office 365 trial to create a tenant, set the first global administrator, configure the initial domain, and access Azure AD from the admin center.

Add a custom domain to your Office 365 tenant, verify it using TXT or MX records, and publish MX, CNAME, and SPF DNS records to activate email and user accounts.

Learn to add company branding to the Azure Active Directory sign-in and sign-up pages by configuring background images, logos, a username hint, custom text, colors, and stay signed in options.

Create users in azure active directory, assign them to groups or roles, set usage location and licenses, and manage profiles, passwords, and sign-in settings.

Create and manage two Azure AD group types, security groups for bulk permissions and Microsoft 365 groups for collaboration, using manual or dynamic membership, owners, and optional roles.

Learn to manage Azure Active Directory users and groups with PowerShell commands. Connect to the tenant, list users and groups, modify attributes like city and state, and manage group membership.

Enable security defaults in Azure Active Directory to require all users to enroll in multi-factor authentication using the authenticator app within 14 days, while blocking legacy authentication protocols.

Enable time-based and approval-based role activation in Azure AD to secure Azure and Microsoft 365 resources, with just-in-time access, delegated approvals, MFA, and audit reviews.

Learn how to set up Azure AD privileged identity management, configure role settings, assign and approve roles, enable MFA on activation, and manage activation durations, notifications, and renewals.

Configure group-based licensing in Azure AD by creating a security group, using dynamic queries to add members, and assigning Premium P1 licenses to the group for automatic license inheritance.

Learn how self-service password reset in Azure AD lets users change passwords without admins, reducing IT support and downtime. Understand prerequisites, password writeback, and audit log tracking.

Enable self-service password reset in Azure Active Directory by configuring a security group, selecting authentication methods, enabling user registration and notifications, and monitoring activity with audit logs.

Discover how password writeback writes self-service password resets from Azure Active Directory back to on premise Active Directory in real time using Azure AD Connect.

Enable password writeback with Azure AD connect by granting Msol permissions and setting minimum password age to zero in on-prem policy, then verify with SSPR group users and test resets.