Duration
4 Days
24 CPD hours
This course is intended for
This four-day course is intended for Windows Server Hybrid Administrators who have experience working with Windows Server and want to extend the capabilities of their on-premises environments by combining on-premises and hybrid technologies. Windows Server Hybrid Administrators implement and manage on-premises and hybrid solutions such as identity, management, compute, networking, and storage in a Windows Server hybrid environment.
This course teaches IT Professionals how to manage core Windows Server workloads and services using on-premises, hybrid, and cloud technologies. The course teaches IT Professionals how to implement and manage on-premises and hybrid solutions such as identity, management, compute, networking, and storage in a Windows Server hybrid environment.
Prerequisites
Experience with managing Windows Server operating system and Windows Server workloads in on-premises scenarios, including AD DS, DNS, DFS, Hyper-V, and File and Storage Services
Experience with common Windows Server management tools (implied in the first prerequisite).
Basic knowledge of core Microsoft compute, storage, networking, and virtualization technologies (implied in the first prerequisite).
Experience and an understanding of core networking technologies such as IP addressing, name resolution, and Dynamic Host Configuration Protocol (DHCP)
Experience working with and an understanding of Microsoft Hyper-V and basic server virtualization concepts
Basic experience with implementing and managing IaaS services in Microsoft Azure
Basic knowledge of Azure Active Directory
Experience working hands-on with Windows client operating systems such as Windows 10 or Windows 11
Basic experience with Windows PowerShell
1 - Introduction to AD DS
Define AD DS
Define users, groups, and computers
Define AD DS forests and domains
Define OUs
Manage objects and their properties in AD DS
2 - Manage AD DS domain controllers and FSMO roles
Deploy AD DS domain controllers
Maintain AD DS domain controllers
Manage the AD DS Global Catalog role
Manage AD DS operations masters
Manage AD DS schema
3 - Implement Group Policy Objects
Define GPOs
Implement GPO scope and inheritance
Define domain-based GPOs
Create and configure a domain-based GPO
Define GPO storage
Define administrative templates
4 - Manage advanced features of AD DS
Create trust relationships
Implement ESAE forests
Monitor and troubleshoot AD DS
Create custom AD DS partitions
5 - Implement hybrid identity with Windows Server
Select a Microsoft Entra integration model
Plan for Microsoft Entra integration
Prepare on-premises Active Directory for directory synchronization
Install and configure directory synchronization with Microsoft Entra Connect
Implement Seamless Single Sign-On
Enable Microsoft Entra login in for Windows VM in Azure
Describe Microsoft Entra Domain Services
Implement and configure Microsoft Entra Domain Services
Manage Windows Server 2019 in a Microsoft Entra Domain Services environment
Create and configure a Microsoft Entra Domain Services instance
Join a Windows Server VM to a managed domain
6 - Deploy and manage Azure IaaS Active Directory domain controllers in Azure
Select an option to implement directory and identity services using Active Directory Domain Services in Azure
Deploy and configure Active Directory Domain Services domain controllers in Azure VMs
Install a replica Active Directory domain controller in an Azure VM
Install a new Active Directory forest on an Azure VNet
7 - Perform Windows Server secure administration
Define least privilege administration
Implement delegated privileges
Use privileged access workstations
Use jump servers
8 - Describe Windows Server administration tools
Explore Windows Admin Center
Use Server Manager
List Remote Server Administration Tools
Use Windows PowerShell
Use Windows PowerShell to remotely administer a server
9 - Perform post-installation configuration of Windows Server
List the available post-installation configuration tools
Configure Server Core using Sconfig
Use DSC to configure Windows Server
Perform post-installation configuration with Windows Admin Center
Configure a server with answer files
10 - Just Enough Administration in Windows Server
Explain the concept of Just Enough Administration (JEA)
Define role capabilities for a JEA endpoint
Create a session configuration file to register a JEA endpoint
Describe how JEA endpoints work to limit access to a PowerShell session
Create and connect to a JEA endpoint
Demonstration: Connect to a JEA endpoint
11 - Administer and manage Windows Server IaaS Virtual Machine remotely
Select the appropriate remote administration tool
Manage Windows Virtual Machines with Azure Bastion
Create an Azure Bastion host
Configure just-in-time administration
12 - Manage hybrid workloads with Azure Arc
Describe Azure Arc
Onboard Windows Server instances
Connect hybrid machines to Azure from the Azure portal
Use Azure Arc to manage Windows Server instances
Restrict access with RBAC
13 - Configure and manage Hyper-V
Define Hyper-V
Define Hyper-V Manager
Configure Hyper-V hosts using best practices
Configure Hyper-V networking
Assess advanced Hyper-V networking features
Define nested virtualization
14 - Configure and manage Hyper-V virtual machines
List the virtual machine configuration versions
List the virtual machine generation versions
