Administering Windows Server Hybrid Core Infrastructure (AZ-800)

In this module, you'll learn how to:

Lessons

• Describe AD DS in a Windows Server environment.
• Describe Azure AD and the benefits of integrating Azure AD with AD DS.
• Deploy domain controllers in AD DS.
• Explain Group Policy basics and configure GPOs in a domain environment.
• Manage AD DS domain controllers and FSMO roles
• Implement Group Policy Objects
• Manage advanced features of AD DS

Lab: Implementing identity services and Group Policy

• Deploying a new domain controller on Server Core
• Configuring Group Policy

In this module, you'll learn how to:

Lessons

• Implement hybrid identity with Windows Server
• Integrate on-premises Active Directory Domain Services (AD DS) environment into Azure.
• Install and configure directory synchronization using Azure AD Connect.
• Implement and configure Azure AD DS.
• Implement Seamless Single Sign-on (SSO).
• Implement and configure Azure AD DS.
• Install a new AD DS forest on an Azure VNet.
• Deploy and manage Azure IaaS Active Directory domain controllers in Azure

Lab: Implementing integration between AD DS and Azure AD

• Preparing Azure AD for AD DS integration
• Preparing on-premises AD DS for Azure AD integration
• Downloading, installing, and configuring Azure AD Connect
• Verifying integration between AD DS and Azure AD
• Implementing Azure AD integration features in AD DS

In this module, you'll learn how to:

Lessons

• Explain least privilege administrative models.
• Decide when to use privileged access workstations.
• Select the most appropriate Windows Server administration tool for a given situation.
• Apply different methods to perform post-installation configuration of Windows Server.
• Constrain privileged administrative operations by using Just Enough Administration (JEA).

Lab: Managing Windows Server

• Implementing and using remote server administration

In this module, you'll learn how to:

Lessons

• Select appropriate tools and techniques to manage Windows IaaS VMs remotely.
• Explain how to onboard on-premises Windows Server instances in Azure Arc.
• Connect hybrid machines to Azure from the Azure portal.
• Use Azure Arc to manage devices.
• Restrict access using RBAC.

Lab: Using Windows Admin Center in hybrid scenarios

• Provisioning Azure VMs running Windows Server
• Implementing hybrid connectivity by using the Azure Network Adapter
• Deploying Windows Admin Center gateway in Azure
• Verifying functionality of the Windows Admin Center gateway in Azure

In this module, you'll learn how to:

Lessons

• Install and configure Hyper-V on Windows Server.
• Configure and manage Hyper-V virtual machines.
• Use Host Guardian Service to protect virtual machines.
• Create and deploy shielded virtual machines.
• Configure and manage container workloads.
• Orchestrate container workloads using a Kubernetes cluster.

Lab: Implementing and configuring virtualization in Windows Server

• Creating and configuring VMs
• Installing and configuring containers

In this module, you'll learn how to:

Lessons

• Create a VM from the Azure portal and from Azure Cloud Shell.
• Deploy Azure VMs by using templates.
• Automate the configuration of Windows Server IaaS VMs.
• Detect and remediate non-compliant servers.
• Create new VMs from generalized images.
• Use Azure Image Builder templates to create and manage images in Azure.

Lab: Deploying and configuring Windows Server on Azure VMs

• Authoring Azure Resource Manager (ARM) templates for Azure VM deployment
• Modifying ARM templates to include VM extension-based configuration
• Deploying Azure VMs running Windows Server by using ARM templates
• Configuring administrative access to Azure VMs running Windows Server
• Configuring Windows Server security in Azure VMs

In this module, you'll learn how to:

Lessons

• Implement automatic IP configuration with DHCP in Windows Server.
• Deploy and configure name resolution with Windows Server DNS.
• Implement IPAM to manage an organization’s DHCP and DNS servers, and IP address space.
• Select, use, and manage remote access components.
• Implement Web Application Proxy (WAP) as a reverse proxy for internal web applications.

Lab: Implementing and configuring network infrastructure services in Windows Server

• Deploying and configuring DHCP
• Deploying and configuring DNS

In this module, you'll learn how to:

Lessons

• Implement an Azure virtual private network (VPN).
• Configure DNS for Windows Server IaaS VMs.
• Run a DNS server in a Windows Server Azure IaaS VM.
• Create a route-based VPN gateway using the Azure portal.
• Implement Azure ExpressRoute.
• Implement an Azure wide area network (WAN).
• Manage Microsoft Azure virtual networks (VNets).
• Manage IP address configuration for Windows Server IaaS virtual machines (VMs).

Lab: Implementing Windows Server IaaS VM networking

• Implementing virtual network routing in Azure
• Implementing DNS name resolution in Azure

In this module, you'll learn how to:

Lessons

• Configure and manage the Windows Server File Server role.
• Protect data from drive failures using Storage Spaces.
• Increase scalability and performance of storage management using Storage Spaces Direct.
• Optimize disk utilization using Data Deduplication.
• Configure high availability for iSCSI.
• Enable replication of volumes between clusters using Storage Replica.
• Use Storage Replica to provide resiliency for data hosted on Windows Servers volumes.

Lab: Implementing storage solutions in Windows Server

• Implementing Data Deduplication
• Configuring iSCSI storage
• Configuring redundant Storage Spaces
• Implementing Storage Spaces Direct

In this module, you'll learn how to:

Lessons

• Configure Azure file services.
• Configure connectivity to Azure file services.
• Implement Azure File Sync.
• Deploy Azure File Sync
• Manage cloud tiering.
• Migrate from DFSR to Azure File Sync.

Lab: Implementing Azure File Sync

• Implementing DFS Replication in your on-premises environment
• Creating and configuring a sync group
• Replacing DFS Replication with File Sync–based replication
• Verifying replication and enabling cloud tiering
• Troubleshooting replication issues