These labs cover Group policy in Microsoft Entra ID. Work through them in the order shown. Each one lists its prerequisites, the PowerShell you will run, and how to check the change worked.
New to the topic? Read the lab prerequisites and IAM Foundations first.
NewIB-AD-SECBuild a Tiered Admin Model in Active DirectoryBuild a three tier admin model in Active Directory with separate admin accounts, an OU structure and Group Policy logon restrictions, then test that it holds.Advanced120 minNewIB-AD-SECDeploy Windows LAPS for Local Administrator PasswordsDeploy Windows LAPS in Active Directory: extend the schema, set permissions, configure Group Policy, retrieve a password and prove that it rotates.Intermediate90 min
About Group policy labs
How many Group policy labs are there?
There are 2 Group policy labs on Identity Bytes Labs, taking about 3.5 hours in total.
Where should I start with Group policy?
Start with "Build a Tiered Admin Model in Active Directory". Build a three tier admin model in Active Directory with separate admin accounts, an OU structure and Group Policy logon restrictions, then test that it holds.
Do I need a production tenant?
No. Every lab is designed for a free, disposable Microsoft Entra test tenant. Never run lab steps against an environment people depend on.