Azure 802: Administer Windows Server

Learning Path 1: Deploy and manage Active Directory Domain Services 

This learning path covers how to deploy and manage Active Directory Domain Services (AD DS) in on-premises and hybrid environments. You learn how to deploy domain controllers on-premises and in Azure, manage FSMO roles, create and manage users, groups, and organizational units, and extend your on-premises identity into Azure. You also configure Group Policy Objects to enforce security and desktop settings, and work with trusts, replication, and multi-site AD DS environments.

Modules:

• Deploy and manage Active Directory Domain Services domain controllers
• Deploy and manage Azure IaaS Active Directory domain controllers in Azure
• Create and manage Active Directory objects
• Implement hybrid identity with Windows Server
• Create and configure Group Policy Objects in Active Directory
• Implement Group Policy Objects
• Manage advanced features of AD DS

Lab:

• Implement identity services and Group Policy

Leaning Path 2: Manage Windows Server instances and workloads in a hybrid environment

Learn how to configure remote management for Windows Servers using Windows Admin Center, PowerShell, SSH, and Remote Desktop, and manage Windows Server workloads using Azure Arc, Azure Update Manager, and Azure Automation.

Modules:

• Administer and manage Windows Server IaaS Virtual Machine remotely
• Describe Windows Server administration tools
• Manage hybrid workloads with Azure Arc

Lab:

•  Manage Windows Server

Learning Path 3: Manage virtual machines

This learning path covers how to manage virtual machines in on-premises and Azure environments. You learn how to configure Hyper-V hosts, virtual switches, and nested virtualization, manage VM settings including generations, virtual hard disks, and checkpoints, and secure workloads with the Host Guardian Service and shielded VMs. You also learn to implement VM high availability and live migration, run Windows containers, and plan, deploy, and scale Windows Server VMs on Azure including virtual network and IP address configuration, network security with NSGs and Azure Firewall, and secure remote access with Azure Bastion and JIT.

Modules:

• Configure and manage Hyper-V virtual machines
• Configure and manage Hyper-V
• Plan and deploy Windows Server IaaS Virtual Machines

Lab:

• Implementing and configuring virtualization in Windows Server

Learning Path 4: Implement and manage an on-premises and hybrid networking infrastructure

This learning path covers how to implement and manage networking infrastructure in on-premises and hybrid environments. You learn how to deploy and configure Windows Server DNS, including zones, forwarding, conditional forwarders, DNS policies, and DNSSEC, and integrate DNS with Azure for hybrid name resolution. You also deploy and manage DHCP including scopes, options, and failover, and use IP Address Management (IPAM) to centrally manage your DNS and DHCP infrastructure.

Modules:

• Implement Windows Server DNS
• Deploy and manage DHCP

Lab:

• Implementing and configuring network infrastructure services in Windows Server

Learning Path 5: Manage storage and file services

This learning path covers how to manage storage and file services in on-premises and hybrid environments. You learn how to deploy Azure File Sync, migrate file servers using Storage Migration Services, and manage Windows Server file shares including DFS, FSRM, and SMB security. You also configure storage technologies including Storage Spaces, Storage Spaces Direct, Storage Replica, Data Deduplication, and iSCSI

Modules:

• Implement a hybrid file server infrastructure
• Manage Windows Server file servers
• Implement Storage Spaces and Storage Spaces Direct
• Implement Windows Server Data Deduplication
• Implement Windows Server iSCSI

Labs:

• Implementing storage solutions in Windows Server
• Implementing Azure File Sync

Learning Path 6: Secure Windows Server

This learning path covers how to secure Windows Server infrastructure and Active Directory Domain Services. You learn how to harden Windows Server using security baselines, LAPS, and Privileged Access Workstations, configure Microsoft Defender for Endpoint and built-in Windows client protections, and manage Group Policy security settings and audit policies. You also secure Active Directory by managing user rights, authentication policies, Protected Users, and service accounts including gMSA and dMSA, and monitor for threats with Microsoft Defender for Identity.

Modules:

• Harden Windows Server
• Secure Windows Server User Accounts

Lab:

• Configuring security in Windows Server

Learning Path 7: Monitor and troubleshoot Windows Server environments

This learning path covers how to monitor and troubleshoot Windows Server environments. You learn how to use Performance Monitor, Event Viewer, and auditing tools to track server health and compliance, and extend monitoring into Azure with Azure Monitor and VM Insights. You also troubleshoot on-premises and hybrid networking issues including DHCP, DNS, and routing, manage server updates with WSUS and Azure Update Management, and troubleshoot Active Directory including replication failures, Group Policy processing, and hybrid authentication.

Modules:

• Monitor Windows Server performance
• Manage and monitor event logs
• Troubleshoot on-premise and hybrid networking
• Troubleshoot Active Directory

Lab:

• Monitor and troubleshooting Windows Server

This course is intended for Windows Server administrators who deploy, implement, manage, and troubleshoot Windows Server as a workload in on-premises, cloud, or hybrid environments. Candidates administer identity, security, compute, networking, storage, and monitoring for Windows Server, and they typically collaborate with architects, administrators, and engineers. Candidates should have experience administering Windows Server using technologies such as Windows Admin Center, Hyper-V, PowerShell, Azure Arc, Azure Monitor, Azure Update Manager, and Microsoft Defender for Cloud, and should be familiar with Active Directory Domain Services (AD DS).

Successful Windows Server Hybrid Administrators start this role with experience on operating systems, virtualization, cloud infrastructure, storage structures, and networking. This knowledge includes:

• Experience with managing Windows Server operating system and Windows Server workloads in on-premises scenarios, including AD DS, DFS, Hyper-V, and File and Storage Services
• Experience and an understanding of core networking technologies such as IP addressing, name resolution, and Dynamic Host Configuration Protocol (DHCP)
• Basic understanding of Azure hybrid technologies, including deployment and management of Windows Server IaaS VMs, and Azure Active Directory
• Experience with common Windows Server management tools, including Windows Admin Center, command line tools, and Windows PowerShell