microsoft partner logo color
8221  Reviews star_rate star_rate star_rate star_rate star_half

Administering Windows Server Hybrid Core Infrastructure

This course teaches IT Professionals how to manage core Windows Server workloads and services using on-premises, hybrid, and cloud technologies. The course teaches IT Professionals how to implement...

Read More
$2,380 USD GSA  $1,798.49
Course Code AZ-800T00
Duration 4 days
Available Formats Classroom, Virtual

This course teaches IT Professionals how to manage core Windows Server workloads and services using on-premises, hybrid, and cloud technologies. The course teaches IT Professionals how to implement and manage on-premises and hybrid solutions such as identity, management, compute, networking, and storage in a Windows Server hybrid environment.

Audience Profile

This four-day course is intended for Windows Server Hybrid Administrators who have experience working with Windows Server and want to extend the capabilities of their on-premises environments by combining on-premises and hybrid technologies. Windows Server Hybrid Administrators implement and manage on-premises and hybrid solutions such as identity, management, compute, networking, and storage in a Windows Server hybrid environment.

Skills Gained

After completing this course, students will be able to:

  • Use administrative techniques and tools in Windows Server.
  • Identify tools used to implement hybrid solutions, including Windows Admin Center and PowerShell.
  • Implement identity services in Windows Server.
  • Implement identity in hybrid scenarios, including Azure AD DS on Azure IaaS and managed AD DS.
  • Integrate Azure AD DS with Azure AD.
  • Manage network infrastructure services.
  • Deploy Azure VMs running Windows Server, and configure networking and storage.
  • Administer and manage Windows Server IaaS Virtual Machine remotely.
  • Manage and maintain Azure VMs running Windows Server.
  • Configure file servers and storage.
  • Implement File Services in hybrid scenarios, using Azure Files and Azure File Sync.

Prerequisites

Before attending this course, students must have:

  • Experience with managing Windows Server operating system and Windows Server workloads in on-premises scenarios, including AD DS, DNS, DFS, Hyper-V, and File and Storage Services
  • Experience with common Windows Server management tools (implied in the first prerequisite).
  • Basic knowledge of core Microsoft compute, storage, networking, and virtualization technologies (implied in the first prerequisite).
  • Experience and an understanding of core networking technologies such as IP addressing, name resolution, and Dynamic Host Configuration Protocol (DHCP)
  • Experience working with and an understanding of Microsoft Hyper-V and basic server virtualization concepts
  • Basic experience with implementing and managing IaaS services in Microsoft Azure
  • Basic knowledge of Azure Active Directory
  • Experience working hands-on with Windows client operating systems such as Windows 10 or Windows 11
  • Basic experience with Windows PowerShell

