AZ-801T00 - Configuring Windows Server Hybrid Advanced Services

Course Length: 4 days

Delivery Methods: Available as private class only

Course Overview

This course teaches IT Professionals to configure advanced Windows Server services using on-premises, hybrid, and cloud technologies. The course teaches IT Professionals how to leverage the hybrid capabilities of Azure, how to migrate virtual and physical server workloads to Azure IaaS, and how to secure Azure VMs running Windows Server. The course also teaches IT Professionals how to perform tasks related to high availability, troubleshooting, and disaster recovery. The course highlights administrative tools and technologies including Windows Admin Center, PowerShell, Azure Arc, Azure Automation Update Management, Microsoft Defender for Identity, Azure Security Center, Azure Migrate, and Azure Monitor.

This course is intended for Windows Server Hybrid Administrators who have experience working with Windows Server and want to extend the capabilities of their on-premises environments by combining on-premises and hybrid technologies. Windows Server Hybrid Administrators who already implement and manage on-premises core technologies want to secure and protect their environments, migrate virtual and physical workloads to Azure IaaS, enable a highly available, fully redundant environment, and perform monitoring and troubleshooting.

Course Benefits

Harden the security configuration of the Windows Server operating system environment.
Enhance hybrid security using Azure Security Center, Azure Sentinel, and Windows Update Management.
Apply security features to protect critical resources.
Implement high availability and disaster recovery solutions.
Implement recovery services in hybrid scenarios.
Plan and implement hybrid and cloud-only migration, backup, and recovery scenarios.
Perform upgrades and migration related to AD DS, and storage.
Manage and monitor hybrid scenarios using WAC, Azure Arc, Azure Automation and Azure Monitor.
Implement service monitoring and performance monitoring, and apply troubleshooting.

Microsoft Certified Partner

Webucator is a Microsoft Certified Partner for Learning Solutions (CPLS). This class uses official Microsoft courseware and will be delivered by a Microsoft Certified Trainer (MCT).

