Course
Administering Windows Server Hybrid Core Infrastructure – Intensive Training («AZ800»)
This course teaches IT Professionals how to manage core Windows Server workloads and services using on-premises, hybrid, and cloud technologies.
Vendor code
AZ-800
Duration
4 days
Price
3'400.–
Course documents
Official Microsoft Courseware and Microsoft Learn
Alternative learning format available:
Administering Windows Server Hybrid Core Infrastructure – Flexible Training («AZ800V»)
Course facts
- Using administrative techniques and tools in Windows Server
- Identifying tools used to implement hybrid solutions, including Windows Admin Center and PowerShell
- Implementing identity services in Windows Server
- Implementing identity in hybrid scenarios, including Azure AD DS on Azure IaaS and managed AD DS
- Integrating Azure AD DS with Azure AD
- Managing network infrastructure services
- Deploying Azure VMs running Windows Server, and configure networking and storage
- Administering and managing Windows Server IaaS Virtual Machine remotely
- Managing and maintaining Azure VMs running Windows Server
- Configuring file servers and storage
- Implementing File Services in hybrid scenarios, using Azure Files and Azure File Sync
The course teaches IT Professionals how to implement and manage on-premises and hybrid solutions such as identity, management, compute, networking, and storage in a Windows Server hybrid environment.
Module 1: Identity services in Windows Server
This module introduces identity services and describes Active Directory Domain Services (AD DS) in a Windows Server environment. The module describes how to deploy domain controllers in AD DS, as well as Azure Active Directory (AD) and the benefits of integrating Azure AD with AD DS. The module also covers Group Policy basics and how to configure group policy objects (GPOs) in a domain environment.
Lessons
- Introduction to AD DS
- Manage AD DS domain controllers and FSMO roles
- Implement Group Policy Objects
- Manage advanced features of AD DS
- Deploying a new domain controller on Server Core
- Configuring Group Policy
Module 2: Implementing identity in hybrid scenarios
This module discusses how to configure an Azure environment so that Windows IaaS workloads requiring Active Directory are supported. The module also covers integration of on-premises Active Directory Domain Services (AD DS) environment into Azure. Finally, the module explains how to extend an existing Active Directory environment into Azure by placing IaaS VMs configured as domain controllers onto a specially configured Azure virtual network subnet.
Lessons
- Implement hybrid identity with Windows Server
- Deploy and manage Azure IaaS Active Directory domain controllers in Azure
- Preparing Azure AD for AD DS integration
- Preparing on-premises AD DS for Azure AD integration
- Downloading, installing, and configuring Azure AD Connect
- Verifying integration between AD DS and Azure AD
- Implementing Azure AD integration features in AD DS
Module 3: Windows Server administration
This module describes how to implement the principle of least privilege through Privileged Access Workstation (PAW) and Just Enough Administration (JEA). The module also highlights several common Windows Server administration tools, such as Windows Admin Center, Server Manager, and PowerShell. This module also describes the post-installation configuration process and tools available to use for this process, such as sconfig and Desired State Configuration (DSC).
Lessons
- Perform Windows Server secure administration
- Describe Windows Server administration tools
- Perform post-installation configuration of Windows Server
- Just Enough Administration in Windows Server
- Implementing and using remote server administration
Module 4: Facilitating hybrid management
This module covers tools that facilitate managing Windows IaaS VMs remotely. The module also covers how to use Azure Arc with on-premises server instances, how to deploy Azure policies with Azure Arc, and how to use role-based access control (RBAC) to restrict access to Log Analytics data.
Lessons
- Administer and manage Windows Server IaaS virtual machines remotely
- Manage hybrid workloads with Azure Arc
- Provisioning Azure VMs running Windows Server
- Implementing hybrid connectivity by using the Azure Network Adapter
- Deploying Windows Admin Center gateway in Azure
- Verifying functionality of the Windows Admin Center gateway in Azure
Module 5: Hyper-V virtualization in Windows Server
This module describes how to implement and configure Hyper-V VMs and containers. The module covers key features of Hyper-V in Windows Server, describes VM settings, and how to configure VMs in Hyper-V. The module also covers security technologies used with virtualization, such as shielded VMs, Host Guardian Service, admin-trusted and TPM-trusted attestation, and Key Protection Service (KPS). Finally, this module covers how to run containers and container workloads, and how to orchestrate container workloads on Windows Server using Kubernetes.
