Administering Windows Server Hybrid Core Infrastructure (AZ-800)

The content of this intensive training course is derived from the exam "AZ-800: Administering Windows Server Hybrid Core Infrastructure".

In this course, experts professionals will learn how to implement and manage local and hybrid solutions (such as identity, management, compute, network and storage) in a Windows Server Hybrid environment.

Module 1: Identity services in Windows Server

This module introduces identity services and describes Active Directory Domain Services (AD DS) in a Windows Server environment. The module describes the deployment of domain controllers in AD DS as well as Azure Active Directory (AD) and the benefits of integrating Azure AD with AD DS. The module also covers the basics of Group Policy and how to configure Group Policy Objects (GPOs) in a domain environment.

Lessons

• Introduction to AD DS
• Manage AD-DS domain controllers and FSMO roles
• Implementation of group policy objects
• Managing the advanced functions of AD DS

Lab: Implementing identity services and group policies

• Deploy a new domain controller on Server Core
• Configure group policies

Module 2: Implementing identity in hybrid scenarios

This module discusses how to configure an Azure environment to support Windows IaaS workloads that require Active Directory. The module also covers how to integrate the on-premises Active Directory Domain Services (AD DS) environment with Azure. Finally, the module explains how to extend an existing Active Directory environment in Azure by placing IaaS VMs configured as domain controllers into a specially configured Azure virtual network subnet.

Lessons

• Implementing hybrid identity with Windows Server
• Deploy and manage Azure IaaS Active Directory domain controllers in Azure

Lab: Implementing integration between AD DS and Azure AD

• Prepare Azure AD for AD DS integration
• Preparing local AD DS for Azure AD integration
• Download, install and configure Azure AD Connect
• Checking the integration between AD DS and Azure AD
• Implement Azure AD integration functions in AD DS

Module 3: Windows Server Administration

This module describes how the principle of least privilege is implemented through Privileged Access Workstation (PAW) and Just Enough Administration (JEA). The module also highlights several common Windows Server management tools, such as Windows Admin Center, Server Manager, and PowerShell. This module also describes the post-installation configuration process and the tools available for this process, such as sconfig and Desired State Configuration (DSC).

Lessons

• Perform secure management of Windows Server
• Describing the Windows Server administration tools
• Performing the post-installation configuration of Windows Server
• Sufficient administration in Windows Server

Lab: Manage Windows Server

• Implementation and use of remote server administration

Module 4: Facilitating hybrid administration

This module covers tools that make it easier to manage Windows IaaS VMs remotely. The module also covers using Azure Arc with on-premises server instances, deploying Azure policies with Azure Arc, and using role-based access control (RBAC) to restrict access to log analytics data.

Lessons

• Manage and administer Windows Server IaaS virtual machines remotely
• Manage hybrid workloads with Azure Arc

Lab: Using Windows Admin Center in hybrid scenarios

• Provision of Azure VMs with Windows Server
• Implementation of hybrid connectivity with the Azure Network Adapter
• Deployment of the Windows Admin Center gateway in Azure
• Checking the functionality of the Windows Admin Center gateway in Azure

Module 5: Hyper-V virtualization in Windows Server

This module describes how to implement and configure Hyper-V VMs and containers. The module covers the key features of Hyper-V in Windows Server, describes VM settings and how to configure VMs in Hyper-V. The module also covers security technologies used in virtualization, such as shielded VMs, Host Guardian Service, Admin and TPM trusted attestation, and Key Protection Service (KPS). Finally, this module covers running containers and container workloads as well as orchestrating container workloads on Windows Server with Kubernetes.

Lessons

• Configure and manage Hyper-V
• Configure and manage Hyper-V virtual machines
• Back up Hyper-V workloads
• Running containers on Windows Server
• Orchestrating containers on Windows Server with Kubernetes

Lab: Implementing and configuring virtualization in Windows Server

• Create and configure VMs
• Installing and configuring containers

Module 6: Deploying and configuring Azure VMs

This module describes Azure Compute and Storage in relation to Azure VMs and how to deploy Azure VMs using the Azure Portal, Azure CLI or templates. The module also explains how to create new VMs from generalized images and use Azure Image Builder templates to create and manage images in Azure. Finally, this module describes how to deploy Desired State Configuration (DSC) extensions, implement these extensions to correct non-compliant servers, and use custom scripting extensions.

Lessons

• Planning and provisioning Windows Server IaaS virtual machines
• Customize Windows Server IaaS images of virtual machines
• Automating the configuration of virtual machines with Windows Server IaaS

Lab: Deploying and configuring Windows Server on Azure VMs

• Creating Azure Resource Manager (ARM) templates for the provisioning of Azure VMs
• Modify ARM templates to include VM extension-based configuration
• Deploy Azure VMs with Windows Server using ARM templates
• Configuring administrative access to Azure VMs with Windows Server
• Configuring Windows Server security in Azure VMs

Module 7: Network infrastructure services in Windows Server

This module describes how to implement the most important network infrastructure services in Windows Server, e.g. DHCP and DNS. This module also covers the implementation of IP address management and the use of Remote Access Services.

Lessons

• Set up and manage DHCP
• Set up Windows Server DNS
• Implement IP address management
• Implement remote access

Lab: Implementing and configuring network infrastructure services in Windows Server

• Setting up and configuring DHCP
• Set up and configure DNS

Module 8: Implementing a hybrid network infrastructure

This module describes how to connect an on-premises environment to Azure and how to configure DNS for Windows Server IaaS virtual machines. The module covers how to select the appropriate DNS solution for your organization's needs and how to run a DNS server in a Windows Server Azure IaaS VM. Finally, this module covers managing Microsoft Azure virtual networks and configuring IP addresses for Windows Server Infrastructure as a Service (IaaS) virtual machines.

Lessons

• Implementing a hybrid network infrastructure
• Implement DNS for Windows Server IaaS VMs
• Implement IP addressing and routing of Windows Server IaaS VMs

Lab: Implementing Windows Server IaaS VM networks

• Implementing virtual network routing in Azure
• Implementing DNS name resolution in Azure

Module 9: File server and storage management in Windows Server

This module covers the core functionality and use cases of file server and storage management technologies in Windows Server. The module covers the configuration and management of the Windows File Server role and the use of Storage Spaces and Storage Spaces Direct. This module also covers the replication of volumes between servers or clusters using Storage Replica.

Lessons

• Manage Windows Server file servers
• Implementing Storage Spaces and Storage Spaces Direct
• Implement Windows Server data deduplication
• Set up Windows Server iSCSI
• Implement Windows Server storage replication

Lab: Implementing storage solutions in Windows Server

• Implement data deduplication
• Configure iSCSI storage
• Configure redundant storage spaces
• Implementing Storage Spaces Direct

Module 10: Implementing a hybrid file server infrastructure

This module introduces Azure file services and explains how to configure connectivity to Azure Files. The module also covers the deployment and implementation of Azure File Sync to cache Azure file shares on a local Windows Server file server. This module also describes how to manage cloud tiering and how to migrate from DFSR to Azure File Sync.

Lessons

• Overview of the Azure file services
• Implementing Azure File Sync

Lab: Implementing Azure File Sync

• Implementing DFS Replication in your local environment
• Creating and configuring a sync group
• Replacing DFS replication with file sync-based replication
• Checking replication and activating cloud tiering
• Troubleshooting replication problems