- Administer and manage Windows Server IaaS Virtual Machine remotely
After completing this module, you'll be able to:
- Select appropriate remote administration tools.
- Secure management connections to Azure IaaS VMs running Windows Server with Azure Bastion.
- Configure JIT VM access.
- Describe Windows Server administration tools
After completing this module, you'll be able to:
- Describe Windows Admin Center.
- Describe how to use Remote Server Administration Tools (RSAT) to manage servers.
- Describe Server Manager.
- Describe how to use Windows PowerShell to manage servers.
- Explain how to use Windows PowerShell to remotely administer a server.
- Streamline the administration of your Windows Server environments with Just Enough Administration (JEA). Limit privileged operations to a set of specified PowerShell cmdlets, parameters and variables, and limit which users can connect to JEA endpoints. Constrain the level of privilege those users have when performing administrative tasks.
After completing this module, you'll be able to:
- Explain the concept of Just Enough Administration (JEA)
- Define role group capabilities and session configurations for a JEA session
- Create and connect to a JEA endpoint
- Perform Windows Server secure administration
After completing this module, you'll be able to:
- Explain least privilege administrative models.
- Implement delegated privilege.
- Describe privileged access workstations.
- Describe jump servers.
- This module covers some useful advanced techniques that help overcome the limitations of basic Windows PowerShell remoting.
Upon completion of this module, the learner is able to:
Configure common remoting options.
Send parameters and local variables to remote computers.
Describe the use of Windows PowerShell scopes.
Send local variables to a remote computer.
Configure multi-hop remoting authentication.
- This module explains how to use remoting to perform administration on remote computers.
Upon completion of this module, the learner will be able to:
Describe the Windows PowerShell remoting architecture.
Explain the difference between Windows PowerShell remoting and other forms of remote administration.
Describe Windows PowerShell remoting security and privacy features.
Enable remoting on a computer.
Use Windows PowerShell remoting for single-computer management.
Use Windows PowerShell remoting for multiple-computer management.
Use Windows PowerShell remoting.
Explain the difference between local output and remoting output.
- Manage hybrid workloads with Azure Arc
After completing this module, you'll be able to:
- Describe Azure Arc.
- Explain how to onboard on-premises Windows Server instances in Azure Arc.
- Connect hybrid machines to Azure from the Azure portal.
- Use Azure Arc to manage devices.
- Restrict access using RBAC.
- You'll be able to enable Azure Update Management, deploy updates, review an update assessment, and manage updates for your Azure VMs.
After completing this module, you will be able to:
- Describe Azure updates.
- Enable Update Management.
- Deploy updates.
- Review an update assessment.
- Manage updates for your Azure VMs.
- Learn how to deploy Desired State Configuration (DSC) extensions, implement those extensions to remediate noncompliant servers, and use custom script extension.
After completing this module, you'll be able to:
- Describe Azure Automation.
- Implement Azure Automation with DSC.
- Remediate noncompliant servers.
- Describe custom script extension.
- Configure a VM by using DSC extensions.
- Audit and enforce OS security configuration on Azure virtual machines and Arc-enabled servers using Azure Machine Configuration. Apply built-in Windows and Linux security baseline policies, configure audit and enforce modes, and author custom machine configurations for organization-specific requirements.
After completing this module, you can:
- Explore how Azure Machine Configuration audits and enforces OS-level settings using Azure Policy
- Deploy the Azure Machine Configuration extension and configure required prerequisites
- Assign built-in Windows and Linux security baseline policies in audit and enforce modes
- Author and publish a custom machine configuration for organization-specific requirements
- Learn how to implement Azure Automation with DevOps using runbooks, webhooks, and PowerShell workflows. Understand automation accounts, shared resources, source control integration, and hybrid management for automated cloud operations.
By the end of this module, you're able to:
- Create and configure Azure Automation accounts for managing cloud resources.
- Implement and manage runbooks using PowerShell, PowerShell Workflow, Python, and graphical editors.
- Configure webhooks to trigger runbooks from external systems and services.
- Integrate Azure Automation with GitHub and Azure DevOps for version control and CI/CD.
- Create and execute PowerShell workflows with checkpoints and parallel processing.
- Plan and implement hybrid management using Azure Automation across cloud and on-premises resources.