Course Details

Outline

  • Introduction to AD DS
    • Define AD DS
    • Define users, groups, and computers
    • Define AD DS forests and domains
    • Define OUs
    • Manage objects and their properties in AD DS
    • Knowledge check
  • Manage AD DS domain controllers and FSMO roles
    • Deploy AD DS domain controllers
    • Maintain AD DS domain controllers
    • Manage the AD DS Global Catalog role
    • Manage AD DS operations masters
    • Manage AD DS schema
    • Knowledge check
  • Implement Group Policy Objects
    • Define GPOs
    • Implement GPO scope and inheritance
    • Define domain-based GPOs
    • Create and configure a domain-based GPO
    • Define GPO storage
    • Define administrative templates
    • Knowledge check
  • Manage advanced features of AD DS
    • Create trust relationships
    • Implement ESAE forests
    • Monitor and troubleshoot AD DS
    • Create custom AD DS partitions
    • Knowledge check
  • Implement hybrid identity with Windows Server
    • Select a Microsoft Entra integration model
    • Plan for Microsoft Entra integration
    • Prepare on-premises Active Directory for directory synchronization
    • Install and configure directory synchronization with Microsoft Entra Connect
    • Implement Seamless Single Sign-On
    • Enable Microsoft Entra login in for Windows VM in Azure
    • Knowledge check 1
    • Describe Microsoft Entra Domain Services
    • Implement and configure Microsoft Entra Domain Services
    • Manage Windows Server in a Microsoft Entra Domain Services environment
    • Create and configure a Microsoft Entra Domain Services instance
    • Join a Windows Server VM to a managed domain
    • Knowledge check 2
  • Deploy and manage Azure IaaS Active Directory domain controllers in Azure
    • Select an option to implement directory and identity services using Active Directory Domain Services in Azure
    • Deploy and configure Active Directory Domain Services domain controllers in Azure VMs
    • Install a replica Active Directory domain controller in an Azure VM
    • Install a new Active Directory forest on an Azure VNet
    • Knowledge check
  • Perform Windows Server secure administration
    • Define least privilege administration
    • Implement delegated privileges
    • Use privileged access workstations
    • Use jump servers
    • Knowledge check
  • Describe Windows Server administration tools
    • Explore Windows Admin Center
    • Use Server Manager
    • List Remote Server Administration Tools
    • Use Windows PowerShell
    • Use Windows PowerShell to remotely administer a server
    • Knowledge check
  • Perform post-installation configuration of Windows Server
    • List the available post-installation configuration tools
    • Configure Server Core using Sconfig
    • Use DSC to configure Windows Server
    • Perform post-installation configuration with Windows Admin Center
    • Configure a server with answer files
    • Knowledge check
  • Administer and manage Windows Server IaaS Virtual Machine remotely
    • Select the appropriate remote administration tool
    • Manage Windows Virtual Machines with Azure Bastion
    • Create an Azure Bastion host
    • Configure just-in-time administration
    • Knowledge check
  • Manage hybrid workloads with Azure Arc
    • Describe Azure Arc
    • Onboard Windows Server instances
    • Connect hybrid machines to Azure from the Azure portal
    • Use Azure Arc to manage Windows Server instances
    • Restrict access with RBAC
    • Knowledge check
  • Optimizing IT operations and management with Azure Automanage
    • Describe concepts around Azure Automanage best practices
    • Enable Azure Automanage best practices
    • Create and assign a custom configuration profile
    • Extend Azure Automanage across non-Azure infrastructure with Azure Arc
    • Knowledge check
  • Just Enough Administration in Windows Server
    • Explain the concept of Just Enough Administration (JEA)
    • Define role capabilities for a JEA endpoint
    • Create a session configuration file to register a JEA endpoint
    • Describe how JEA endpoints work to limit access to a PowerShell session
    • Create and connect to a JEA endpoint
    • Demonstration: Connect to a JEA endpoint
    • Knowledge check
    • Summary resources
  • Configure and manage Hyper-V
    • Define Hyper-V
    • Define Hyper-V Manager
    • Configure Hyper-V hosts using best practices
    • Configure Hyper-V networking
    • Assess advanced Hyper-V networking features
    • Define nested virtualization
    • Knowledge check
  • Configure and manage Hyper-V virtual machines
    • List the virtual machine configuration versions
    • List the virtual machine generation versions
    • List available VHD formats and types
    • Create and configure VMs
    • Determine storage options for VMs
    • Define shared VHDs and VHD Sets
    • Implement guest clusters using shared VHDX
    • Knowledge check
  • Secure Hyper-V workloads
    • Define guarded fabric
    • Define the Host Guardian Service
    • Explore TPM-trusted attestation
    • Define KPS
    • Determine key features of shielded VMs
    • Compare encryption-supported and shielded VMs in a guarded fabric
    • Implement a shielded VM
    • Knowledge check
  • Plan and deploy Windows Server IaaS Virtual Machines
    • Describe Azure compute
    • Describe Virtual Machine storage
    • Deploy Azure Virtual Machines
    • Create a windows Virtual Machine using the portal
    • Create a windows Virtual Machine using Azure CLI
    • Deploy Azure Virtual Machines using templates
