AZ-800 Administering Windows Server Hybrid Core Infrastructure

Module 1: Identity Services in Windows Server

This module introduces identity services and describes Active Directory Domain Services (AD DS) in a Windows Server environment.
The module describes how to deploy domain controllers in AD DS, as well as Azure Active Directory (AD) and the benefits of integrating Azure AD with AD DS.
The module also covers the basics of Group Policy and how to configure Group Policy objects (GPOs) in a domain environment.

lesson

• Introduction to AD DS
• Managing AD DS domain controllers and FSMO roles
• Implementing Group Policy Objects
• Managing advanced features in AD DS

Lab : Implementing identity services and Group Policy

• Deploy a new domain controller on Server Core
• Configuring Group Policy

After completing this module, participants will be able to:

• Describe AD DS in a Windows Server environment.
• Deploy domain controllers in AD DS.
• Describe Azure AD and the benefits of integrating Azure AD with AD DS.
• Explain the basics of Group Policy and configure GPOs in a domain environment.

Module 2: Implementing identity in hybrid scenarios

This module describes how to configure an Azure environment to support Windows IaaS workloads that require Active Directory.
The module also covers integrating on-premises Active Directory Domain Services (AD DS) environments into Azure.
Finally, the module explains how to extend an existing Active Directory environment into Azure by placing IaaS virtual machines configured as domain controllers in a specially configured Azure virtual network subnet.

lesson

• Implementing hybrid identity with Windows Server
• Deploy and manage Azure IaaS Active Directory domain controllers in Azure

Lab : Implementing integration between AD DS and Azure AD

• Preparing Azure AD for AD DS integration
• Preparing local AD DS for Azure AD integration
• Download, install and configure Azure AD Connect
• Verify the integration between AD DS and Azure AD
• Implement Azure AD integration features in AD DS

After completing this module, participants will be able to:

• Integrate on-premises Active Directory Domain Services (AD DS) environment into Azure.
• Install and configure directory synchronization using Azure AD Connect.
• Implement and configure Azure AD DS.
• Implement seamless single sign-on (SSO).
• Implement and configure Azure AD DS.
• Install a new AD DS forest on an Azure VNet.

Module 3: Administration of Windows Server

This module describes how to implement the principle of least privilege through Privileged Access Workstation (PAW) and Just Enough Administration (JEA).
The module also describes several common Windows Server administration tools, such as Windows Admin Center, Server Manager, and PowerShell.
The module also describes the post-installation configuration process and the tools available for this process, such as sconfig and Desired State Configuration (DSC).

lesson

• Performing secure administration of Windows Server
• Describe Windows Server administration tools
• Performing configuration after Windows Server installation
• Enough administration in Windows Server

Lab: Managing Windows Server

• Implement and use remote server administration

After completing this module, participants will be able to:

• Explain administrative models with minimum authorization.
• Decide when to use workstations with privileged access.
• Choose the most appropriate Windows Server administration tool for a given situation.
• Apply different methods to perform configuration of Windows Server after installation.
• Limit privileged administrative actions by using JEA (Just Enough Administration).

Module 4: Facilitating hybrid management

This module describes tools that facilitate remote management of Windows IaaS virtual machines.
The module also describes how to use Azure Arc with on-premises server instances, how to deploy Azure policies with Azure Arc, and how to use role-based access control (RBAC) to restrict access to Log Analytics data.

lesson

• Administer and manage Windows Server IaaS virtual machines remotely
• Manage hybrid workloads with Azure Arc

Lab: Using Windows Admin Center in hybrid scenarios

• Provisioning of Azure virtual machines running Windows Server
• Implement hybrid connectivity using Azure Network Adapter
• Deploy Windows Admin Center gateway in Azure
• Verify the functionality of the Windows Admin Center gateway in Azure

After completing this module, participants will be able to:

• Select the appropriate tools and techniques to remotely manage Windows IaaS VMs.
• Explain how to onboard local Windows Server instances in Azure Arc.
• Connect hybrid machines to Azure from the Azure portal.
• Use Azure Arc to manage devices.
• Restrict access using RBAC.

Module 5: Hyper-V virtualization in Windows Server

This module describes how to deploy and configure Hyper-V virtual machines and containers.
This module describes the main features of Hyper-V in Windows Server, describes virtual machine settings, and how to configure virtual machines in Hyper-V.
This module also describes security techniques used in virtualization, such as protected virtual machines, Host Guardian Service, admin and TPM trusted attestation, and Key Protection Service (KPS).
Finally, it describes how to run containers and container workloads as well as how to orchestrate container workloads on Windows Server using Kubernetes.

lesson

• Configure and manage Hyper-V
• Configure and manage Hyper-V virtual machines
• Securing Hyper-V workloads
• Running containers on Windows Server
• Orchestrate containers on Windows Server using Kubernetes

Lab : Implement and configure virtualization in Windows Server

• Create and configure virtual machines
• Installing and configuring containers

After completing this module, participants will be able to:

• Install and configure Hyper-V on Windows Server.
• Configure and manage Hyper-V virtual machines.
• Use the Host Guardian Service to protect virtual machines.
• Create and deploy protected virtual machines.
• Configure and manage workloads with containers.
• Orchestrate container workloads using a Kubernetes cluster.

