AZ-800 Administering Windows Server Hybrid Core Infrastructure Training

Module 1: Introduction to Active Directory Domain Services (AD DS)

1. Define AD DS and its core functions

2. Understand users, groups, and computer objects

3. Explain AD DS forests, domains, and OUs

4. Manage and delegate object properties and access

5. Explore the logical AD DS structure and hierarchy

Module 2: Manage AD DS Domain Controllers and FSMO Roles

1. Deploy and configure AD DS domain controllers

2. Maintain and monitor domain controller health

3. Understand and manage FSMO (operations master) roles

4. Manage the Global Catalog and AD DS schema

5. Plan for scalability and redundancy

Module 3: Implement Group Policy Objects (GPOs)

1. Define and understand GPOs

2. Configure GPO scope, inheritance, and filtering

3. Create and link domain-based GPOs

4. Use administrative templates and policy settings

5. Understand GPO storage and replication

Module 4: Manage Advanced Features of AD DS

1. Create and manage trust relationships

2. Implement Enhanced Security Admin Environment (ESAE) forests

3. Monitor and troubleshoot AD DS infrastructure

4. Create and manage custom AD DS partitions

5. Plan for high availability and site topology

Module 5: Implement Hybrid Identity with Windows Server

1. Select the right Microsoft Entra integration model

2. Configure directory synchronization with Entra Connect

3. Implement Seamless SSO and Microsoft Entra login

4. Deploy and manage Microsoft Entra Domain Services

5. Join Windows VMs to a managed domain in Azure

Module 6: Deploy and Manage Azure IaaS AD DS Domain Controllers

1. Select options for AD DS in Azure

2. Deploy AD DS domain controllers in Azure VMs

3. Install new forests and replicas in Azure

4. Integrate with on-premises environments

5. Ensure high availability and backup

Module 7: Perform Windows Server Secure Administration

1. Define least privilege administration principles

2. Implement delegated privileges securely

3. Use Privileged Access Workstations (PAW)

4. Configure and use jump servers

5. Establish secure administrative workflows

Module 8: Describe Windows Server Administration Tools

1. Explore Windows Admin Center features

2. Use Server Manager for centralized control

3. List and use Remote Server Administration Tools (RSAT)

4. Administer with Windows PowerShell

5. Perform remote administration with PowerShell

Module 9: Post-Installation Configuration of Windows Server

1. Identify post-installation configuration tools

2. Configure Server Core using Sconfig

3. Use Desired State Configuration (DSC)

4. Automate setup with Windows Admin Center

5. Apply answer files for unattended configuration

Module 10: Administer Windows Server IaaS VMs Remotely

1. Select tools for remote VM administration

2. Set up Azure Bastion for secure access

3. Configure just-in-time (JIT) administration

4. Implement role-based access for remote management

5. Automate routine tasks across VMs

Module 11: Manage Hybrid Workloads with Azure Arc

1. Describe Azure Arc capabilities

2. Onboard Windows Server instances to Azure Arc

3. Connect and manage hybrid machines via Azure Portal

4. Implement role-based access control (RBAC)

5. Use Azure Arc for centralized hybrid management

Module 12: Optimize IT Operations with Azure Automanage

1. Understand Azure Automanage best practices

2. Enable Automanage for Windows Server

3. Create and assign configuration profiles

4. Extend Automanage to non-Azure systems with Azure Arc

5. Monitor and audit Automanage configurations

Module 13: Just Enough Administration (JEA) in Windows Server

1. Define the JEA security model and its benefits

2. Configure role capabilities for JEA endpoints

3. Create and register JEA session configuration files

4. Limit PowerShell session access using JEA

5. Connect and audit activity on JEA endpoints

Module 14: Configure and Manage Hyper-V Hosts

1. Define the Hyper-V architecture and role

2. Install and manage Hyper-V Manager

3. Configure host settings and networking

4. Explore advanced networking and nested virtualization

5. Apply best practices for host performance

Module 15: Configure and Manage Hyper-V Virtual Machines

1. Understand VM versions, generations, and formats

2. Create, configure, and manage VMs

3. Define shared VHDs and VHD Sets

4. Implement storage options and guest clusters

5. Backup and restore Hyper-V virtual machines

Module 16: Secure Hyper-V Workloads

1. Define shielded VMs and guarded fabric

2. Implement Host Guardian Service (HGS)

3. Configure TPM-trusted attestation and KPS

4. Compare encryption-supported vs shielded VMs

5. Deploy and test shielded virtual machines

Module 17: Plan and Deploy Windows Server IaaS Virtual Machines

1. Understand Azure compute and storage architecture

