AZ-800T00: Administering Windows Server Hybrid Core Infrastructure
This four-day course is intended for Windows Server Hybrid Administrators who have experience working with Windows Server and want to extend the capabilities of their on-premises environments by combining on-premises and hybrid technologies. Windows Server Hybrid Administrators implement and manage on-premises and hybrid solutions such as identity, management, compute, networking, and storage in a Windows Server hybrid environment.
Description
Overview
This course teaches IT Professionals how to manage core Windows Server workloads and services using on-premises, hybrid, and cloud technologies. The course teaches IT Professionals how to implement and manage on-premises and hybrid solutions such as identity, management, compute, networking, and storage in a Windows Server hybrid environment.
Course Objectives
After completing this course, students will be able to:
- Deploy and Manage Identity Infrastructure
- Manage Windows Servers and Workloads in a Hybrid Environment
- Manage Virtualization and Containers in a Hybrid Environment
- Implement and Operate an On-premises and Hybrid Networking Infrastructure
- Configure Storage and File Services
Who Should Attend
This four-day course is intended for Windows Server Hybrid Administrators who have experience working with Windows Server and want to extend the capabilities of their on-premises environments by combining on-premises and hybrid technologies. Windows Server Hybrid Administrators implement and manage on-premises and hybrid solutions such as identity, management, compute, networking, and storage in a Windows Server hybrid environment.
Course Outline
Lesson 1: Introduction to AD DS
- Define AD DS
- Define users, groups, and computers
- Define AD DS forests and domains
- Define OUs
- Manage objects and their properties in AD DS
Lesson 2: Manage AD DS domain Controllers and FSMO roles
- Deploy AD DS domain controllers
- Maintain AD DS domain controllers
- Manage the AD DS Global Catalog role
- Manage AD DS operations masters
- Manage AD DS schema
Lesson 3: Implement Group Policy Objects
- Define GPOs
- Implement GPO scope and inheritance
- Define domain-based GPOs
- Create and configure a domain-based GPO
- Define GPO storage
- Define administrative templates
Lesson 4: Manage Advanced Features of AD DS
- Create trust relationships
- Implement ESAE forests
- Monitor and troubleshoot AD DS
- Create custom AD DS partitions
Lesson 5: Implement Hybrid Identity with Windows Server
- Select a Microsoft Entra integration model
- Plan for Microsoft Entra integration
- Prepare on-premises Active Directory for directory synchronization
- Install and configure directory synchronization with Microsoft Entra Connect
- Implement Seamless Single Sign-On
- Enable Microsoft Entra login in for Windows VM in Azure
- Describe Microsoft Entra Domain Services
- Implement and configure Microsoft Entra Domain Services
- Manage Windows Server 2019 in a Microsoft Entra Domain Services environment
- Create and configure a Microsoft Entra Domain Services instance
- Join a Windows Server VM to a managed domain
Lesson 6: Deploy and Manage Azure IaaS Active Directory Domain Controllers in Azure
- Select an option to implement directory and identity services using Active Directory Domain Services in Azure
- Deploy and configure Active Directory Domain Services domain controllers in Azure VMs
- Install a replica Active Directory domain controller in an Azure VM
- Install a new Active Directory forest on an Azure VNet
Lesson 7: Perform Windows Server Secure Administration
- Define least privilege administration
- Implement delegated privileges
- Use privileged access workstations
- Use jump servers
Lesson 8: Describe Windows Server Administration Tools
- Explore Windows Admin Center
- Use Server Manager
- List Remote Server Administration Tools
- Use Windows PowerShell
- Use Windows PowerShell to remotely administer a server
Lesson 9: Perform Post-installation Configuration of Windows Server
- List the available post-installation configuration tools
- Configure Server Core using Sconfig
- Use DSC to configure Windows Server