Course Outline

Windows Server security
This lesson discusses how to protect an Active Directory environment by securing user accounts to least privilege and placing them in the Protected Users group. The lesson covers how to limit authentication scope and remediate potentially insecure accounts. The lesson also describes how to harden the security configuration of a Windows Server operating system environment. In addition, the lesson discusses the use of Windows Server Update Services to deploy operating system updates to computers on the network. Finally, the lesson covers how to secure Windows Server DNS to help protect the network name resolution infrastructure.
1. Secure Windows Sever user accounts
2. Hardening Windows Server
3. Windows Server Update Management
4. Secure Windows Server DNS
5. On completing this lesson, you will have learned to:
  - Diagnose and remediate potential security vulnerabilities in Windows Server resources.
  - Harden the security configuration of the Windows Server operating system environment.
  - Deploy operating system updates to computers on a network by using Windows Server Update Services.
  - Secure Windows Server DNS to help protect the network name resolution infrastructure.
  - Implement DNS policies.
Implementing security solutions in hybrid scenarios
This lesson describes how to secure on-premises Windows Server resources and Azure IaaS workloads. The lesson covers how to improve the network security for Windows Server infrastructure as a service (IaaS) VMs and how to diagnose network security issues with those VMs. In addition, the lesson introduces Azure Security Center and explains how to onboard Windows Server computers to Security Center. The lesson also describes how to enable Azure Update Management, deploy updates, review an update assessment, and manage updates for Azure VMs. The lesson explains how Adaptive application controls and BitLocker disk encryption are used to protect Windows Server IaaS VMs. Finally, the lesson explains how to monitor Windows Server Azure IaaS VMs for changes in files and the registry, as well as monitoring modifications made to application software.
1. Implement Windows Server IaaS VM network security.
2. Audit the security of Windows Server IaaS Virtual Machines
3. Manage Azure updates
4. Create and implement application allowlists with adaptive application control
5. Configure BitLocker disk encryption for Windows IaaS Virtual Machines
6. Implement change tracking and file integrity monitoring for Windows Server IaaS VMs
7. On completing this lesson, you will have learned to:
  - Diagnose network security issues in Windows Server IaaS virtual machines.
  - Onboard Windows Server computers to Azure Security Center.
  - Deploy and manage updates for Azure VMs by enabling Azure Automation Update Management.
  - Implement Adaptive application controls to protect Windows Server IaaS VMs.
  - Configure Azure Disk Encryption for Windows IaaS VMs.
  - Back up and recover encrypted data.
  - Monitor Windows Server Azure IaaS VMs for changes in files and the registry.
Implementing high availability
This lesson describes technologies and options to create a highly available Windows Server environment. The lesson introduces Clustered Shared Volumes for shared storage access across multiple cluster nodes. The lesson also highlights failover clustering, stretch clusters, and cluster sets for implementing high availability of Windows Server workloads. The lesson then discusses high availability provisions for Hyper-V and Windows Server VMs, such as network load balancing, live migration, and storage migration. The lesson also covers high availability options for shares hosted on Windows Server file servers. Finally, the lesson describes how to implement scaling for virtual machine scale sets and load balanced VMs, and how to implement Azure Site Recovery.
1. Introduction to Cluster Shared Volumes.
2. Implement Windows Server failover clustering.
3. Implement high availability of Windows Server VMs.
4. Implement Windows Server File Server high availability.
5. Implement scale and high availability with Windows Server VMs.
6. On completing this lesson, you will have learned to:
  - Implement highly available storage volumes by using Clustered Share Volumes.
  - Implement highly available Windows Server workloads using failover clustering.
  - Describe Hyper-V VMs load balancing.
  - Implement Hyper-V VMs live migration and Hyper-V VMs storage migration.
  - Describe Windows Server File Server high availability options.
  - Implement scaling for virtual machine scale sets and load-balanced VMs.
  - Implement Azure Site Recovery.
Disaster recovery in Windows Server
This lesson introduces Hyper-V Replica as a business continuity and disaster recovery solution for a virtual environment. The lesson discusses Hyper-V Replica scenarios and use cases, and prerequisites to use it. The lesson also discusses how to implement Azure Site Recovery in on-premises scenarios to recover from disasters.
1. Implement Hyper-V Replica
2. Protect your on-premises infrastructure from disasters with Azure Site Recovery
3. On completing this lesson, you will have learned to:
  - Describe Hyper-V Replica, pre-requisites for its use, and its high-level architecture and components
  - Describe Hyper-V Replica use cases and security considerations.
  - Configure Hyper-V Replica settings, health monitoring, and failover options.
  - Describe extended replication.
  - Replicate, failover, and failback virtual machines and physical servers with Azure Site Recovery.
Implementing recovery services in hybrid scenarios
This lesson covers tools and technologies for implementing disaster recovery in hybrid scenarios, whereas the previous lesson focuses on BCDR solutions for on-premises scenarios. The lesson begins with Azure Backup as a service to protect files and folders before highlighting how to implement Recovery Vaults and Azure Backup Policies. The lesson describes how to recover Windows IaaS virtual machines, perform backup and restore of on-premises workloads, and manage Azure VM backups. The lesson also covers how to provide disaster recovery for Azure infrastructure by managing and orchestrating replication, failover, and failback of Azure virtual machines with Azure Site Recovery.
1. Implement hybrid backup and recovery with Windows Server IaaS
2. Protect your Azure infrastructure with Azure Site Recovery
3. Protect your virtual machines by using Azure Backup
4. On completing this lesson, you will have learned to:
  - Recover Windows Server IaaS virtual machines by using Azure Backup.
  - Use Azure Backup to help protect the data for on-premises servers and virtualized workloads.
  - Implement Recovery Vaults and Azure Backup policies.
  - Protect Azure VMs with Azure Site Recovery.
  - Run a disaster recovery drill to validate protection.
  - Failover and failback Azure virtual machines.
Upgrade and migrate in Windows Server
This lesson discusses approaches to migrating and updating Windows Server workloads running in earlier versions of Windows Server. The lesson covers the necessary strategies needed to move domain controllers to Windows Server 2022 and describes how the Active Directory Migration Tool can consolidate domains within a forest or migrate domains to a new AD DS forest. The lesson also discusses the use of Storage Migration Service to migrate files and files shares from existing file servers to new servers running Windows Server 2022. Finally, the lesson covers how to install and use the Windows Server Migration Tools cmdlets to migrate commonly used server roles from earlier versions of Windows Server.
1. Active Directory Domain Services migration
2. Migrate file server workloads using Storage Migration Service
3. Migrate Windows Server roles
4. On completing this lesson, you will have learned to:
  - Compare upgrading an AD DS forest and migrating to a new AD DS forest.
  - Describe the Active Directory Migration Tool (ADMT).
  - Identify the requirements and considerations for using Storage Migration Service.
  - Describe how to migrate a server with storage migration.
  - Use the Windows Server Migration Tools to migrate specific Windows Server roles.
Implementing migration in hybrid scenarios
This lesson discusses approaches to migrating workloads running in Windows Server to an infrastructure as a service (IaaS) virtual machine. The lesson introduces using Azure Migrate to assess and migrate on-premises Windows Server instances to Microsoft Azure. The lesson also covers how migrate a workload running in Windows Server to an infrastructure as a service (IaaS) virtual machine (VM) and to Windows Server 2022 by using Windows Server migration tools or the Storage Migration Service. Finally, this lesson describes how to use the Azure Migrate App Containerization tool to containerize and migrate ASP.NET applications to Azure App Service.
1. Migrate on-premises Windows Server instances to Azure IaaS virtual machines
2. Upgrade and migrate Windows Server IaaS virtual machines
3. Containerize and migrate ASP.NET applications to Azure App Service
4. On completing this lesson, you will have learned to:
  - Plan a migration strategy and choose the appropriate migration tools.
  - Perform server assessment and discovery using Azure Migrate.
  - Migrate Windows Server workloads to Azure VM workloads using Azure Migrate.
  - Explain how to migrate workloads using Windows Server Migration tools.
  - Migrate file servers by using the Storage Migration Service.
  - Discover and containerize ASP.NET applications running on Windows.
  - Migrate a containerized application to Azure App Service.
Server and performance monitoring in Windows Server
This lesson introduces a range of tools to monitor the operating system and applications on a Windows Server computer as well as describing how to configure a system to optimize efficiency and to troubleshoot problems. The lesson covers how Event Viewer provides a convenient and accessible location for observing events that occur, and how to interpret the data in the event log. The lesson also covers how to audit and diagnose a Windows Server environment for regulatory compliance, user activity, and troubleshooting. Finally, the lesson explains how to troubleshoot AD DS service failures or degraded performance, including recovery of deleted objects and the AD DS database, and how to troubleshoot hybrid authentication issues.
1. Monitor Windows Server performance
2. Manage and monitor Windows Server event logs
3. Implement Windows Server auditing and diagnostics
4. Troubleshoot Active Directory
5. On completing this lesson, you will have learned to:
  - Explain the fundamentals of server performance tuning.
  - Use built-in tools in Windows Server to monitor server performance.
  - Use Server Manager and Windows Admin Center to review event logs.
  - Implement custom views.
  - Configure an event subscription.
  - Audit Windows Server events.
  - Configure Windows Server to record diagnostic information.
  - Recover the AD DS database and objects in AD DS.
  - Troubleshoot AD DS replication.
  - Troubleshoot hybrid authentication issues.
Implementing operational monitoring in hybrid scenarios
This lesson covers using monitoring and troubleshooting tools, processes, and best practices to streamline app performance and availability of Windows Server IaaS VMs and hybrid instances. The lesson describes how to implement Azure Monitor for IaaS VMs in Azure, implement Azure Monitor in on-premises environments, and use dependency maps. The lesson then explains how to enable diagnostics to get data about a VM, view VM metrics in Azure Metrics Explorer, and create a metric alert to monitor VM performance. The lesson then covers how to monitor VM performance by using Azure Monitor VM Insights. The lesson then describes various aspects of troubleshooting on premises and hybrid network connectivity, including how to diagnose common issues with DHCP, name resolution, IP configuration, and routing. Finally, the lesson examines how to troubleshoot configuration issues that impact connectivity to Azure-hosted Windows Server virtual machines (VMs), as well as approaches to resolve issues with VM startup, extensions, performance, storage, and encryption.
1. Monitor Windows Server IaaS Virtual Machines and hybrid instances
2. Monitor the health of your Azure virtual machines by using Azure Metrics Explorer and metric alerts
3. Monitor performance of virtual machines by using Azure Monitor VM Insights
4. Troubleshoot on-premises and hybrid networking
5. Troubleshoot Windows Server Virtual Machines in Azure
6. On completing this lesson, you will have learned to:
  - Implement Azure Monitor for IaaS VMs in Azure and in on-premises environments.
  - Implement Azure Monitor for IaaS VMs in Azure and in on-premises environments.
  - View VM metrics in Azure Metrics Explorer.
  - Use monitoring data to diagnose problems.
  - Evaluate Azure Monitor Logs and configure Azure Monitor VM Insights.
  - Configure a Log Analytics workspace.
  - Troubleshoot on-premises connectivity and hybrid network connectivity.
  - Troubleshoot AD DS service failures or degraded performance.
  - Recover deleted security objects and the AD DS database.
  - Troubleshoot hybrid authentication issues.

