This course teaches IT professionals how to manage core Windows Server workloads and services using on-premises, hybrid, and cloud technologies. This course teaches IT professionals how to implement and manage hybrid and on-premises solutions, such as identity, management, compute, networking, and storage in a hybrid Windows Server environment. AZ-800: Administering Windows Server Hybrid Core Infrastructure
This four-day course is intended for hybrid Windows Server administrators who have experience with Windows Server and want to extend the capabilities of their on-premises environments by combining on-premises and hybrid technologies. Windows Server Hybrid administrators deploy and manage hybrid and on-premises solutions, such as identity, management, compute, networking, and storage in a Windows Server hybrid environment. Hardening con Docker
Module 1: Identity services in Windows Server
This module introduces identity services and describes Active Directory Domain Services (AD DS) in a Windows Server environment. The module describes how to deploy domain controllers in AD DS, as well as Azure Active Directory (AD) and the benefits of integrating Azure AD with AD DS. The module also covers Group Policy basics and how to configure group policy objects (GPOs) in a domain environment.
lesson
Introduction to AD DS
Manage AD DS domain controllers and FSMO roles
Implement Group Policy Objects
Manage advanced features of AD DS
Lab: Implementing identity services and Group Policy
Deploying a new domain controller on Server Core
Configuring Group Policy
After completing this module, students will be able to:
Describes AD DS in a Windows Server environment.
Deploy domain controllers in AD DS.
Describes Azure AD and benefits of integrating Azure AD with AD DS.
Explain Group Policy basics and configure GPOs in a domain environment.
Module 2: Implementing identity in hybrid scenarios
This module discusses how to configure an Azure environment so that Windows IaaS workloads requiring Active Directory are supported. The module also covers integration of on-premises Active Directory Domain Services (AD DS) environment into Azure. Finally, the module explains how to extend an existing Active Directory environment into Azure by placing IaaS VMs configured as domain controllers onto a specially configured Azure virtual network subnet.
lesson
Implement hybrid identity with Windows Server
Deploy and manage Azure IaaS Active Directory domain controllers in Azure
Lab: Implementing integration between AD DS and Azure AD
Preparing Azure AD for AD DS integration
Preparing on-premises AD DS for Azure AD integration
Downloading, installing, and configuring Azure AD Connect
Verifying integration between AD DS and Azure AD
Implementing Azure AD integration features in AD DS
After completing this module, students will be able to:
Integrate on-premises Active Directory Domain Services (AD DS) environment into Azure.
Install and configure directory synchronization using Azure AD Connect.
Deploy and configure Azure AD DS.
Implement Seamless Single Sign-on (SSO).
Deploy and configure Azure AD DS.
Install a new AD DS forest on an Azure VNet.
Module 3: Windows Server administration
This module describes how to implement the principle of least privilege through Privileged Access Workstation (PAW) and Just Enough Administration (JEA). The module also highlights several common Windows Server administration tools, such as Windows Admin Center, Server Manager, and PowerShell. This module also describes the post-installation configuration process and tools available to use for this process, such as sconfig and Desired State Configuration (DSC).
lesson
Perform Windows Server secure administration
Describes Windows Server administration tools
Perform post-installation configuration of Windows Server
Just Enough Administration in Windows Server
Lab: Managing Windows Server
Implementing and using remote server administration
After completing this module, students will be able to:
Explain at least privilege administrative models.
Decide when to use privileged access workstations.
Select the most appropriate Windows Server administration tool for a given situation.
Apply different methods to perform post-installation configuration of Windows Server.
Constrain privileged administrative operations by using Just Enough Administration (JEA).
Module 4: Facilitating hybrid management
This module covers tools that facilitate managing Windows IaaS VMs remotely. The module also covers how to use Azure Arc with on-premises server instances, how to deploy Azure policies with Azure Arc, and how to use role-based access control (RBAC) to restrict access to Log Analytics data.
lesson
Administer and manage Windows Server IaaS virtual machines remotely
Manage hybrid workloads with Azure Arc
Lab: Using Windows Admin Center in hybrid scenarios
Provisioning Azure VMs running Windows Server
Implementing hybrid connectivity by using the Azure Network Adapter
Deploying Windows Admin Center gateway in Azure
Verifying functionality of the Windows Admin Center gateway in Azure
After completing this module, students will be able to:
Select appropriate tools and techniques to manage Windows IaaS VMs remotely.
Explain how to onboard on-premises Windows Server instances in Azure Arc.
Connect hybrid machines to Azure from the Azure portal.
Use Azure Arc to manage devices.
Restrict access using RBAC.