The Active Directory (AD) deployment process in IT infrastructure has been made easy over the years. Even if you don't have advanced knowledge of Active Directory, with a few wizards, you can install Active Directory Domain Services (AD DS) on a server. But there is a lot more to think about before you install your first domain controller into an IT infrastructure. We need to evaluate our business requirements, evaluate our security/compliance requirements, and we need to decide what AD features/services to enable and where to place them in the infrastructure. We need to get the blueprint of the identity infrastructure correct before the implementation phase, otherwise it will not deliver what we expect.

In this chapter, we are going to learn how to design on-premises and a Hybrid Identity infrastructure properly. In the design...