Administering Windows Server Hybrid Core Infrastructure (Live Online)

Overview

This comprehensive course teaches IT professionals how to effectively manage core Windows Server workloads and services using on-premises, hybrid, and cloud technologies. The course covers how to implement and manage on-premises and hybrid solutions, including identity management, system administration, compute resources, networking infrastructure, and storage systems within a Windows Server hybrid environment.

Audience Profile:

This four-day course is designed for Windows Server Hybrid Administrators who have established experience working with Windows Server and seek to extend the capabilities of their on-premises environments by integrating on-premises and hybrid technologies. Windows Server Hybrid Administrators design and implement on-premises and hybrid solutions for identity services, management tools, compute resources, networking, and storage within a Windows Server hybrid environment.

Job Role:

Administrator in Windows Server environments

Certification Preparation:

This course prepares students for the AZ-800 certification exam

Skills Gained:

Apply administrative techniques and tools in Windows Server environments
Identify and use tools for implementing hybrid solutions, including Windows Admin Center and PowerShell
Design and implement identity services in Windows Server

Prerequisites:

Before attending this course, students must have experience managing Windows Server operating systems and Windows Server workloads in on-premises scenarios, including Active Directory Domain Services (AD DS), Domain Name System (DNS), File Services (FS), Hyper-V virtualization, and File and Storage Services
Experience with common Windows Server management tools is required
Basic knowledge of core Microsoft compute, storage, networking, and virtualization services is necessary

Course Outline:

Module 1: Identity Services in Windows Server

This module introduces identity services and describes Active Directory Domain Services (AD DS) in a Windows Server environment. The module covers how to deploy domain controllers in AD DS, as well as Azure Active Directory (AD) and the advantages of integrating Azure AD with AD DS. The module also covers fundamental Group Policy concepts and how to configure group policy objects (GPOs) in a domain environment.

Lessons

Introduction to AD DS
Managing AD DS domain controllers and FSMO roles
Implementing Group Policy Objects
Managing advanced features of AD DS
Lab: Implementing identity services and Group Policy
Deploying a new domain controller on Server Core
Configuring Group Policy

Module 2: Implementing Identity in Hybrid Scenarios

This module discusses how to configure an Azure environment to support Windows IaaS workloads that require Active Directory functionality. The module also addresses the integration of an on-premises Active Directory Domain Services (AD DS) environment into Azure cloud services. Finally, the module explains how to extend an existing Active Directory environment into Azure by deploying IaaS virtual machines configured as domain controllers on a specially configured Azure virtual network subnet.

Lessons

Implementing hybrid identity with Windows Server
Deploying and managing Azure IaaS Active Directory domain controllers
Lab: Implementing integration between AD DS and Azure AD
Preparing Azure AD for AD DS integration
Preparing on-premises AD DS for Azure AD integration
Downloading, installing, and configuring Azure AD Connect
Verifying integration between AD DS and Azure AD
Implementing Azure AD integration features in AD DS

Module 3: Windows Server Administration

This module describes how to implement the principle of least privilege through Privileged Access Workstation (PAW) and Just Enough Administration (JEA) approaches. The module also highlights several common Windows Server administration tools, such as Windows Admin Center, Server Manager, and PowerShell scripting. This module also describes the post-installation configuration process and tools available for this process, including sconfig and Desired State Configuration (DSC).

Lessons

Performing Windows Server secure administration
Describing Windows Server administration tools and utilities
Performing post-installation configuration of Windows Server
Implementing Just Enough Administration in Windows Server
Lab: Managing Windows Server
Implementing and using remote server administration

Module 4: Facilitating Hybrid Management

This module covers tools that enable remote management of Windows IaaS virtual machines. The module also covers how to use Azure Arc with on-premises server instances, how to deploy Azure policies using Azure Arc, and how to implement role-based access control (RBAC) to restrict access to Log Analytics data.