Module 6: Deploying and configuring Azure VMs

This module describes Azure compute and storage in relation to Azure VMs and how to deploy Azure VMs using the Azure portal, Azure CLI or templates.
The module also explains how to create new VMs from generalized images and use Azure Image Builder templates to create and manage images in Azure.
Finally, the module describes how to deploy Desired State Configuration (DSC) extensions, implement these extensions to fix non-compliant servers, and use custom script extensions.

• Plan and deploy Windows Server IaaS virtual machines
• Customizing virtual machine images for Windows Server IaaS
• Automate the configuration of Windows Server IaaS virtual machines

Lab: Deploying and configuring Windows Server on Azure VMs

• Creating Azure Resource Manager (ARM) templates for deploying Azure virtual machines
• Modify ARM templates to include configuration based on VM extensions
• Deploy Azure virtual machines running Windows Server using ARM templates
• Configure administrative access to Azure virtual machines running Windows Server
• Configuring Windows Server security in Azure virtual machines

After completing this module, participants will be able to:

• Create a VM from the Azure portal and from the Azure Cloud Shell.
• Deploy Azure VMs using templates.
• Automate the configuration of Windows Server IaaS VMs.
• Detect and fix non-compliant servers.
• Create new virtual machines from generalized images.
• Use Azure Image Builder templates to create and manage images in Azure.

Module 7: Network Infrastructure Services in Windows ServerThis module describes how to implement core network infrastructure services in Windows Server, such as DHCP and DNS.
The module also describes how to implement IP address management and how to use Remote Access Services.

lesson

• Deploy and manage DHCP
• Implementing Windows Server DNS
• Implement IP address management
• Implementing remote access

Lab : Implement and configure network infrastructure services in Windows Server

• Deployment and configuration of DHCP
• Deploying and configuring DNS

After completing this module, participants will be able to:

• Implement automatic IP configuration with DHCP in Windows Server.
• Deploy and configure name resolution with Windows Server DNS.
• Implement IPAM to manage an organization’s DHCP and DNS servers and IP address space.
• Selecting, using and managing remote access components.
• Implement Web Application Proxy (WAP) as a reverse proxy for internal web applications.

Module 8: Implementing hybrid network infrastructure

This module describes how to connect an on-premises environment to Azure and how to configure DNS for Windows Server IaaS virtual machines.
This module describes how to choose a DNS solution that fits your organization’s needs and run a DNS server in a Windows Server Azure IaaS VM.
Finally, this module describes how to manage virtual networks in Microsoft Azure and IP address configuration for Windows Server Infrastructure as a Service (IaaS) virtual machines.

lesson

• Implementing hybrid network infrastructure
• Implement DNS for Windows Server IaaS VMs
• Implement IP addressing and routing for Windows Server IaaS VM

Lab: Implementing Windows Server IaaS VM networks

• Implementing virtual network routing in Azure
• Implementing DNS name resolution in Azure

After completing this module, participants will be able to:

• Implement a virtual private network (VPN) in Azure.
• Configure DNS for Windows Server IaaS virtual machines.
• Run a DNS server in a Windows Server Azure IaaS VM.
• Create a route-based VPN gateway using the Azure portal.
• Implement Azure ExpressRoute.
• Implement an Azure WAN (Wide Area Network).
• Manage virtual networks (VNets) in Microsoft Azure.
• Manage IP address configuration for virtual machines (VMs) in Windows Server IaaS.

Module 9: File servers and storage management in Windows Server

This module covers the core functionality and use cases of file server and storage management technologies in Windows Server.
The module discusses how to configure and manage the Windows File Server role and how to use Storage Spaces and Storage Spaces Direct.
This module also covers replicating volumes between servers or clusters using Storage Replica.

lesson

• Managing Windows Server file servers
• Implement Storage Spaces and Storage Spaces Direct
• Implementing Windows Server Data Deduplication
• Implementing Windows Server iSCSI
• Implementing Windows Server Storage Replica

Lab: Implementing storage solutions in Windows Server

• Implement data deduplication
• Configuring iSCSI storage
• Configuring redundant Storage Spaces
• Implementation of Storage Spaces Direct

After completing this module, participants will be able to:

• Configure and manage the Windows Server File Server role.
• Protect data from hard disk failure with Storage Spaces.
• Increase the scalability and performance of storage management using Storage Spaces Direct.
• Optimize disk usage with the help of Data DeDuplication.
• Configure high availability for iSCSI.
• Enable replication of volumes between clusters using Storage Replica.
• Use Storage Replica to provide resiliency for data residing on Windows Servers volumes.

Module 10: Implementing a Hybrid File Server InfrastructureThis module introduces Azure File Services and how to configure connectivity to Azure Files.
The module also covers how to deploy and implement Azure File Sync to cache Azure file shares on a local Windows Server file server.
This module also describes how to manage cloud storage and how to migrate from DFSR to Azure File Sync.lesson

• Overview of Azure file services
• Implementation of Azure File Sync

Lab: Implementing Azure File Sync

• Implement DFS Replication in your local environment
• Create and configure a synchronization group
• Replacing DFS Replication with File Sync-based replication
• Verification of replication and activation of cloud tiering
• Troubleshooting replication issues

After completing this module, participants will be able to:

• Configure Azure file services.
• Configure connection to Azure file services.
• Implement Azure File Sync.
• Deploy Azure File Sync
• Manage tiering in the cloud.
• Migrate from DFSR to Azure File Sync