YUNOVA · IT Help Desk
Module 9: Active Directory and identity
Active Directory users and groups
Key points
- Active Directory stores users, computers and groups for a Windows domain.
- Give permissions to groups, then add users to groups, not one by one.
- Organizational Units (OUs) sort objects so policies can target them.
Group Policy basics
Key points
- A Group Policy Object (GPO) applies settings to users or computers in an OU.
- Run gpupdate /force to apply changes and gpresult /r to see what applied.
- Test a new GPO on a small OU before linking it widely.
Microsoft Entra ID basics
Key points
- Microsoft Entra ID (formerly Azure AD) is Microsoft's cloud identity service.
- It signs users in to Microsoft 365 and other cloud apps.
- Entra Connect can sync on-premises AD users to the cloud.
Rolling out MFA and password policy
Key points
- MFA asks for a second proof, such as an app prompt, besides the password.
- Roll out MFA in stages and tell users what to expect before it starts.
- Prefer long passphrases and block known breached passwords.