Table of Contents

1. Challenge

   Create an Active Directory Domain Services (AD DS) User Account, and Delegate Permissions

   1. Create an AD DS user account that can be used to automate the process of disabling inactive accounts.
   2. Delegate the required permissions using the principle of least privilege.
2. Challenge

   Create an Azure Automation Credential

   1. Create an Azure Automation credential with the login details of the account you created in AD DS.
3. Challenge

   Create a Hybrid Worker Group, and Onboard a Hybrid Worker

   1. Create a hybrid worker group, and onboard BRAHW1 as a hybrid worker.
4. Challenge

   Create the Runbook

   1. Create a runbook named Disable-InactiveADAccounts with the following PowerShell script.
5. Challenge

   Test the Runbook

   1. Test the runbook using the Test Pane.
6. Challenge

   Start the Runbook

   1. Remove the WhatIf parameter from the script.
   2. Save and publish the runbook.
   3. Start the runbook, and observe the results.