AZ-800T00 - Administering Windows Server Hybrid Core Infrastructure

Course Length: 4 days

Delivery Methods: Available as private class only

Course Overview

This course teaches IT Professionals how to manage core Windows Server workloads and services using on-premises, hybrid, and cloud technologies. The course teaches IT Professionals how to implement and manage on-premises and hybrid solutions such as identity, management, compute, networking, and storage in a Windows Server hybrid environment.

This course is intended for Windows Server Hybrid Administrators who have experience working with Windows Server and want to extend the capabilities of their on-premises environments by combining on-premises and hybrid technologies. Windows Server Hybrid Administrators implement and manage on-premises and hybrid solutions such as identity, management, compute, networking, and storage in a Windows Server hybrid environment.

Course Benefits

Use administrative techniques and tools in Windows Server.
Identify tools used to implement hybrid solutions, including Windows Admin Center and PowerShell.
Implement identity services in Windows Server.
Implement identity in hybrid scenarios, including Azure AD DS on Azure IaaS and managed AD DS.
Integrate Azure AD DS with Azure AD.
Manage network infrastructure services.
Deploy Azure VMs running Windows Server, and configure networking and storage.
Administer and manage Windows Server IaaS Virtual Machine remotely.
Manage and maintain Azure VMs running Windows Server.
Configure file servers and storage.
Implement File Services in hybrid scenarios, using Azure Files and Azure File Sync.

Microsoft Certified Partner

Webucator is a Microsoft Certified Partner for Learning Solutions (CPLS). This class uses official Microsoft courseware and will be delivered by a Microsoft Certified Trainer (MCT).

