Extending On-Prem Active Directory into Microsoft Azure

Name: Extending On-Prem Active Directory into Microsoft Azure
Rating: 4.6 (93 reviews)

How to Properly and Securely Extend an On-Premises Active Directory into Microsoft Azure

Created byThomas Mitchell | 239,000+ Students Taught, labITout Learning

Last updated 7/2019

English

English [Auto],

What you'll learn

Deploy and secure the Azure virtual network that will host the Azure-based domain controller
Establish VPN connectivity between the on-prem network and the Azure virtual network
Configure custom DNS on the Azure virtual network so that it properly supports the on-prem Active Directory
Deploy and configure a domain controller VM in Azure
Promote the Azure-based virtual machine to a domain controller for the on-prem AD
Configure AD Sites and Services to properly reflect the new Azure site

Course content

7 sections • 32 lectures • 1h 15m total length

Introduction0:38
What to Expect - PLEASE READ0:33
About the Lab0:31

Deploy Azure vNet0:42
DEMO-Deploy Azure vNet9:50
Deploy a virtual network in Azure to host a domain controller and extend on-prem Active Directory. Use resource groups and a dashboard to track the Azure deployment and VPN connection.
Deploy a Network Security Group1:02
DEMO-Deploy Network Security Group8:52
Deploy a network security group to protect the vnet, configure inbound from 10.0.0.0/16 and outbound to 10.0.0.0/16, and associate the NSG with the Azure AD subnet.
YOUR TURN! Deploy a Resource Group and vNet0:30

Provision a Gateway Subnet0:48
DEMO-Deploy Gateway Subnet3:30
Run the address space calculator (PowerShell script) to determine the gateway subnet prefix, such as 192.168.255.240/28, then deploy the gateway subnet in the vnet.
YOUR TURN! Define and Deploy a Gateway Subnet0:23
Deploy a Virtual Network Gateway0:33
DEMO-Deploy the Virtual Network Gateway5:38
Create a virtual network gateway in central us, name it azure gw, connect to a vnet with a public ip, and deploy a route-based vpn using a basic sku.
YOUR TURN! Deploy a Virtual Network Gateway0:22
Deploy a Local Network Gateway0:33
DEMO-Deploy Local Network Gateway3:25
Deploy a local network gateway to represent the on-prem VPN endpoint, configuring the public IP, address space, and optional BGP settings in central US.
Configure the On-Prem VPN Device0:21
YOUR TURN! Deploy a Local Network Gateway0:19
DEMO-Deploy VPN Connection in Azure5:15
Deploy a site-to-site vpn in Azure by linking the Azure vnet gateway to on-prem local gateway with a shared key, then verify the connection to extend on-prem ad into Azure.
YOUR TURN! Create a VPN Connection0:24

DEMO-Deploy a Virtual Machine in Azure6:46
Deploy a domain controller in Azure by provisioning a Windows Server 2016 data center VM in the lab resource group with a data disk and no public access.
DEMO-Verify Connectivity6:16
Configure a static internal ip 192168.1.4 for the co2 vm, verify vpn connectivity to the on-prem dc01, and perform post-setup tasks to prepare the new domain controller.
YOUR TURN! Deploy a VM in Azure0:42

DEMO-Join VM to On-Prem AD1:08
Promote the dc02 VM to a domain controller by joining it to the on-premises Active Directory, ensuring DNS resolution, then restart and finalize the domain controller promotion.
DEMO-Install Domain Services and Promote VM to DC5:03
Promote a virtual machine to a domain controller by installing Active Directory Domain Services and DNS, joining an existing on-prem domain in Azure, and replicating to the new DC.
DEMO-Configure Sites and Services4:27
Configure on prem and azure active directory sites by creating an on prem site and an azure site, assigning 10.0.0.0/24 and 192.168.1.0/24 subnets, and moving DCs to avoid VPN traffic.
YOUR TURN! Configure Active Directory Site and Services0:24

Requirements

A paid or trial Azure tenant/subscription
An existing on-prem AD (dev) or an existing AD lab in Azure

Description

With the race to Microsoft Azure in full sprint mode, you need to know how to PROPERLY extend an on-prem Active Directory forest into Microsoft Azure. Otherwise, you risk getting left behind.

This 30+ lesson course is a little different from most Udemy courses you've encountered.

This course is actually a guided deployment lab that walks you through the process of connecting an on-prem network to Azure with a site-to-site VPN. It then shows you how to properly configure the Azure virtual network and Azure VM to support an on-prem Active Directory.

Lastly, this lab walks you through the process of actually extending an on-prem Active Directory forest into Microsoft Azure. The smallest minute details are covered, as are the steps to protect your Azure virtual network and Azure-based domain controller.

What You'll Learn

Students completing this lab will learn how to deploy the necessary Azure resources for an AD extension into Azure and how to perform the extension of Active Directory into Azure.

We'll kick off the lab by deploying and securing the Azure virtual network that will host the Azure-based domain controller.
With the Azure network provisioned and properly secured with a Network Security Group, we'll walk through the process of establishing VPN connectivity between the on-prem network and the Azure virtual network.
Later in the lab, you'll learn how to properly configure custom DNS on the Azure virtual network so that it properly supports the on-prem Active Directory.
With the Azure infrastructure deployed and configured, you'll learn how to deploy and configure a virtual machine in Azure. This VM will become the Azure-based domain controller for the on-prem AD.
Wrapping up the lab, you'll learn how to correctly promote the Azure-based virtual machine to a domain controller for the on-prem AD. You'll also learn how to configure AD Sites and Services to properly reflect your new Azure site.

Who this course is for:

IT Professionals interested in growing their skillset
IT Professionals who wish to be able to highlight real-world skills in their next job interview
IT Professionals interested in preparing for the AZ-103 exam

Extending On-Prem Active Directory into Microsoft Azure

What you'll learn

Explore related topics

Course content

Getting Started3 lectures • 2min

Deploy and Secure Azure Virtual Network5 lectures • 21min

Establish VPN Connectivity12 lectures • 22min

Configure Custom DNS on Azure Virtual Network2 lectures • 3min

Deploy and Configure Azure Virtual Machine3 lectures • 14min

Promoting the VM to a Domain Controller4 lectures • 11min

Wrap-Up3 lectures • 4min

Requirements

Description

Who this course is for: