PL-600: Microsoft Power Platform Solution Architect

Azure AD Connect cloud sync enables multi-directory sync to a tenant with lightweight provisioning agent that runs alongside AD Connect, offering high availability and avoiding hybrid exchange or staging server.

Learn to implement Azure AD Connect with permissions and prepare on premise AD. Validate UPNs and use tools like ID fix and Add Modify (Adsi) to sync to Azure AD.

Discover how group policy containers store metadata in Active Directory and how group policy templates hold the actual settings, with administrative templates and ADMX/ADML guiding computer and user registry changes.

Configure two main types of group policies—computer configuration and user configuration—using the Group Policy Management Editor, applying Windows settings and startup scripts to organizational units in Active Directory.

Manage group policies across site, domain, and OU in Active Directory, using inheritance, block inheritance, and enforced policies to determine the resultant set of policies for users and computers.

Azure AD is a cloud multi-tenant directory service that supports cloud and on premise integration, with identity management, conditional access, single sign on, MFA, and application proxy for web based apps.

Explore how Active Directory trust mechanisms enable cross-forest and cross-domain access, including two way transitive trusts, external, shortcut trusts, and forest wide authentication using Kerberos.

Explain how Azure AD Connect syncs on-premise Active Directory with Azure AD to enable access, and compare password hash sync, pass-through authentication, and federation for selection.

Understand read-only domain controllers (RODCs) and how they cache credentials, enable local authentication, support unidirectional replication, and provide features like administrative role separation, PFAS, and read-only DNS for branch offices.