This course teaches IT professionals how to deploy, manage, secure, and troubleshoot Windows Server workloads across on-premises, hybrid, and cloud environments. The course covers Active Directory Domain Services, Hyper-V and Azure virtual machines, on-premises and hybrid networking, storage and file services, Windows Server security hardening, and monitoring and troubleshooting. It highlights administrative tools and technologies including Windows Admin Center, PowerShell, Azure Arc, Azure Monitor, Azure Update Manager, and Microsoft Defender for Cloud.

Classroom

This course is intended for Windows Server administrators who deploy, implement, manage, and troubleshoot Windows Server as a workload in on-premises, cloud, or hybrid environments. Candidates administer identity, security, compute, networking, storage, and monitoring for Windows Server, and they typically collaborate with architects, administrators, and engineers. Candidates should have experience administering Windows Server using technologies such as Windows Admin Center, Hyper-V, PowerShell, Azure Arc, Azure Monitor, Azure Update Manager, and Microsoft Defender for Cloud, and should be familiar with Active Directory Domain Services (AD DS).

5 Days

35 Hours

Learning Path 1: Deploy and manage Active Directory Domain Services

This learning path covers how to deploy and manage Active Directory Domain Services (AD DS) in on-premises and hybrid environments. You learn how to deploy domain controllers on-premises and in Azure, manage FSMO roles, create and manage users, groups, and organizational units, and extend your on-premises identity into Azure. You also configure Group Policy Objects to enforce security and desktop settings, and work with trusts, replication, and multi-site AD DS environments.

Modules

1. Deploy and manage Active Directory Domain Services domain controllers
2. Deploy and manage Azure IaaS Active Directory domain controllers in Azure
3. Manage AD DS domain controllers and FSMO roles
4. Create and manage Active Directory objects
5. Implement hybrid identity with Windows Server
6. Create and configure Group Policy Objects in Active Directory
7. Implement Group Policy Objects
8. Manage advanced features of AD DS

Learning Path 2: Manage Windows Server instances and workloads in a hybrid environment

Learn how to configure remote management for Windows Servers using Windows Admin Center, PowerShell, SSH, and Remote Desktop, and manage Windows Server workloads using Azure Arc, Azure Update Manager, and Azure Automation.

Modules

1. Administer and manage Windows Server IaaS Virtual Machine remotely
2. Describe Windows Server administration tools
3. Just Enough Administration in Windows Server
4. Perform Windows Server secure administration
5. Use advanced Windows PowerShell remoting techniques
6. Manage single and multiple computers by using Windows PowerShell remoting
7. Manage hybrid workloads with Azure Arc
8. Manage Azure updates
9. Automate the configuration of Windows Server IaaS Virtual Machines
10. Enforce VM security configuration with Azure Machine Configuration
11. Explore Azure Automation with DevOps

Learning Path 3: Manage virtual machines

This learning path covers how to manage virtual machines in on-premises and Azure environments. You learn how to configure Hyper-V hosts, virtual switches, and nested virtualization, manage VM settings including generations, virtual hard disks, and checkpoints, and secure workloads with the Host Guardian Service and shielded VMs. You also learn to implement VM high availability and live migration, run Windows containers, and plan, deploy, and scale Windows Server VMs on Azure including virtual network and IP address configuration, network security with NSGs and Azure Firewall, and secure remote access with Azure Bastion and JIT.

Modules

1. Configure and manage Hyper-V virtual machines
2. Configure and manage Hyper-V
3. Secure Hyper-V workloads
4. Implement high availability of Windows Server VMs
5. Run containers on Windows Server
6. Plan and deploy Windows Server IaaS Virtual Machines
7. Implement scale and high availability with Windows Server VM
8. Implement Windows Server IaaS VM IP addressing and routing
9. Implement Windows Server IaaS VM network security
10. Administer and manage Windows Server IaaS Virtual Machine remotely

Leaning Path 4: Implement and manage an on-premises and hybrid networking infrastructure

This learning path covers how to implement and manage networking infrastructure in on-premises and hybrid environments. You learn how to deploy and configure Windows Server DNS, including zones, forwarding, conditional forwarders, DNS policies, and DNSSEC, and integrate DNS with Azure for hybrid name resolution. You also deploy and manage DHCP including scopes, options, and failover, and use IP Address Management (IPAM) to centrally manage your DNS and DHCP infrastructure.

Modules

1. Implement Windows Server DNS
2. Implement DNS for Windows Server IaaS VMs
3. Secure Windows Server DNS
4. Deploy and manage DHCP
5. Implement IP Address Management
6. Implement Windows Server IaaS VM IP addressing and routing

Learning Path 5: Manage storage and file services

This learning path covers how to manage storage and file services in on-premises and hybrid environments. You learn how to deploy Azure File Sync, migrate file servers using Storage Migration Services, and manage Windows Server file shares including DFS, FSRM, and SMB security. You also configure storage technologies including Storage Spaces, Storage Spaces Direct, Storage Replica, Data Deduplication, and iSCSI.

Modules

1. Implement a hybrid file server infrastructure
2. Manage Windows Server file servers
3. Implement Storage Spaces and Storage Spaces Direct
4. Implement Windows Server Data Deduplication
5. Implement Windows Server iSCSI
6. Implement Windows Server Storage Replica

Leaning Path 6: Secure Windows Server infrastructure

This learning path covers how to secure Windows Server infrastructure and Active Directory Domain Services. You learn how to harden Windows Server using security baselines, LAPS, and Privileged Access Workstations, configure Microsoft Defender for Endpoint and built-in Windows client protections, and manage Group Policy security settings and audit policies. You also secure Active Directory by managing user rights, authentication policies, Protected Users, and service accounts including gMSA and dMSA, and monitor for threats with Microsoft Defender for Identity.

Modules

1. Hardening Windows Server
2. Manage Microsoft Defender for Endpoint
3. Manage Microsoft Defender in Windows client
4. Understand Active Directory Group Policy security settings
5. Manage security in Active Directory
6. Understand Windows Server service accounts
7. Secure Windows Server user accounts
8. Manage security controls for identity and access
9. Security monitoring and governance

Learning Path 7: Monitor and troubleshoot Windows Server environments

This learning path covers how to monitor and troubleshoot Windows Server environments. You learn how to use Performance Monitor, Event Viewer, and auditing tools to track server health and compliance, and extend monitoring into Azure with Azure Monitor and VM Insights. You also troubleshoot on-premises and hybrid networking issues including DHCP, DNS, and routing, manage server updates with WSUS and Azure Update Management, and troubleshoot Active Directory including replication failures, Group Policy processing, and hybrid authentication.

Modules

1. Monitor Windows Server performance
2. Manage and monitor Windows Server event logs
3. Implement Windows Server auditing and diagnostics
4. Monitor Windows Server IaaS Virtual Machines and hybrid instances
5. Monitor your Azure virtual machines with Azure Monitor
6. Troubleshoot on-premises and hybrid networking
7. Troubleshoot Windows Server Virtual Machines in Azure
8. Windows Server update management
9. Troubleshoot Active Directory