Azure 800: Administering Windows Server Hybrid Core Infrastructure

Module 1: Deploy and manage identity infrastructure (Windows Server and Hybrid scenarios)

Learn about Active Directory Domain Services fundamentals, and then learn to configure and manage AD DS, Group Policy Objects, and how to implement hybrid identity with Windows Server.

Lessons

• Introduction to AD DS
• Manage AD DS domain controllers and FSMO roles
• Implement Group Policy Objects
• Manage advanced features of AD DS
• Implement hybrid identity with Windows Server
• Deploy and manage Azure IaaS Active Directory domain controllers in Azure

Labs: Deploy and manage identity infrastructure

• Deploying a new domain controller on Server Core (On-Premise)
• Configuring Group Policy (On-Premise)
• Preparing Microsoft Entra ID (Formerly Azure AD) for AD DS integration (Hybrid)
• Preparing on-premises AD DS for Microsoft Entra ID (Formerly Azure AD) integration (Hybrid)
• Downloading, installing, and configuring Microsoft Entra ID (Formerly Azure AD) Connect (Hybrid)
• Verifying integration between AD DS and Microsoft Entra ID (Formerly Azure AD) (Hybrid)
• Implementing Microsoft Entra ID (Formerly Azure AD) integration features in AD DS (Hybrid)

After completing this module, students will be able to:

• Describe AD DS in a Windows Server environment
• Deploy domain controllers in AD DS
• Describe Microsoft Entra ID (Formerly Azure AD) and benefits of integrating Microsoft Entra ID (Formerly Azure AD) with AD DS
• Explain Group Policy basics and configure GPOs in a domain environment
• Integrate on-premises Active Directory Domain Services (AD DS) environment into Azure.
• Install and configure directory synchronization using Microsoft Entra ID (Formerly Azure AD) Connect.
• Implement and configure Microsoft Entra ID (Formerly Azure AD) DS.
• Implement Seamless Single Sign-on (SSO).
• Implement and configure Microsoft Entra ID (Formerly Azure AD) DS.
• Install a new AD DS forest on an Azure VNet

Module 2: Manage Windows Server and workloads in a hybrid environment (Windows Server administration and Facilitating hybrid management)

Learn how to administer Windows Server securely using the appropriate management tools. Streamline administration of Windows Server with Just Enough Administration (JEA). You'll also learn how to implement hybrid technologies in Windows Server management.

Lessons

• Perform Windows Server secure administration
• Describe Windows Server administration tools
• Perform post-installation configuration of Windows Server
• Just Enough Administration in Windows Server
• Administer and manage Windows Server IaaS virtual machines remotely
• Manage hybrid workloads with Azure Arc

Lab: Managing Windows Server and workloads in a hybrid environment

• Implementing and using remote server administration (On-Premise)
• Provisioning Azure VMs running Windows Server (Cloud)
• Implementing hybrid connectivity by using the Azure Network Adapter (Cloud)
• Deploying Windows Admin Center gateway in Azure (Cloud)
• Verifying functionality of the Windows Admin Center gateway in Azure (Cloud)

After completing this module, students will be able to:

• Explain least privilege administrative models
• Decide when to use privileged access workstations
• Select the most appropriate Windows Server administration tool for a given situation
• Apply different methods to perform post-installation configuration of Windows Server
• Constrain privileged administrative operations by using Just Enough Administration (JEA)
• Select appropriate tools and techniques to manage Windows IaaS VMs remotely.
• Explain how to onboard on-premises Windows Server instances in Azure Arc.
• Connect hybrid machines to Azure from the Azure portal.
• Use Azure Arc to manage devices.
• Restrict access using RBAC

Module 3: Manage virtualization and containers in a hybrid environment (Hyper-V virtualization in Windows Server and Deploying and configuring Azure VMs)

Learn to implement and manage Windows Server virtual machines (VMs) and container workloads using Windows Server Hyper-V. You’ll learn how to deploy and configure Azure IaaS Virtual Machine workloads.

