Microsoft Private

Administer Windows Server Hybrid Core Infrastructure (AZ-800T00)

4 days
Windows ServerAzure

Learn to manage Windows Server hybrid infrastructure across on-premises and Azure environments, including identity, compute, networking, and storage securely.

Talk to a Learning ConsultantRequest a Private Class

Register or Request Training

  • Private class for your team
  • Live expert instructor
  • Online or on‑location
  • Customizable agenda
  • Proposal responses same day as request
Request Proposal

Course Overview

This four-day course teaches Windows Server Hybrid Administrators to manage core workloads and services across on-premises, hybrid, and Azure environments. Participants learn to implement and manage identity, administration, compute, networking, and storage solutions that extend Windows Server infrastructure into the cloud.

Course Benefits

  • Administer Active Directory Domain Services, Group Policy, domain controllers, and advanced AD DS features.
  • Integrate on-premises identity with Microsoft Entra ID and deploy AD DS domain controllers in Azure.
  • Securely configure and remotely administer Windows Server with tools such as Windows Admin Center, PowerShell, Azure Bastion, and Just Enough Administration.
  • Manage hybrid Windows Server workloads with Azure Arc and Azure Automanage.
  • Configure Hyper-V hosts and virtual machines, secure virtualization workloads, and deploy Windows Server virtual machines in Azure.
  • Customize and automate Azure virtual machine configuration and work with Windows containers and Kubernetes.
  • Implement Windows Server and hybrid networking services, including DNS, DHCP, IPAM, remote access, VPN connectivity, and IP routing.
  • Manage Windows Server storage and file services, including Storage Spaces, data deduplication, iSCSI, Storage Replica, Azure Files, and Azure File Sync.

Delivery Methods

Private Class
Delivered for your team at your site or online.

Microsoft Certified Partner

Webucator is a Microsoft Certified Partner. This class uses official Microsoft courseware and will be delivered by a Microsoft Certified Trainer (MCT).