Course Outline

Identity services in Windows Server
This lesson introduces identity services and describes Active Directory Domain Services (AD DS) in a Windows Server environment. The lesson describes how to deploy domain controllers in AD DS, as well as Azure Active Directory (AD) and the benefits of integrating Azure AD with AD DS. The lesson also covers Group Policy basics and how to configure group policy objects (GPOs) in a domain environment.
1. Introduction to AD DS
2. Manage AD DS domain controllers and FSMO roles
3. Implement Group Policy Objects
4. Manage advanced features of AD DS
5. On completing this lesson, you will have learned to:
  - Describe AD DS in a Windows Server environment.
  - Deploy domain controllers in AD DS.
  - Describe Azure AD and benefits of integrating Azure AD with AD DS.
  - Explain Group Policy basics and configure GPOs in a domain environment.
Implementing identity in hybrid scenarios
This lesson discusses how to configure an Azure environment so that Windows IaaS workloads requiring Active Directory are supported. The lesson also covers integration of on-premises Active Directory Domain Services (AD DS) environment into Azure. Finally, the lesson explains how to extend an existing Active Directory environment into Azure by placing IaaS VMs configured as domain controllers onto a specially configured Azure virtual network subnet.
1. Implement hybrid identity with Windows Server
2. Deploy and manage Azure IaaS Active Directory domain controllers in Azure
3. On completing this lesson, you will have learned to:
  - Integrate on-premises Active Directory Domain Services (AD DS) environment into Azure.
  - Install and configure directory synchronization using Azure AD Connect.
  - Implement and configure Azure AD DS.
  - Implement Seamless Single Sign-on (SSO).
  - Implement and configure Azure AD DS.
  - Install a new AD DS forest on an Azure VNet.
Windows Server administration
This lesson describes how to implement the principle of least privilege through Privileged Access Workstation (PAW) and Just Enough Administration (JEA). The lesson also highlights several common Windows Server administration tools, such as Windows Admin Center, Server Manager, and PowerShell. This lesson also describes the post-installation configuration process and tools available to use for this process, such as sconfig and Desired State Configuration (DSC).
1. Perform Windows Server secure administration
2. Describe Windows Server administration tools
3. Perform post-installation configuration of Windows Server
4. Just Enough Administration in Windows Server
5. On completing this lesson, you will have learned to:
  - Explain least privilege administrative models.
  - Decide when to use privileged access workstations.
  - Select the most appropriate Windows Server administration tool for a given situation.
  - Apply different methods to perform post-installation configuration of Windows Server.
  - Constrain privileged administrative operations by using Just Enough Administration (JEA).
Facilitating hybrid management
This lesson covers tools that facilitate managing Windows IaaS VMs remotely. The lesson also covers how to use Azure Arc with on-premises server instances, how to deploy Azure policies with Azure Arc, and how to use role-based access control (RBAC) to restrict access to Log Analytics data.
1. Administer and manage Windows Server IaaS virtual machines remotely
2. Manage hybrid workloads with Azure Arc
3. On completing this lesson, you will have learned to:
  - Select appropriate tools and techniques to manage Windows IaaS VMs remotely.
  - Explain how to onboard on-premises Windows Server instances in Azure Arc.
  - Connect hybrid machines to Azure from the Azure portal.
  - Use Azure Arc to manage devices.
  - Restrict access using RBAC.
Hyper-V virtualization in Windows Server
This lesson describes how to implement and configure Hyper-V VMs and containers. The lesson covers key features of Hyper-V in Windows Server, describes VM settings, and how to configure VMs in Hyper-V. The lesson also covers security technologies used with virtualization, such as shielded VMs, Host Guardian Service, admin-trusted and TPM-trusted attestation, and Key Protection Service (KPS). Finally, this lesson covers how to run containers and container workloads, and how to orchestrate container workloads on Windows Server using Kubernetes.
1. Configure and manage Hyper-V
2. Configure and manage Hyper-V virtual machines
3. Secure Hyper-V workloads
4. Run containers on Windows Server
5. Orchestrate containers on Windows Server using Kubernetes
6. On completing this lesson, you will have learned to:
  - Install and configure Hyper-V on Windows Server.
  - Configure and manage Hyper-V virtual machines.
  - Use Host Guardian Service to protect virtual machines.
  - Create and deploy shielded virtual machines.
  - Configure and manage container workloads.
  - Orchestrate container workloads using a Kubernetes cluster.
Deploying and configuring Azure VMs
This lesson describes Azure compute and storage in relation to Azure VMs, and how to deploy Azure VMs by using the Azure portal, Azure CLI, or templates. The lesson also explains how to create new VMs from generalized images and use Azure Image Builder templates to create and manage images in Azure. Finally, this lesson describes how to deploy Desired State Configuration (DSC) extensions, implement those extensions to remediate noncompliant servers, and use custom script extensions.
1. Plan and deploy Windows Server IaaS virtual machines
2. Customize Windows Server IaaS virtual machine images
3. Automate the configuration of Windows Server IaaS virtual machines
4. On completing this lesson, you will have learned to:
  - Create a VM from the Azure portal and from Azure Cloud Shell.
  - Deploy Azure VMs by using templates.
  - Automate the configuration of Windows Server IaaS VMs.
  - Detect and remediate noncompliant servers.
  - Create new VMs from generalized images.
  - Use Azure Image Builder templates to create and manage images in Azure.
Network infrastructure services in Windows Server
This lesson describes how to implement core network infrastructure services in Windows Server, such as DHCP and DNS. This lesson also covers how to implement IP address management and how to use Remote Access Services.
1. Deploy and manage DHCP
2. Implement Windows Server DNS
3. Implement IP address management
4. Implement remote access
5. On completing this lesson, you will have learned to:
  - Implement automatic IP configuration with DHCP in Windows Server.
  - Deploy and configure name resolution with Windows Server DNS.
  - Implement IPAM to manage an organization's DHCP and DNS servers, and IP address space.
  - Select, use, and manage remote access components.
  - Implement Web Application Proxy (WAP) as a reverse proxy for internal web applications.
Implementing hybrid networking infrastructure
This lesson describes how to connect an on-premises environment to Azure and how to configure DNS for Windows Server IaaS virtual machines. The lesson covers how to choose the appropriate DNS solution for your organization's need and run a DNS server in a Windows Server Azure IaaS VM. Finally, this lesson covers how to manage Microsoft Azure virtual networks and IP address configuration for Windows Server infrastructure as a service (IaaS) virtual machines.
1. Implement hybrid network infrastructure
2. Implement DNS for Windows Server IaaS VMs
3. Implement Windows Server IaaS VM IP addressing and routing
4. On completing this lesson, you will have learned to:
  - Implement an Azure virtual private network (VPN).
  - Configure DNS for Windows Server IaaS VMs.
  - Run a DNS server in a Windows Server Azure IaaS VM.
  - Create a route-based VPN gateway using the Azure portal.
  - Implement Azure ExpressRoute.
  - Implement an Azure wide area network (WAN).
  - Manage Microsoft Azure virtual networks (VNets).
  - Manage IP address configuration for Windows Server IaaS virtual machines (VMs).
File servers and storage management in Windows Server
This lesson covers the core functionality and use cases of file server and storage management technologies in Windows Server. The lesson discusses how to configure and manage the Windows File Server role, and how to use Storage Spaces and Storage Spaces Direct. This lesson also covers replication of volumes between servers or clusters using Storage Replica.
1. Manage Windows Server file servers
2. Implement Storage Spaces and Storage Spaces Direct
3. Implement Windows Server Data Deduplication
4. Implement Windows Server iSCSI
5. Implement Windows Server Storage Replica
6. On completing this lesson, you will have learned to:
  - Configure and manage the Windows Server File Server role.
  - Protect data from drive failures using Storage Spaces.
  - Increase scalability and performance of storage management using Storage Spaces Direct.
  - Optimize disk utilization using Data DeDuplication.
  - Configure high availability for iSCSI.
  - Enable replication of volumes between clusters using Storage Replica.
  - Use Storage Replica to provide resiliency for data hosted on Windows Servers volumes.
Implementing a hybrid file server infrastructure
This lesson introduces Azure file services and how to configure connectivity to Azure Files. The lesson also covers how to deploy and implement Azure File Sync to cache Azure file shares on an on-premises Windows Server file server. This lesson also describes how to manage cloud tiering and how to migrate from DFSR to Azure File Sync.
1. Overview of Azure file services
2. Implementing Azure File Sync
3. On completing this lesson, you will have learned to:
  - Configure Azure file services.
  - Configure connectivity to Azure file services.
  - Implement Azure File Sync.
  - Deploy Azure File Sync
  - Manage cloud tiering.
  - Migrate from DFSR to Azure File Sync.