    • Describe additional management optimization options
    • Knowledge check
  • Customize Windows Server IaaS Virtual Machine images
    • Create a generalized image
    • Create a new Virtual Machine from a managed image
    • Create a managed image of a generalized virtual machine in Azure
    • Create a Virtual Machine from a managed image
    • Implement Azure Image Builder
    • Create a windows Virtual Machine using Azure Image Builder template
    • Create a Windows Virtual Machine with Azure Image Builder using PowerShell
    • Knowledge check
  • Automate the configuration of Windows Server IaaS Virtual Machines
    • Describe Azure Automation
    • Implement Azure Automation with DSC
    • Remediate noncompliant servers
    • Describe Custom Script Extensions
    • Configure a Virtual Machine by using DSC
    • Knowledge check
  • Run containers on Windows Server
    • Define containers
    • List the differences between containers and VMs
    • Define Windows Server and Hyper-V containers and isolation modes
    • Explore Docker
    • Prepare a Windows Server 2019 host for container deployment
    • Security, Storage, and Networking with Windows containers
    • Knowledge check
  • Orchestrate containers on Windows Server using Kubernetes
    • Define orchestration
    • Define Kubernetes
    • Deploy Kubernetes resources
    • Create a Kubernetes cluster on Windows
    • Define Azure Arc
    • Connect an Azure Arc-enabled Kubernetes cluster to Azure Arc
    • Knowledge check
  • Implement DNS for Windows Server IaaS VMs
    • Understand Azure DNS
    • Implement Azure DNS
    • Create an Azure DNS zone and record using the Azure portal
    • Implement DNS with Azure IaaS virtual machines
    • Implement split-horizon DNS in Azure
    • Troubleshoot DNS
    • Knowledge check
  • Deploy and manage DHCP
    • Use DHCP to simplify IP configuration
    • Install and configure the DHCP role
    • Configure DHCP options
    • Configure DHCP scopes
    • Select DHCP high availability options
    • Implement DHCP Failover
    • Knowledge check
  • Implement Windows Server DNS
    • Explore the DNS architecture
    • Work with DNS zones and records
    • Install and configure the DNS role
    • Implement DNS forwarding
    • Knowledge check
  • Implement IP Address Management
    • Define IP Address Management
    • Deploy IP Address Management
    • Administer IP Address Management
    • Configure IP Address Management options
    • Manage DNS zones with IP Address Management
    • Manage DHCP servers with IP Address Management
    • Use IP Address Management to manage IP addressing
    • Knowledge check
  • Implement remote access
    • Examine the remote access options in Windows Server
    • Select and set up VPNs
    • Use NPS to create and enforce network access policies
    • Plan and implement NPS
    • Deploy a PKI for remote access
    • Use WAP as a reverse web proxy
    • Knowledge check
  • Implement hybrid network infrastructure
    • Describe Azure network topologies
    • Implement Azure VPN options
    • Create a route-based VPN gateway using the Azure portal
    • Implement Azure ExpressRoute
    • Configure Azure Virtual WAN
    • Implement DNS in hybrid environments
    • Knowledge check
  • Implement Windows Server IaaS VM IP addressing and routing
    • Implement a virtual network
    • Implement IaaS VM IP addressing
    • Assign and manage IP addresses
    • Configure a private IP address for a virtual machine using the Azure portal
    • Create a virtual machine with a static public IP address using the Azure portal
    • Implement IaaS virtual machine IP routing
    • Implement IPv6 for Windows Server IaaS virtual machines
    • Knowledge check
  • Manage Windows Server file servers
    • Define the Windows Server file system
    • List the benefits and uses of File Server Resource Manager
    • Define SMB and its security considerations
    • Configure SMB protocol
    • Define Volume Shadow Copy Service
    • Knowledge check
  • Implement Storage Spaces and Storage Spaces Direct
    • Define the Storage Spaces architecture and its components
    • List the functionalities, benefits, and use cases of Storage Spaces
    • Implement Storage Spaces
    • List the functionalities, components, benefits, and use cases of Storage Spaces Direct
    • Implement Storage Spaces Direct
    • Knowledge check
  • Implement Windows Server Data Deduplication
    • Define the architecture, components, and functionality of Data Deduplication
    • Define the use cases and interoperability of Data Deduplication
    • Implement Data Deduplication
    • Manage and maintain Data Deduplication
    • Knowledge check
  • Implement Windows Server iSCSI
    • List the functionalities, components, and use cases of iSCSI
    • List the considerations for implementing iSCSI
    • Implement iSCSI
    • Configure high availability for iSCSI
    • Knowledge check
  • Implement Windows Server Storage Replica
    • List the functionalities and components of Storage Replica
    • Examine the prerequisites for implementing Storage Replica
    • Implement Storage Replica by using Windows Admin Center
    • Implement Storage Replica by using Windows PowerShell
    • Knowledge check
  • Implement a hybrid file server infrastructure
    • Describe Azure File services
    • Configure Azure Files
    • Configure connectivity to Azure Files
    • Describe Azure File Sync
    • Implement Azure File Sync
    • Deploy Azure File Sync
    • Deploy Azure File Sync 2
    • Manage cloud tiering
    • Migrate from DFSR to Azure File Sync
    • Knowledge check
|
View Full Schedule