2. Deploy Windows VMs via Portal and CLI

3. Use ARM templates for repeatable deployments

4. Optimize VM sizing and availability options

5. Implement advanced VM configuration features

Module 18: Customize Windows Server IaaS VM Images

1. Create generalized and managed VM images

2. Deploy VMs from custom images

3. Use Azure Image Builder with templates and PowerShell

4. Automate image creation workflows

5. Apply security and compliance configurations

Module 19: Automate Windows Server IaaS VM Configuration

1. Describe Azure Automation and DSC

2. Configure and deploy DSC for compliance

3. Remediate configuration drift

4. Use custom script extensions for automation

5. Monitor and manage automation jobs

Module 20: Run Containers on Windows Server

1. Define containers and their use cases

2. Compare containers vs traditional VMs

3. Deploy Windows Server and Hyper-V containers

4. Explore Docker on Windows

5. Configure container networking and storage

Module 21: Orchestrate Containers with Kubernetes on Windows Server

1. Define Kubernetes and orchestration basics

2. Deploy Kubernetes clusters on Windows

3. Manage containerized workloads in Kubernetes

4. Connect Kubernetes clusters using Azure Arc

5. Apply policies and governance to clusters

Module 22: Implement DNS for Windows Server IaaS VMs

1. Understand and configure Azure DNS

2. Create zones and records in Azure

3. Implement split-horizon and hybrid DNS

4. Configure DNS for IaaS virtual machines

5. Troubleshoot name resolution issues

Module 23: Deploy and Manage DHCP

1. Install and configure the DHCP server role

2. Create and manage DHCP scopes and options

3. Implement high availability with DHCP Failover

4. Monitor and secure DHCP infrastructure

5. Use DHCP logs for troubleshooting

Module 24: Implement Windows Server DNS

1. Explore Windows DNS architecture and roles

2. Create and manage DNS zones and records

3. Configure DNS forwarding and conditional forwarding

4. Integrate DNS with Active Directory

5. Secure and monitor DNS services

Module 25: Implement IP Address Management (IPAM)

1. Define and deploy IPAM

2. Configure IP address blocks and subnets

3. Integrate IPAM with DNS and DHCP

4. Monitor IP address usage and inventory

5. Manage policies and permissions in IPAM

Module 26: Implement Remote Access

1. Understand VPN and DirectAccess options

2. Deploy and configure remote access roles

3. Use Network Policy Server (NPS) for access control

4. Set up Web Application Proxy (WAP)

5. Deploy certificates and secure remote connections

Module 27: Implement Hybrid Network Infrastructure

1. Define Azure hybrid network topologies

2. Implement VPN Gateway and ExpressRoute

3. Configure Virtual WAN and routing

4. Integrate DNS across hybrid environments

5. Secure hybrid connections with NSGs and firewalls

Module 28: Configure IaaS VM IP Addressing and Routing

1. Configure Azure Virtual Networks (VNets)

2. Assign and manage static and dynamic IPs

3. Implement public and private IP configurations

4. Set up custom routing for VMs

5. Enable IPv6 support for Windows Server VMs

Module 29: Manage Windows Server File Servers

1. Understand the Windows file system architecture

2. Configure SMB shares and permissions

3. Use File Server Resource Manager (FSRM)

4. Enable Volume Shadow Copy Service

5. Monitor and secure file server access

Module 30: Implement Storage Spaces and Storage Spaces Direct

1. Understand Storage Spaces architecture and scenarios

2. Configure Storage Spaces volumes and pools

3. Deploy Storage Spaces Direct for clustering

4. Optimize performance and fault tolerance

5. Monitor and maintain storage infrastructure

Module 31: Implement Windows Server Data Deduplication

1. Understand the components of Data Deduplication

2. Evaluate use cases and interoperability

3. Install and configure deduplication

4. Monitor and maintain deduped volumes

5. Optimize storage efficiency and performance

Module 32: Implement Windows Server iSCSI

1. Define iSCSI architecture and use cases

2. Install and configure iSCSI target and initiator

3. Configure LUNs and access control

4. Implement iSCSI high availability

5. Monitor and troubleshoot iSCSI connections

Module 33: Implement Windows Server Storage Replica

1. Understand Storage Replica roles and functionality

2. Prepare prerequisites for implementation

3. Configure replication using Admin Center

4. Configure replication using PowerShell

5. Monitor and validate replication status

Module 34: Implement a Hybrid File Server Infrastructure

1. Configure Azure Files and connectivity

2. Implement and deploy Azure File Sync

3. Manage cloud tiering and file replication

4. Migrate from DFSR to Azure File Sync

5. Monitor and secure hybrid file storage