Lessons

Administering and managing Windows Server IaaS virtual machines remotely
Managing hybrid workloads with Azure Arc
Lab: Using Windows Admin Center in hybrid scenarios
Provisioning Azure virtual machines running Windows Server
Implementing hybrid connectivity using the Azure Network Adapter
Deploying Windows Admin Center gateway in Azure
Verifying functionality of the Windows Admin Center gateway in Azure

Module 5: Hyper-V Virtualization in Windows Server

This module describes how to implement and configure Hyper-V virtual machines and containers. The module covers key features of Hyper-V in Windows Server, describes virtual machine settings, and explains how to configure virtual machines in Hyper-V. The module also covers security technologies used with virtualization, such as shielded virtual machines, Host Guardian Service, admin-trusted and TPM-trusted attestation, and Key Protection Service (KPS). Finally, this module covers how to run containers and container workloads, and how to orchestrate container workloads on Windows Server using Kubernetes.

Lessons

Configuring and managing Hyper-V
Configuring and managing Hyper-V virtual machines
Securing Hyper-V workloads
Running containers on Windows Server
Orchestrating containers on Windows Server using Kubernetes
Lab: Implementing and configuring virtualization in Windows Server
Creating and configuring virtual machines
Installing and configuring containers

Module 6: Deploying and Configuring Azure VMs

This module describes Azure compute and storage services in relation to Azure virtual machines, and how to deploy Azure virtual machines using the Azure portal, Azure command-line interface (CLI), or infrastructure templates. The module also explains how to create new virtual machines from generalized images and use Azure Image Builder templates to create and manage images in Azure. Finally, this module describes how to deploy Desired State Configuration (DSC) extensions, implement those extensions to remediate noncompliant servers, and use custom script extensions.

Lessons

Planning and deploying Windows Server IaaS virtual machines
Customizing Windows Server IaaS virtual machine images
Automating the configuration of Windows Server IaaS virtual machines
Lab: Deploying and configuring Windows Server on Azure virtual machines
Authoring Azure Resource Manager (ARM) templates for Azure virtual machine deployment
Modifying ARM templates to include virtual machine extension-based configuration
Deploying Azure virtual machines running Windows Server using ARM templates
Configuring administrative access to Azure virtual machines running Windows Server
Configuring Windows Server security in Azure virtual machines

Module 7: Network Infrastructure Services in Windows Server

This module describes how to implement core network infrastructure services in Windows Server, such as Dynamic Host Configuration Protocol (DHCP) and Domain Name System (DNS). This module also covers how to implement IP address management and how to use Remote Access Services for hybrid connectivity.

Lessons

Deploying and managing DHCP
Implementing Windows Server DNS
Implementing IP address management
Implementing remote access services
Lab: Implementing and configuring network infrastructure services in Windows Server
Deploying and configuring DHCP
Deploying and configuring DNS

Module 8: Implementing Hybrid Networking Infrastructure

This module describes how to connect an on-premises environment to Azure and how to configure DNS for Windows Server IaaS virtual machines. The module covers how to select the appropriate DNS solution for your organization's requirements and run a DNS server in a Windows Server Azure IaaS virtual machine. Finally, this module covers how to manage Microsoft Azure virtual networks and IP address configuration for Windows Server infrastructure as a service (IaaS) virtual machines.

Lessons

Implementing a hybrid network infrastructure
Implementing DNS for Windows Server IaaS virtual machines
Implementing Windows Server IaaS virtual machine IP addressing and routing
Lab: Implementing Windows Server IaaS virtual machine networking
Implementing virtual network routing in Azure
Implementing DNS name resolution in Azure

Module 9: File Servers and Storage Management in Windows Server

This module covers the core functionality and use cases of file server and storage management technologies in Windows Server. The module discusses how to configure and manage the Windows File Server role, and how to use Storage Spaces and Storage Spaces Direct solutions. This module also covers volume replication between servers or clusters using Storage Replica technology.

Lessons

Managing Windows Server file servers
Implementing Storage Spaces and Storage Spaces Direct solutions
Implementing Windows Server Data Deduplication
Implementing Windows Server iSCSI technology
Implementing Windows Server Storage Replica
Lab: Implementing storage solutions in Windows Server
Implementing Data Deduplication
Configuring iSCSI storage
Configuring redundant Storage Spaces
Implementing Storage Spaces Direct

Module 10: Implementing a Hybrid File Server Infrastructure

This module introduces Azure file services and how to configure connectivity to Azure Files. The module also covers how to deploy and implement Azure File Sync to cache Azure file shares on an on-premises Windows Server file server. This module also describes how to manage cloud tiering and how to migrate from Distributed File System Replication (DFSR) to Azure File Sync.

Lessons