- Perform post-installation configuration with Windows Admin Center
- Configure a server with answer files
Lesson 10: Administer and Manage Windows Server IaaS Virtual Machine Remotely
- Select the appropriate remote administration tool
- Manage Windows Virtual Machines with Azure Bastion
- Create an Azure Bastion host
- Configure just-in-time administration
Lesson 11: Manage Hybrid Workloads with Azure Arc
- Describe Azure Arc
- Onboard Windows Server instances
- Connect hybrid machines to Azure from the Azure portal
- Use Azure Arc to manage Windows Server instances
- Restrict access with RBAC
Lesson 12: Optimizing IT Operations and Management with Azure Automanage
- Describe concepts around Azure Automanage best practices
- Enable Azure Automanage best practices
- Create and assign a custom configuration profile
- Extend Azure Automanage across non-Azure infrastructure with Azure Arc
Lesson 13: Just Enough Administration in Windows Server
- Explain the concept of Just Enough Administration (JEA)
- Define role capabilities for a JEA endpoint
- Create a session configuration file to register a JEA endpoint
- Describe how JEA endpoints work to limit access to a PowerShell session
- Create and connect to a JEA endpoint
- Demonstration: Connect to a JEA endpoint
Lesson 14: Configure and Manage Hyper-V
- Define Hyper-V
- Define Hyper-V Manager
- Configure Hyper-V hosts using best practices
- Configure Hyper-V networking
- Assess advanced Hyper-V networking features
- Define nested virtualization
Lesson 15: Configure and Manage Hyper-V Virtual Machines
- List the virtual machine configuration versions
- List the virtual machine generation versions
- List available VHD formats and types
- Create and configure VMs
- Determine storage options for VMs
- Define shared VHDs and VHD Sets
- Implement guest clusters using shared VHDX
Lesson 16: Secure Hyper-V Workloads
- Define guarded fabric
- Define the Host Guardian Service
- Explore TPM-trusted attestation
- Define KPS
- Determine key features of shielded VMs
- Compare encryption-supported and shielded VMs in a guarded fabric
- Implement a shielded VM
Lesson 17: Plan and Deploy Windows Server IaaS Virtual Machines
- Describe Azure compute
- Describe Virtual Machine storage
- Deploy Azure Virtual Machines
- Create a windows Virtual Machine using the portal
- Create a windows Virtual Machine using Azure CLI
- Deploy Azure Virtual Machines using templates
- Describe additional management optimization options
Lesson 18: Customize Windows Server IaaS Virtual Machine Images
- Create a generalized image
- Create a new Virtual Machine from a managed image
- Create a managed image of a generalized virtual machine in Azure
- Create a Virtual Machine from a managed image
- Implement Azure Image Builder
- Create a windows Virtual Machine using Azure Image Builder template
- Create a Windows Virtual Machine with Azure Image Builder using PowerShell
Lesson 19: Automate the Configuration of Windows Server IaaS Virtual Machines
- Describe Azure Automation
- Implement Azure Automation with DSC
- Remediate noncompliant servers
- Describe Custom Script Extensions
- Configure a Virtual Machine by using DSC
Lesson 20: Run Containers on Windows Server
- Define containers
- List the differences between containers and VMs
- Define Windows Server and Hyper-V containers and isolation modes
- Explore Docker
- Prepare a Windows Server 2019 host for container deployment
- Security, Storage, and Networking with Windows containers
Lesson 21: Orchestrate Containers on Windows Server using Kubernetes
- Define orchestration
- Define Kubernetes
- Deploy Kubernetes resources
- Create a Kubernetes cluster on Windows
- Define Azure Arc
- Connect an Azure Arc-enabled Kubernetes cluster to Azure Arc
Lesson 22: Implement DNS for Windows Server IaaS VMs
- Understand Azure DNS
- Implement Azure DNS
- Create an Azure DNS zone and record using the Azure portal
- Implement DNS with Azure IaaS virtual machines
- Implement split-horizon DNS in Azure
- Troubleshoot DNS
Lesson 23: Deploy and Manage DHCP
- Use DHCP to simplify IP configuration
- Install and configure the DHCP role
- Configure DHCP options