Microsoft Certified Partner

Course Outline

  1. Introduction to AD DS
    1. Define AD DS
    2. Define users, groups, and computers
    3. Define AD DS forests and domains
    4. Define OUs
    5. Manage objects and their properties in AD DS
  2. Manage AD DS domain controllers and FSMO roles
    1. Deploy AD DS domain controllers
    2. Maintain AD DS domain controllers
    3. Manage the AD DS Global Catalog role
    4. Manage AD DS operations masters
    5. Manage the AD DS schema
  3. Implement Group Policy Objects
    1. Define GPOs
    2. Implement GPO scope and inheritance
    3. Define domain-based GPOs
    4. Create and configure a domain-based GPO
    5. Define GPO storage
    6. Define administrative templates
  4. Manage advanced features of AD DS
    1. Create trust relationships
    2. Implement ESAE forests
    3. Monitor and troubleshoot AD DS
    4. Create custom AD DS partitions
  5. Implement hybrid identity with Windows Server
    1. Select a Microsoft Entra integration model
    2. Plan for Microsoft Entra integration
    3. Prepare on-premises Active Directory for directory synchronization
    4. Install and configure directory synchronization with Microsoft Entra Connect
    5. Implement Seamless Single Sign-On
    6. Enable Microsoft Entra login for a Windows VM in Azure
    7. Describe Microsoft Entra Domain Services
    8. Implement and configure Microsoft Entra Domain Services
    9. Manage Windows Server in a Microsoft Entra Domain Services environment
    10. Create and configure a Microsoft Entra Domain Services instance
    11. Join a Windows Server VM to a managed domain
  6. Deploy and manage Azure IaaS Active Directory domain controllers in Azure
    1. Select an option for implementing directory and identity services with AD DS in Azure
    2. Deploy and configure AD DS domain controllers in Azure VMs
    3. Install a replica Active Directory domain controller in an Azure VM
    4. Install a new Active Directory forest on an Azure virtual network
  7. Perform secure Windows Server administration
    1. Define least-privilege administration
    2. Implement delegated privileges
    3. Use privileged access workstations
    4. Use jump servers
  8. Describe Windows Server administration tools
    1. Explore Windows Admin Center
    2. Use Server Manager
    3. List Remote Server Administration Tools
    4. Use Windows PowerShell
    5. Use Windows PowerShell to administer a server remotely
  9. Perform post-installation configuration of Windows Server
    1. List the available post-installation configuration tools
    2. Configure Server Core using Sconfig
    3. Use DSC to configure Windows Server
    4. Perform post-installation configuration with Windows Admin Center
    5. Configure a server with answer files
  10. Administer and manage Windows Server IaaS virtual machines remotely
    1. Select the appropriate remote administration tool
    2. Manage Windows virtual machines with Azure Bastion
    3. Create an Azure Bastion host
    4. Configure just-in-time administration
  11. Manage hybrid workloads with Azure Arc
    1. Describe Azure Arc
    2. Onboard Windows Server instances
    3. Connect hybrid machines to Azure from the Azure portal
    4. Use Azure Arc to manage Windows Server instances
    5. Restrict access with RBAC
  12. Optimize IT operations and management with Azure Automanage
    1. Describe Azure Automanage best practices
    2. Enable Azure Automanage best practices
    3. Create and assign a custom configuration profile
    4. Extend Azure Automanage to non-Azure infrastructure with Azure Arc
  13. Just Enough Administration in Windows Server
    1. Explain Just Enough Administration
    2. Define role capabilities for a JEA endpoint
    3. Create a session configuration file to register a JEA endpoint
    4. Describe how JEA endpoints limit access to a PowerShell session
    5. Create and connect to a JEA endpoint
    6. Demonstrate connecting to a JEA endpoint
  14. Configure and manage Hyper-V
    1. Define Hyper-V
    2. Define Hyper-V Manager
    3. Configure Hyper-V hosts using best practices
    4. Configure Hyper-V networking
    5. Assess advanced Hyper-V networking features
    6. Define nested virtualization
  15. Configure and manage Hyper-V virtual machines
    1. List virtual machine configuration versions
    2. List virtual machine generation versions
    3. List available VHD formats and types
    4. Create and configure virtual machines
    5. Determine storage options for virtual machines
    6. Define shared VHDs and VHD Sets
    7. Implement guest clusters using shared VHDX
  16. Secure Hyper-V workloads
    1. Define guarded fabric
    2. Define the Host Guardian Service
    3. Explore TPM-trusted attestation
    4. Define KPS
    5. Determine key features of shielded virtual machines
    6. Compare encryption-supported and shielded virtual machines in a guarded fabric
    7. Implement a shielded virtual machine
  17. Plan and deploy Windows Server IaaS virtual machines
    1. Describe Azure compute
    2. Describe virtual machine storage
    3. Deploy Azure virtual machines
    4. Create a Windows virtual machine using the Azure portal
    5. Create a Windows virtual machine using Azure CLI
    6. Deploy Azure virtual machines using templates
    7. Describe additional management optimization options
  18. Customize Windows Server IaaS virtual machine images
    1. Create a generalized image
    2. Create a new virtual machine from a managed image
    3. Create a managed image of a generalized virtual machine in Azure
    4. Create a virtual machine from a managed image
    5. Implement Azure Image Builder
    6. Create a Windows virtual machine using an Azure Image Builder template
    7. Create a Windows virtual machine with Azure Image Builder using PowerShell
  19. Automate the configuration of Windows Server IaaS virtual machines