Lessons

• Configure and manage Hyper-V
• Configure and manage Hyper-V virtual machines
• Secure Hyper-V workloads
• Run containers on Windows Server
• Orchestrate containers on Windows Server using Kubernetes
• Plan and deploy Windows Server IaaS virtual machines
• Customize Windows Server IaaS virtual machine images
• Automate the configuration of Windows Server IaaS virtual machines

Labs: Manage virtualization and containers in a hybrid environment

• Creating and configuring VMs (On-Premise)
• Installing and configuring containers (On-Premise)
• Authoring Azure Resource Manager (ARM) templates for Azure VM deployment (Cloud)
• Modifying ARM templates to include VM extension-based configuration (Cloud)
• Deploying Azure VMs running Windows Server by using ARM templates (Cloud)
• Configuring administrative access to Azure VMs running Windows Server (Cloud)
• Configuring Windows Server security in Azure VMs (Cloud)

After completing this module, students will be able to:

• Install and configure Hyper-V on Windows Server
• Configure and manage Hyper-V virtual machines
• Use Host Guardian Service to protect virtual machines
• Create and deploy shielded virtual machines
• Configure and manage container workloads
• Orchestrate container workloads using a Kubernetes cluster
• Create a VM from the Azure portal and from Azure Cloud Shell
• Deploy Azure VMs by using templates
• Automate the configuration of Windows Server IaaS VMs
• Detect and remediate noncompliant servers
• Create new VMs from generalized images
• Use Azure Image Builder templates to create and manage images in Azure

Module 4: Implement and manage an on-premises and hybrid networking infrastructure (Network infrastructure services in Windows Server and Implementing hybrid networking infrastructure)

Learn to implement and manage networking services in Windows Server. Learn to deploy and manage DHCP, secure DNS, and implement IP Address Management (IPAM) and Web Application Proxy. You'll also learn about Azure IaaS networking.

Lessons

• Deploy and manage DHCP
• Implement Windows Server DNS
• Implement IP address management
• Implement remote access Implement hybrid network infrastructure
• Implement DNS for Windows Server IaaS VMs
• Implement Windows Server IaaS VM IP addressing and routing

Labs: Implementing and managing an on-premise and hybrid networking infrastructure

• Deploying and configuring DHCP (On-Premise)
• Deploying and configuring DNS (On-Premise)
• Implementing virtual network routing in Azure (Cloud)
• Implementing DNS name resolution in Azure (Cloud)

After completing this module, students will be able to:

• Implement automatic IP configuration with DHCP in Windows Server
• Deploy and configure name resolution with Windows Server DNS
• Implement IPAM to manage an organization’s DHCP and DNS servers, and IP address space
• Select, use, and manage remote access components
• Implement Web Application Proxy (WAP) as a reverse proxy for internal web applications
• Implement an Azure virtual private network (VPN)
• Configure DNS for Windows Server IaaS VMs
• Run a DNS server in a Windows Server Azure IaaS VM
• Create a route-based VPN gateway using the Azure portal
• Implement Azure ExpressRoute
• Implement an Azure wide area network (WAN)
• Manage Microsoft Azure virtual networks (VNets)
• Manage IP address configuration for Windows Server IaaS virtual machines (VMs)

Module 5: Configure storage and file services (File servers and storage management in Windows Server and Implementing a hybrid file server infrastructure)

Learn to implement and manage Windows Server file servers and storage. Implement Storage Spaces, data deduplication, and Windows Server Storage Replica. You'll also learn how to deploy Azure File Sync and configure Azure File services.

Lessons

• Manage Windows Server file servers
• Implement Storage Spaces and Storage Spaces Direct
• Implement Windows Server Data Deduplication
• Implement Windows Server iSCSI
• Implement Windows Server Storage Replica
• Overview of Azure file services
• Implementing Azure File Sync

Labs: Configure storage and file services

• Implementing Data Deduplication (On-Premise)
• Configuring iSCSI storage (On-Premise)
• Configuring redundant Storage Spaces (On-Premise)
• Implementing Storage Spaces Direct (On-Premise)
• Implementing DFS Replication in your on-premises environment (Hybrid)
• Creating and configuring a sync group (Hybrid)
• Replacing DFS Replication with File Sync–based replication (Hybrid)
• Verifying replication and enabling cloud tiering (Hybrid)
• Troubleshooting replication issues (Hybrid)

After completing this module, students will be able to:

• Configure and manage the Windows Server File Server role
• Protect data from drive failures using Storage Spaces
• Increase scalability and performance of storage management using Storage Spaces Direct
• Optimize disk utilization using Data DeDuplication
• Configure high availability for iSCSI
• Enable replication of volumes between clusters using Storage Replica
• Use Storage Replica to provide resiliency for data hosted on Windows Servers volumes
• Configure Azure file services
• Configure connectivity to Azure file services
• Implement Azure File Sync
• Deploy Azure File Sync
• Manage cloud tiering
• Migrate from DFSR to Azure File Sync