Course Labs

Implementing identity services and Group Policy
Implementing integration between AD DS and Azure AD
Managing Windows Server
Using Windows Admin Center in hybrid scenarios
Implementing and configuring virtualization in Windows Server
Deploying and configuring Windows Server on Azure VMs
Implementing and configuring network infrastructure services in Windows Server
Implementing Windows Server IaaS VM networking
Implementing storage solutions in Windows Server
Implementing Azure File Sync

Class Materials

Each student will receive a comprehensive set of materials, including course notes and all the class examples.

Class Prerequisites

Experience in the following is required for this Windows Server class:

Experience with managing Windows Server operating system and Windows Server workloads in on-premises scenarios, including AD DS, DNS, DFS, Hyper-V, and File and Storage Services.
Experience with common Windows Server management tools (implied in the first prerequisite).
Basic knowledge of core Microsoft compute, storage, networking, and virtualization technologies (implied in the first prerequisite).
Experience and an understanding of core networking technologies such as IP addressing, name resolution, and Dynamic Host Configuration Protocol (DHCP).
Experience working with and an understanding of Microsoft Hyper-V and basic server virtualization concepts.
Basic experience with implementing and managing IaaS services in Microsoft Azure.
Basic knowledge of Azure Active Directory.
Experience working hands-on with Windows client operating systems such as Windows 10 or Windows 11.
Basic experience with Windows PowerShell.

Request a Private Class

Private Class for your Team
Online or On-location
Customizable
Expert Instructors

Request Pricing