About Education

This course teaches IT Professionals to manage Windows Server workloads and services using on-premises, hybrid, and cloud technologies. The course teaches IT Professionals to implement and manage on-premises and hybrid solutions such as identity, management, compute, networking, and storage in a Windows Server hybrid environment.

Prerequisites

• Important: This course requires Multi-Factor Authentication (MFA). Please read this link and download the MFA app before attending the training.
• Experience managing Windows Server operating system and Windows Server workloads (including AD DS, DNS, DFS, Hyper-V, File and Storage Services) in on-premises scenarios.
• Experience with common Windows Server administration tools.
• Basic knowledge of core Microsoft computing, storage, networking and virtualization technologies.
• Experience and understanding of basic networking technologies such as IP addressing, name resolution, and Dynamic Host Configuration Protocol (DHCP).
• Experience working with Microsoft Hyper-V and knowledge of basic server virtualization concepts.
• Basic experience in implementing and managing IaaS services in Microsoft Azure.
• Basic knowledge about Azure Active Directory.
• Practical experience working with Windows client operating systems such as Windows 10 or Windows 11.
• Basic working experience with Windows PowerShell.

Duration of Training

• Training with instructor: 5 days (with applied laboratory studies)
• Training with a virtual instructor: 5 days (with web-based lessons and hands-on laboratory studies)

Target Group

This five-day course is designed for Windows Server Hybrid Administrators who have experience working with Windows Server and want to expand the capabilities of their on-premises environments by combining on-premises and hybrid technologies. Windows Server Hybrid Administrators implement and manage on-premises and hybrid solutions such as identity, management, compute, networking, and storage in a Windows Server hybrid environment.

Educational Content

Module 1: Introduction to AD DS

• Active Directory Domain Services (AD DS) basics in Windows Server 2019
• Forests, domains, sites, domain controllers, organizational units (OUs), users, and groups
• Learning Outcomes:
  • Defining AD DS.
  • Identifying users, groups, and computers.
  • Define and designate AD DS forests and domains.
  • Defining OUs.
  • Managing objects and their properties in AD DS.

Module 2: Managing AD DS Domain Controllers and FSMO Roles

• Deployment of domain controllers, backup and restore, and schema management
• Design considerations for the number, roles, and location of domain controllers
• Learning Outcomes:
  • Deploy AD DS domain controllers.
  • Protecting AD DS domain controllers.
  • Explain the AD DS global catalog role and deployment considerations.
  • Explain AD DS operational key roles, deployment considerations, and administrative tasks.
  • Describe the AD DS schema and administrative tasks.

Module 3: Implementing Group Policy Objects

• Implement Group Policy Objects (GPOs) in Active Directory Domain Services (AD DS) in Windows Server 2019
• Learning Outcomes:
  • Identifying GPOs.
  • Defining GPO scope and inheritance.
  • Identifying domain-based GPOs.
  • Creating and configuring GPOs.
  • Explaining GPO storage.
  • Explain administrative templates and Central Repository.

Module 4: Managing Advanced Features of AD DS

• Creating trust relationships, implementing Enhanced Security Administration Environment (ESAE) forests, monitoring and troubleshooting AD DS replication, and creating custom AD DS partitions
• Learning Outcomes:
  • To determine the purpose, types and process of creating trust relationships.
  • To explain the purpose and process of implementing ESAE forests.
  • Monitor and troubleshoot AD DS replication.
  • Determine the purpose and process of creating custom AD DS partitions.

Module 5: Implementing Hybrid Identity with Windows Server

• Configure an Azure environment to support Windows IaaS workloads that require Active Directory
• Integrating on-premises Active Directory Domain Services (AD DS) environment into Azure
• Learning Outcomes:
  • Choosing a Microsoft Entra integration model.
  • Planning for Microsoft Entra integration.
  • Prepare on-premises AD DS for directory synchronization.
  • Install and configure directory sync using Microsoft Entra Connect.
  • Implementing seamless Single Sign-On (SSO).
  • Enabling Microsoft Entra sign-in for an Azure Windows virtual machine (VM).
  • Defining Microsoft Entra Domain Services.
  • Implementing and configuring Microsoft Entra Domain Services.
  • Administering Windows Server 2019 on a Microsoft Entra Domain Services instance.
  • Embedding a Windows Server VM into a managed domain.

Module 6: Deploy and manage Azure IaaS Active Directory domain controllers in Azure

• Extend an existing Active Directory environment to Azure by placing domain controllers configured as IaaS VMs in a specially configured Azure virtual network (VNet) subnet
• Learning Outcomes:
  • Choosing an option to implement directory and identity services using Active Directory Domain Services (AD DS) in Azure.
  • Deploy and configure AD DS domain controllers on Azure VMs.
  • Installing a replica AD DS domain controller in an Azure VM.
  • Installing a new AD DS forest in an Azure VNet.

