- Learn how to remotely administer Windows Server IaaS VMs in Azure using the Azure portal, Windows Admin Center, Azure PowerShell, Azure CLI, Azure Bastion for secure RDP/SSH, and Just-In-Time (JIT) VM access.
After completing this module, you'll be able to:
- Select appropriate remote administration tools.
- Secure management connections to Azure IaaS VMs running Windows Server with Azure Bastion.
- Configure JIT VM access.
- Learn how to select and use Windows Server administration tools including Windows Admin Center, Server Manager, Remote Server Administration Tools (RSAT), and Windows PowerShell remoting for local and remote server management.
After completing this module, you'll be able to:
- Describe Windows Admin Center.
- Describe how to use Remote Server Administration Tools (RSAT) to manage servers.
- Describe Server Manager.
- Describe how to use Windows PowerShell to manage servers.
- Explain how to use Windows PowerShell to remotely administer a server.
- Learn how to configure Just Enough Administration (JEA) in Windows Server to restrict PowerShell remoting sessions to specific cmdlets, parameters, and values using role capability files and session configuration files.
After completing this module, you'll be able to:
- Explain the concept of Just Enough Administration (JEA)
- Define role group capabilities and session configurations for a JEA session
- Create and connect to a JEA endpoint
- Learn how to apply the principle of least privilege, delegate administrative control in Active Directory, implement Privileged Access Workstations (PAWs) with Windows Defender security features, and configure jump servers for secure remote administration.
After completing this module, you'll be able to:
- Explain least privilege administrative models.
- Implement delegated privilege.
- Describe privileged access workstations.
- Describe jump servers.
- This module covers some useful advanced techniques that help overcome the limitations of basic Windows PowerShell remoting.
Upon completion of this module, the learner is able to:
Configure common remoting options.
Send parameters and local variables to remote computers.
Describe the use of Windows PowerShell scopes.
Send local variables to a remote computer.
Configure multi-hop remoting authentication.
- This module explains how to use remoting to perform administration on remote computers.
Upon completion of this module, the learner will be able to:
Describe the Windows PowerShell remoting architecture.
Explain the difference between Windows PowerShell remoting and other forms of remote administration.
Describe Windows PowerShell remoting security and privacy features.
Enable remoting on a computer.
Use Windows PowerShell remoting for single-computer management.
Use Windows PowerShell remoting for multiple-computer management.
Use Windows PowerShell remoting.
Explain the difference between local output and remoting output.
- Learn how to use Azure Arc to manage hybrid workloads by onboarding on-premises Windows Server and Linux machines, deploying extensions, applying Azure Policy guest configuration, and restricting access with RBAC.
After completing this module, you'll be able to:
- Describe Azure Arc.
- Explain how to onboard on-premises Windows Server instances in Azure Arc.
- Connect hybrid machines to Azure from the Azure portal.
- Use Azure Arc to manage devices.
- Restrict access using RBAC.
- Learn how to assess and deploy updates to Azure virtual machines and Azure Arc-enabled servers by using Azure Update Manager.
After completing this module, you can:
- Describe Azure Update Manager.
- Prepare Azure virtual machines and Azure Arc-enabled servers for update management.
- Assess update compliance.
- Deploy one-time and recurring updates.
- Monitor update operations across multiple machines.
- Learn how to deploy Desired State Configuration (DSC) extensions, implement those extensions to remediate noncompliant servers, and use custom script extension.
After completing this module, you'll be able to:
- Describe Azure Automation.
- Implement Azure Automation with DSC.
- Remediate noncompliant servers.
- Describe custom script extension.
- Configure a VM by using DSC extensions.
- Audit and enforce OS security configuration on Azure virtual machines and Arc-enabled servers using Azure Machine Configuration. Apply built-in Windows and Linux security baseline policies, configure audit and enforce modes, and author custom machine configurations for organization-specific requirements.
After completing this module, you can:
- Explore how Azure Machine Configuration audits and enforces OS-level settings using Azure Policy
- Deploy the Azure Machine Configuration extension and configure required prerequisites
- Assign built-in Windows and Linux security baseline policies in audit and enforce modes
- Author and publish a custom machine configuration for organization-specific requirements
- Learn how to implement Azure Automation with DevOps using runbooks, webhooks, and PowerShell workflows. Understand automation accounts, shared resources, source control integration, and hybrid management for automated cloud operations.
By the end of this module, you're able to:
- Create and configure Azure Automation accounts for managing cloud resources.
- Implement and manage runbooks using PowerShell, PowerShell Workflow, Python, and graphical editors.
- Configure webhooks to trigger runbooks from external systems and services.
- Integrate Azure Automation with GitHub and Azure DevOps for version control and CI/CD.
- Create and execute PowerShell workflows with checkpoints and parallel processing.
- Plan and implement hybrid management using Azure Automation across cloud and on-premises resources.
