Perform Windows Server secure administration
After completing this module, you'll be able to:
- Explain least privilege administrative models.
- Implement delegated privilege.
- Describe privileged access workstations.
- Describe jump servers.
Describe Windows Server administration tools
After completing this module, you'll be able to:
- Describe Windows Admin Center.
- Describe how to use Remote Server Administration Tools (RSAT) to manage servers.
- Describe Server Manager.
- Describe how to use Windows PowerShell to manage servers.
- Explain how to use Windows PowerShell to remotely administer a server.
Perform post-installation configuration of Windows Server
After completing this module, you'll be able to:
- Explain post-installation configuration and describe the available post-installation configuration tools.
- Use Sconfig to configure Windows Server.
- Describe Desired State Configuration (DSC) and explain how to use it to configure Windows Server.
- Use Windows Admin Center to perform post-installation configuration.
- Implement answer files to complete the configuration.
Administer and manage Windows Server IaaS Virtual Machine remotely
After completing this module, you'll be able to:
- Select appropriate remote administration tools.
- Secure management connections to Azure IaaS VMs running Windows Server with Azure Bastion.
- Configure JIT VM access.
Manage hybrid workloads with Azure Arc
After completing this module, you'll be able to:
- Describe Azure Arc.
- Explain how to onboard on-premises Windows Server instances in Azure Arc.
- Connect hybrid machines to Azure from the Azure portal.
- Use Azure Arc to manage devices.
- Restrict access using RBAC.
Streamline the administration of your Windows Server environments with Just Enough Administration (JEA). Limit privileged operations to a set of specified PowerShell cmdlets, parameters and variables, and limit which users can connect to JEA endpoints. Constrain the level of privilege those users have when performing administrative tasks.
After completing this module, you'll be able to:
- Explain the concept of Just Enough Administration (JEA)
- Define role group capabilities and session configurations for a JEA session
- Create and connect to a JEA endpoint

Syllabus

Perform Windows Server secure administration
- Introduction
- Define least privilege administration
- Implement delegated privileges
- Use privileged access workstations
- Use jump servers
- Module assessment
- Summary
Describe Windows Server administration tools
- Introduction
- Explore Windows Admin Center
- Use Server Manager
- List Remote Server Administration Tools
- Use Windows PowerShell
- Use Windows PowerShell to remotely administer a server
- Module assessment
- Summary
Perform post-installation configuration of Windows Server
- Introduction
- List the available post-installation configuration tools
- Configure Server Core using Sconfig
- Use DSC to configure Windows Server
- Perform post-installation configuration with Windows Admin Center
- Configure a server with answer files
- Module assessment
- Summary
Administer and manage Windows Server IaaS Virtual Machine remotely
- Introduction
- Select the appropriate remote administration tool
- Manage Windows Virtual Machines with Azure Bastion
- Create an Azure Bastion host
- Configure just-in-time administration
- Module assessment
- Summary
Manage hybrid workloads with Azure Arc
- Introduction
- Describe Azure Arc
- Onboard Windows Server instances
- Connect hybrid machines to Azure from the Azure portal
- Use Azure Arc to manage Windows Server instances
- Restrict access with RBAC
- Module assessment
- Summary
Just Enough Administration in Windows Server
- Introduction
- Explain the concept of Just Enough Administration (JEA)
- Define role capabilities for a JEA endpoint
- Create a session configuration file to register a JEA endpoint
- Describe how JEA endpoints work to limit access to a PowerShell session
- Create and connect to a JEA endpoint
- Demonstration: Connect to a JEA endpoint
- Module assessment
- Summary resources