Course Labs

Configuring security in Windows Server
Using Azure Security Center in hybrid scenarios
Implementing failover clustering
Implementing Hyper-V Replica and Windows Server Backup
Implementing Azure-based recovery services
Migrating Windows Server workloads to IaaS VMs
Migrating on-premises VMs servers to IaaS VMs
Monitoring and troubleshooting Windows Server
Monitoring and troubleshooting of IaaS VMs running Windows Server

Class Materials

Each student will receive a comprehensive set of materials, including course notes and all the class examples.

Class Prerequisites

Experience in the following is required for this Windows Server class:

Experience with managing Windows Server operating system and Windows Server workloads in on-premises scenarios, including AD DS, DNS, DFS, Hyper-V, and File and Storage Services.
Experience with common Windows Server management tools (implied in the first prerequisite).
Basic knowledge of core Microsoft compute, storage, networking, and virtualization technologies (implied in the first prerequisite).
Experience and an understanding of core networking technologies such as IP addressing, name resolution, and Dynamic Host Configuration Protocol (DHCP).
Experience working with and an understanding of Microsoft Hyper-V and basic server virtualization concepts.
An awareness of basic security best practices.
Basic understanding of security-related technologies (firewalls, encryption, multi-factor authentication, SIEM/SOAR).
Basic knowledge of on-premises resiliency Windows Server-based compute and storage technologies (Failover Clustering, Storage Spaces).
Basic experience with implementing and managing IaaS services in Microsoft Azure.
Basic knowledge of Azure Active Directory.
Experience working hands-on with Windows client operating systems such as Windows 10 or Windows 11.
Basic experience with Windows PowerShell.

Request a Private Class

Private Class for your Team
Online or On-location
Customizable
Expert Instructors

Request Pricing