- Configure DHCP scopes
- Select DHCP high availability options
- Implement DHCP Failover
Lesson 24: Implement Windows Server DNS
- Explore the DNS architecture
- Work with DNS zones and records
- Install and configure the DNS role
- Implement DNS forwarding
Lesson 25: Implement IP Address Management
- Define IP Address Management
- Deploy IP Address Management
- Administer IP Address Management
- Configure IP Address Management options
- Manage DNS zones with IP Address Management
- Manage DHCP servers with IP Address Management
- Use IP Address Management to manage IP addressing
Lesson 26: Implement Remote Access
- Examine the remote access options in Windows Server
- Select and set up VPNs
- Use NPS to create and enforce network access policies
- Plan and implement NPS
- Deploy a PKI for remote access
- Use WAP as a reverse web proxy
Lesson 27: Implement Hybrid Network Infrastructure
- Describe Azure network topologies
- Implement Azure VPN options
- Create a route-based VPN gateway using the Azure portal
- Implement Azure ExpressRoute
- Configure Azure Virtual WAN
- Implement DNS in hybrid environments
Lesson 28: Implement Windows Server IaaS VM IP Addressing and Routing
- Implement a virtual network
- Implement IaaS VM IP addressing
- Assign and manage IP addresses
- Configure a private IP address for a virtual machine using the Azure portal
- Create a virtual machine with a static public IP address using the Azure portal
- Implement IaaS virtual machine IP routing
- Implement IPv6 for Windows Server IaaS virtual machines
Lesson 29: Manage Windows Server File Servers
- Define the Windows Server file system
- List the benefits and uses of File Server Resource Manager
- Define SMB and its security considerations
- Configure SMB protocol
- Define Volume Shadow Copy Service
Lesson 30: Implement Storage Spaces and Storage Spaces Direct
- Define the Storage Spaces architecture and its components
- List the functionalities, benefits, and use cases of Storage Spaces
- Implement Storage Spaces
- List the functionalities, components, benefits, and use cases of Storage Spaces Direct
- Implement Storage Spaces Direct
Lesson 31: Implement Windows Server Data Deduplication
- Define the architecture, components, and functionality of Data Deduplication
- Define the use cases and interoperability of Data Deduplication
- Implement Data Deduplication
- Manage and maintain Data Deduplication
Lesson 32: Implement Windows Server iSCSI
- List the functionalities, components, and use cases of iSCSI
- List the considerations for implementing iSCSI
- Implement iSCSI
- Configure high availability for iSCSI
Lesson 33: Implement Windows Server Storage Replica
- List the functionalities and components of Storage Replica
- Examine the prerequisites for implementing Storage Replica
- Implement Storage Replica by using Windows Admin Center
- Implement Storage Replica by using Windows PowerShell
Lesson 34: Implement a Hybrid File Server Infrastructure
- Describe Azure File services
- Configure Azure Files
- Configure connectivity to Azure Files
- Describe Azure File Sync
- Implement Azure File Sync
- Deploy Azure File Sync
- Deploy Azure File Sync 2
- Manage cloud tiering
- Migrate from DFSR to Azure File Sync
Prerequisites
- Experience with managing Windows Server operating system and Windows Server workloads in on-premises scenarios, including AD DS, DNS, DFS, Hyper-V, and File and Storage Services
- Experience with common Windows Server management tools (implied in the first prerequisite)
- Basic knowledge of core Microsoft compute, storage, networking, and virtualization technologies (implied in the first prerequisite)
- Experience and an understanding of core networking technologies such as IP addressing, name resolution, and Dynamic Host Configuration Protocol (DHCP)
- Experience working with and an understanding of Microsoft Hyper-V and basic server virtualization concepts
- Basic experience with implementing and managing IaaS services in Microsoft Azure
- Basic knowledge of Azure Active Directory
- Experience working hands-on with Windows client operating systems such as Windows 10 or Windows 11
- Basic experience with Windows PowerShell