    1. Describe Azure Automation
    2. Implement Azure Automation with DSC
    3. Remediate noncompliant servers
    4. Describe Custom Script Extensions
    5. Configure a virtual machine using DSC
  20. Run containers on Windows Server
    1. Define containers
    2. Compare containers and virtual machines
    3. Define Windows Server and Hyper-V containers and isolation modes
    4. Explore Docker
    5. Prepare a Windows Server 2019 host for container deployment
    6. Explore security, storage, and networking with Windows containers
  21. Orchestrate containers on Windows Server using Kubernetes
    1. Define orchestration
    2. Define Kubernetes
    3. Deploy Kubernetes resources
    4. Create a Kubernetes cluster on Windows
    5. Define Azure Arc
    6. Connect an Azure Arc-enabled Kubernetes cluster to Azure Arc
  22. Implement DNS for Windows Server IaaS virtual machines
    1. Understand Azure DNS
    2. Implement Azure DNS
    3. Create an Azure DNS zone and record using the Azure portal
    4. Implement DNS with Azure IaaS virtual machines
    5. Implement split-horizon DNS in Azure
    6. Troubleshoot DNS
  23. Deploy and manage DHCP
    1. Use DHCP to simplify IP configuration
    2. Install and configure the DHCP role
    3. Configure DHCP options
    4. Configure DHCP scopes
    5. Select DHCP high-availability options
    6. Implement DHCP failover
  24. Implement Windows Server DNS
    1. Explore the DNS architecture
    2. Work with DNS zones and records
    3. Install and configure the DNS role
    4. Implement DNS forwarding
  25. Implement IP Address Management
    1. Define IP Address Management
    2. Deploy IP Address Management
    3. Administer IP Address Management
    4. Configure IP Address Management options
    5. Manage DNS zones with IP Address Management
    6. Manage DHCP servers with IP Address Management
    7. Use IP Address Management to manage IP addressing
  26. Implement remote access
    1. Examine remote-access options in Windows Server
    2. Select and set up VPNs
    3. Use NPS to create and enforce network-access policies
    4. Plan and implement NPS
    5. Deploy a PKI for remote access
    6. Use WAP as a reverse web proxy
  27. Implement hybrid network infrastructure
    1. Describe Azure network topologies
    2. Implement Azure VPN options
    3. Create a route-based VPN gateway using the Azure portal
    4. Implement Azure ExpressRoute
    5. Configure Azure Virtual WAN
    6. Implement DNS in hybrid environments
  28. Implement Windows Server IaaS VM IP addressing and routing
    1. Implement a virtual network
    2. Implement IaaS VM IP addressing
    3. Assign and manage IP addresses
    4. Configure a private IP address for a virtual machine using the Azure portal
    5. Create a virtual machine with a static public IP address using the Azure portal
    6. Implement IaaS virtual machine IP routing
    7. Implement IPv6 for Windows Server IaaS virtual machines
  29. Manage Windows Server file servers
    1. Define the Windows Server file system
    2. List the benefits and uses of File Server Resource Manager
    3. Define SMB and its security considerations
    4. Configure the SMB protocol
    5. Define Volume Shadow Copy Service
  30. Implement Storage Spaces and Storage Spaces Direct
    1. Define the Storage Spaces architecture and its components
    2. List the functionality, benefits, and use cases of Storage Spaces
    3. Implement Storage Spaces
    4. List the functionality, components, benefits, and use cases of Storage Spaces Direct
    5. Implement Storage Spaces Direct
  31. Implement Windows Server Data Deduplication
    1. Define the architecture, components, and functionality of Data Deduplication
    2. Define the use cases and interoperability of Data Deduplication
    3. Implement Data Deduplication
    4. Manage and maintain Data Deduplication
  32. Implement Windows Server iSCSI
    1. List the functionality, components, and use cases of iSCSI
    2. List considerations for implementing iSCSI
    3. Implement iSCSI
    4. Configure high availability for iSCSI
  33. Implement Windows Server Storage Replica
    1. List the functionality and components of Storage Replica
    2. Examine the prerequisites for implementing Storage Replica
    3. Implement Storage Replica using Windows Admin Center
    4. Implement Storage Replica using Windows PowerShell
  34. Implement a hybrid file server infrastructure
    1. Describe Azure File services
    2. Configure Azure Files
    3. Configure connectivity to Azure Files
    4. Describe Azure File Sync
    5. Implement Azure File Sync
    6. Deploy Azure File Sync
    7. Manage cloud tiering
    8. Migrate from DFSR to Azure File Sync

Class Materials

Each student receives a comprehensive set of materials, including course notes and all class examples.

Class Prerequisites

Experience in the following is required for this Windows Server class:

  • Experience managing Windows Server and on-premises Windows Server workloads, including AD DS, DNS, DFS, Hyper-V, and File and Storage Services.
  • Experience with common Windows Server management tools.
  • Basic knowledge of Microsoft compute, storage, networking, and virtualization technologies.
  • Experience with core networking technologies, including IP addressing, name resolution, and DHCP.
  • Experience with Microsoft Hyper-V and basic server virtualization concepts.
  • Basic experience implementing and managing IaaS services in Microsoft Azure.
  • Basic knowledge of Microsoft Entra ID, formerly Azure Active Directory.
  • Hands-on experience with Windows client operating systems such as Windows 10 or Windows 11.
  • Basic experience with Windows PowerShell.

Have questions about this course?

We can help with curriculum details, delivery options, pricing, or anything else. Reach out and we’ll point you in the right direction.

Talk to a Learning Consultant