List available VHD formats and types
Create and configure VMs
Determine storage options for VMs
Define shared VHDs and VHD Sets
Implement guest clusters using shared VHDX
15 - Secure Hyper-V workloads
Define guarded fabric
Define the Host Guardian Service
Explore TPM-trusted attestation
Define KPS
Determine key features of shielded VMs
Compare encryption-supported and shielded VMs in a guarded fabric
Implement a shielded VM
16 - Run containers on Windows Server
Define containers
List the differences between containers and VMs
Define Windows Server and Hyper-V containers and isolation modes
Explore Docker
Prepare a Windows Server 2019 host for container deployment
Security, Storage, and Networking with Windows containers
17 - Orchestrate containers on Windows Server using Kubernetes
Define orchestration
Define Kubernetes
Deploy Kubernetes resources
Create a Kubernetes cluster on Windows
Define Azure Arc
Connect an Azure Arc-enabled Kubernetes cluster to Azure Arc
18 - Plan and deploy Windows Server IaaS Virtual Machines
Describe Azure compute
Describe Virtual Machine storage
Deploy Azure Virtual Machines
Create a windows Virtual Machine using the portal
Create a windows Virtual Machine using Azure CLI
Deploy Azure Virtual Machines using templates
Describe additional management optimization options
19 - Customize Windows Server IaaS Virtual Machine images
Create a generalized image
Create a new Virtual Machine from a managed image
Create a managed image of a generalized virtual machine in Azure
Create a Virtual Machine from a managed image
Implement Azure Image Builder
Create a windows Virtual Machine using Azure Image Builder template
Create a Windows Virtual Machine with Azure Image Builder using PowerShell
20 - Automate the configuration of Windows Server IaaS Virtual Machines
Describe Azure Automation
Implement Azure Automation with DSC
Remediate noncompliant servers
Describe Custom Script Extensions
Configure a Virtual Machine by using DSC
21 - Deploy and manage DHCP
Use DHCP to simplify IP configuration
Install and configure the DHCP role
Configure DHCP options
Configure DHCP scopes
Select DHCP high availability options
Implement DHCP Failover
22 - Implement Windows Server DNS
Explore the DNS architecture
Work with DNS zones and records
Install and configure the DNS role
Implement DNS forwarding
23 - Implement IP Address Management
Define IP Address Management
Deploy IP Address Management
Administer IP Address Management
Configure IP Address Management options
Manage DNS zones with IP Address Management
Manage DHCP servers with IP Address Management
Use IP Address Management to manage IP addressing
24 - Implement remote access
Examine the remote access options in Windows Server
Select and set up VPNs
Use NPS to create and enforce network access policies
Plan and implement NPS
Deploy a PKI for remote access
Use WAP as a reverse web proxy
25 - Implement hybrid network infrastructure
Describe Azure network topologies
Implement Azure VPN options
Create a route-based VPN gateway using the Azure portal
Implement Azure ExpressRoute
Configure Azure Virtual WAN
Implement DNS in hybrid environments
26 - Implement DNS for Windows Server IaaS VMs
Understand Azure DNS
Implement Azure DNS
Create an Azure DNS zone and record using the Azure portal
Implement DNS with Azure IaaS virtual machines
Implement split-horizon DNS in Azure
Troubleshoot DNS
27 - Implement Windows Server IaaS VM IP addressing and routing
Implement a virtual network
Implement IaaS VM IP addressing
Assign and manage IP addresses
Configure a private IP address for a virtual machine using the Azure portal
Create a virtual machine with a static public IP address using the Azure portal
Implement IaaS virtual machine IP routing
Implement IPv6 for Windows Server IaaS virtual machines
28 - Manage Windows Server file servers
Define the Windows Server file system
List the benefits and uses of File Server Resource Manager
Define SMB and its security considerations
Configure SMB protocol
Define Volume Shadow Copy Service
29 - Implement Storage Spaces and Storage Spaces Direct
Define the Storage Spaces architecture and its components
List the functionalities, benefits, and use cases of Storage Spaces
Implement Storage Spaces
List the functionalities, components, benefits, and use cases of Storage Spaces Direct
Implement Storage Spaces Direct
30 - Implement Windows Server Data Deduplication
Define the architecture, components, and functionality of Data Deduplication
Define the use cases and interoperability of Data Deduplication
Implement Data Deduplication
Manage and maintain Data Deduplication
31 - Implement Windows Server iSCSI
List the functionalities, components, and use cases of iSCSI
List the considerations for implementing iSCSI
Implement iSCSI
Configure high availability for iSCSI
32 - Implement Windows Server Storage Replica
List the functionalities and components of Storage Replica
Examine the prerequisites for implementing Storage Replica
Implement Storage Replica by using Windows Admin Center
Implement Storage Replica by using Windows PowerShell
33 - Implement a hybrid file server infrastructure
Describe Azure File services
Configure Azure Files
Configure connectivity to Azure Files
Describe Azure File Sync
Implement Azure File Sync
Deploy Azure File Sync
Deploy Azure File Sync 2
Manage cloud tiering
Migrate from DFSR to Azure File Sync