Lessons
- Configure and manage Hyper-V
- Configure and manage Hyper-V virtual machines
- Secure Hyper-V workloads
- Run containers on Windows Server
- Orchestrate containers on Windows Server using Kubernetes
- Creating and configuring VMs
- Installing and configuring containers
Module 6: Deploying and configuring Azure VMs
This module describes Azure compute and storage in relation to Azure VMs, and how to deploy Azure VMs by using the Azure portal, Azure CLI, or templates. The module also explains how to create new VMs from generalized images and use Azure Image Builder templates to create and manage images in Azure. Finally, this module describes how to deploy Desired State Configuration (DSC) extensions, implement those extensions to remediate noncompliant servers, and use custom script extensions.
Lessons
- Plan and deploy Windows Server IaaS virtual machines
- Customize Windows Server IaaS virtual machine images
- Automate the configuration of Windows Server IaaS virtual machines
- Authoring Azure Resource Manager (ARM) templates for Azure VM deployment
- Modifying ARM templates to include VM extension-based configuration
- Deploying Azure VMs running Windows Server by using ARM templates
- Configuring administrative access to Azure VMs running Windows Server
- Configuring Windows Server security in Azure VMs
Module 7: Network infrastructure services in Windows Server
This module describes how to implement core network infrastructure services in Windows Server, such as DHCP and DNS. This module also covers how to implement IP address management and how to use Remote Access Services.
Lessons
- Deploy and manage DHCP
- Implement Windows Server DNS
- Implement IP address management
- Implement remote access
- Deploying and configuring DHCP
- Deploying and configuring DNS
Module 8: Implementing hybrid networking infrastructure
This module describes how to connect an on-premises environment to Azure and how to configure DNS for Windows Server IaaS virtual machines. The module covers how to choose the appropriate DNS solution for your organization’s need and run a DNS server in a Windows Server Azure IaaS VM. Finally, this module covers how to manage Microsoft Azure virtual networks and IP address configuration for Windows Server infrastructure as a service (IaaS) virtual machines.
Lessons
- Implement hybrid network infrastructure
- Implement DNS for Windows Server IaaS VMs
- Implement Windows Server IaaS VM IP addressing and routing
- Implementing virtual network routing in Azure
- Implementing DNS name resolution in Azure
Module 9: File servers and storage management in Windows Server
This module covers the core functionality and use cases of file server and storage management technologies in Windows Server. The module discusses how to configure and manage the Windows File Server role, and how to use Storage Spaces and Storage Spaces Direct. This module also covers replication of volumes between servers or clusters using Storage Replica.
Lessons
- Manage Windows Server file servers
- Implement Storage Spaces and Storage Spaces Direct
- Implement Windows Server Data Deduplication
- Implement Windows Server iSCSI
- Implement Windows Server Storage Replica
- Implementing Data Deduplication
- Configuring iSCSI storage
- Configuring redundant Storage Spaces
- Implementing Storage Spaces Direct
Module 10: Implementing a hybrid file server infrastructure
This module introduces Azure file services and how to configure connectivity to Azure Files. The module also covers how to deploy and implement Azure File Sync to cache Azure file shares on an on-premises Windows Server file server. This module also describes how to manage cloud tiering and how to migrate from DFSR to Azure File Sync.
Lessons
- Overview of Azure file services
- Implementing Azure File Sync
- Implementing DFS Replication in your on-premises environment
- Creating and configuring a sync group
- Replacing DFS Replication with File Sync–based replication
- Verifying replication and enabling cloud tiering
- Troubleshooting replication issues
- Experience with managing Windows Server operating system and Windows Server workloads in on-premises scenarios, including AD DS, DNS, DFS, Hyper-V, and File and Storage Services
- Experience with common Windows Server management tools (implied in the first prerequisite).
- Basic knowledge of core Microsoft compute, storage, networking, and virtualization technologies (implied in the first prerequisite).
- Experience and an understanding of core networking technologies such as IP addressing, name resolution, and Dynamic Host Configuration Protocol (DHCP)
- Experience working with and an understanding of Microsoft Hyper-V and basic server virtualization concepts
- Basic experience with implementing and managing IaaS services in Microsoft Azure
- Basic knowledge of Azure Active Directory
- Experience working hands-on with Windows client operating systems such as Windows 10 or Windows 11
- Basic experience with Windows PowerShell
This intensive training prepares you for:
- Exam: «AZ-800: Administering Windows Server Hybrid Core Infrastructure» for the first step to the
- Certification: «Microsoft Certified: Windows Server Hybrid Administrator Associate»