Module 7: Windows Server secure management

• Principle of least privilege, knowing when to use privileged access workstations, and the ability to identify built-in privileged accounts
• Learning Outcomes:
  • Explain least privilege management models.
  • Apply authorized privileges.
  • Defining privileged access workstations.
  • Identifying hop servers.

Module 8: Defining Windows Server administration tools

• Selecting and using the most appropriate Windows Server administration tool for a given situation
• Learning Outcomes:
  • Identifying Windows Admin Center.
  • Describe the use of Remote Server Administration Tools (RSAT) to manage servers.
  • Defining Server Manager.
  • Describing the use of Windows PowerShell to manage servers.
  • Explain how to use Windows PowerShell to remotely administer a server.

Module 9: Perform post-installation configuration of Windows Server

• Perform post-installation configuration of Windows Server using various methods and tools
• Learning Outcomes:
  • Describe post-installation configuration and identify available post-installation configuration tools.
  • Using Sconfig to configure Windows Server.
  • Explain how to use Desired State Configuration (DSC) to define and configure Windows Server

Module 10: Simplifying Windows Server Administration with Just Enough Administration (JEA)

• Purpose: To facilitate management and limit unauthorized access in Windows Server environments using JEA.
• Contents:
  • JEA concept
  • Role group capabilities and session configurations
  • Create and connect a JEA endpoint
• Learning Outcomes:
  • Explain what JEA is and how it works.
  • Defining role capabilities for JEA endpoints.
  • Creating a session configuration file to register a JEA endpoint.
  • Explaining how JEA endpoints limit access to the PowerShell session.
  • Connecting to a JEA endpoint.

Module 11: Remotely Administer and Manage Windows Server IaaS Virtual Machines

• Purpose: To use appropriate tools and techniques to remotely manage Windows IaaS VMs.
• Contents:
  • Choosing appropriate remote management tools.
  • Secure management connections to Windows Azure IaaS VMs with Azure Bastion.
  • Configure JIT VM access.
• Learning Outcomes:
  • Choosing the appropriate remote management tool.
  • Managing Windows Virtual Machines with Azure Bastion.
  • Create an Azure Bastion host.
  • Configuring just-in-time management.

Module 12: Managing Hybrid Workloads with Azure Arc

• Purpose: Define Azure Arc, implement Azure Arc with on-premises server instances, deploy Azure policies with Azure Arc, and use role-based access control (RBAC) to limit access to Log Analytics data.
• Contents:
  • Defining Azure Arc.
  • Adding on-premises Windows Server instances to Azure Arc.
  • Connecting hybrid machines to Azure.
  • Managing devices using Azure Arc.
  • Limiting access using RBAC.
• Learning Outcomes:
  • Defining Azure Arc.
  • Adding Windows Server instances to Azure Arc.
  • Connecting hybrid machines to Azure.
  • Managing Windows Server instances using Azure Arc.
  • Limiting access with RBAC.

Module 13: Configuring and Managing Hyper-V

• Purpose: To learn virtualization and Microsoft Hyper-V role with Windows Server. Learn best practices for provisioning Hyper-V hosts, additionally implementing Hyper-V networking features and nested virtualization.
• Contents:
  • Functionality and features of Hyper-V in Windows Server.
  • Installing Hyper-V on Windows Server.
  • Defining options for managing Hyper-V virtual machines (VMs) in Windows Server.
  • Describe Hyper-V networking features and functionality in Windows Server.
  • Creating virtual switches (vSwitches) to be used with Hyper-V.
  • Defining the use of nested virtualization in Hyper-V.
• Learning Outcomes:
  • Defining Hyper-V.
  • Configuring Hyper-V hosts according to best practices.
  • Configuring the Hyper-V network.
  • Defining nested virtualization.

A Similar Structure for the Remaining Modules:

• Module 14-33: Hyper-V virtual machines, security, containers, Kubernetes, Azure VMs, storage solutions (Storage Spaces, Storage Spaces Direct, Data Deduplication, iSCSI, Storage Replica), hybrid file servers etc. Detailed modules covering topics.

Each module will include the following elements:

• Theoretical Knowledge: Basic concepts, technologies and architecture related to the subject.
• Applied Studies: Practical exercises to reinforce the subject in a laboratory environment.
• Scenarios: Examples based on real-world scenarios.
• Learning Outcomes: Skills to be gained at the end of the module.
• Knowledge Check: Quizzes or exams to measure how well students have learned information.
• Summary: Review of the main points of the module.

What You Will Gain at the End of Training

• To ensure that participants can effectively manage hybrid environments with Windows Server and Azure technologies.
• Teaching participants current best practices and trends.
• To develop participants' troubleshooting and optimization skills.
• Helping participants prepare for Microsoft certification exams.