AZ-801 Configuring Windows Server Hybrid Advanced Services Training

Certification Microsoft Certified: Windows Server Hybrid Administrator Associate

Dynamics Edge courses and labs are enhanced Instructor-Led Training (ILT) materials designed specifically for live, guided instruction and follow a structured curriculum.

Our materials are intentionally different from Microsoft Learn paths in both structure and flow to better prepare for actual work, answer questions, real-time engagement, and deeper learning.  Microsoft Learn paths are self-paced study resources.

AZ-801 Configuring Windows Server Hybrid Advanced Services

You Will Learn:

• Harden the security configuration of the Windows Server operating system environment.
• Enhance hybrid security using Azure Security Center, Azure Sentinel, and Windows Update Management.
• Apply security features to protect critical resources.
• Implement high availability and disaster recovery solutions.
• Implement recovery services in hybrid scenarios.
• Plan and implement hybrid and cloud-only migration, backup, and recovery scenarios.
• Perform upgrades and migration related to AD DS, and storage.
• Manage and monitor hybrid scenarios using WAC, Azure Arc, Azure Automation and Azure Monitor.
• Implement service monitoring and performance monitoring, and apply troubleshooting.

Course Outline:

Module 1: Implement Windows Server IaaS VM Network Security

1. Configure Network Security Groups for Windows IaaS VMs
2. Implement Adaptive Network Hardening policies
3. Deploy and configure Azure Firewall using the Azure Portal
4. Configure Windows Firewall within IaaS VMs
5. Capture and log VM network traffic using Azure Network Watcher

Module 2: Audit the Security of Windows Server IaaS Virtual Machines

1. Describe the capabilities of Microsoft Defender for Cloud
2. Enable security monitoring in hybrid environments
3. Implement and assess security policies and compliance
4. Monitor and protect resources using Azure Security Center
5. Integrate Azure Sentinel for advanced threat detection

Module 3: Manage Azure Updates

1. Describe Azure Update Management features and benefits
2. Enable and configure Update Management for IaaS VMs
3. Deploy system and security updates across environments
4. View update compliance and assessment reports
5. Schedule and automate updates for hybrid workloads

Module 4: Create and Implement Application Allowlists

1. Describe the purpose and benefits of adaptive application control
2. Implement adaptive application control policies in Azure
3. Configure security rules for controlled applications
4. Monitor allowed applications and alerts
5. Audit deviations from the allowlist baseline

Module 5: Configure BitLocker Disk Encryption for IaaS Virtual Machines

1. Describe Azure Disk Encryption and Key Vault integration
2. Configure Key Vault for encryption management
3. Encrypt OS and data disks in Windows IaaS VMs
4. Backup and recover encrypted data
5. Automate encryption during VM creation

Module 6: Implement Change Tracking and File Integrity Monitoring

1. Enable and configure Change Tracking and Inventory
2. Monitor file system and registry changes
3. Implement File Integrity Monitoring for critical paths
4. Manage tracked entities and audit logs
5. Generate reports for compliance and threat response

Module 7: Secure Windows Server DNS

1. Implement split-horizon DNS configurations
2. Create and enforce DNS policies
3. Secure DNS traffic and query responses
4. Implement DNSSEC for data integrity
5. Monitor and audit DNS activity

Module 8: Secure Windows Server User Accounts

1. Configure user rights and account restrictions
2. Apply the Protected Users group to sensitive accounts
3. Enable Windows Defender Credential Guard
4. Block NTLM authentication across the domain
5. Identify and remediate risky accounts

Module 9: Manage Windows Server Updates

1. Explore Windows Update options and lifecycle
2. Deploy and configure Windows Server Update Services (WSUS)
3. Understand WSUS deployment and sync strategies
4. Manage update approvals and reporting
5. Troubleshoot update-related issues

Module 10: Introduction to Cluster Shared Volumes (CSV)

1. Define the functionality and use cases of CSV
2. Understand the architecture of Cluster Shared Volumes
3. Deploy CSV in a failover cluster environment
4. Configure CSV for high-performance workloads
5. Monitor CSV health and status.

Module 11: Implement Windows Server Failover Clustering

1. Define the concepts and use cases of failover clustering
2. Plan failover clusters with hardware and network requirements
3. Deploy and validate Windows Server failover clusters
4. Manage clustered roles and resources
5. Implement stretch clusters and cluster sets

Module 12: Implement High Availability for Windows Server VMs

1. Evaluate high availability options for Hyper-V environments
2. Configure network load balancing for virtual machines
3. Implement live migration of Hyper-V VMs
4. Perform storage migration for virtualized workloads
5. Monitor and manage VM availability states

Module 13: Implement File Server High Availability

1. Identify Windows Server file server clustering options
2. Deploy Cluster Shared Volumes for file services
3. Implement Scale-Out File Server for load balancing
4. Use Storage Replica for synchronous replication
5. Monitor file server failover and recovery

Module 14: Scale and Load-Balance Windows Server VMs

1. Describe virtual machine scale set architecture
2. Deploy and configure VM scale sets in Azure
3. Implement load balancing for IaaS virtual machines
4. Integrate scale sets with availability zones
5. Implement disaster recovery with Azure Site Recovery

Module 15: Implement Hyper-V Replica

1. Define Hyper-V Replica and its replication mechanisms
2. Plan prerequisites for implementing replication
3. Configure primary and secondary replica servers
4. Implement extended replication scenarios
5. Integrate with Azure Site Recovery for DR

Module 16: Implement Hybrid Backup and Recovery

1. Describe Azure Backup services and architecture
2. Configure recovery vaults and backup policies
3. Perform VM recovery operations
4. Execute file and folder-level recovery
5. Back up on-premises and cloud workloads

Module 17: Protect On-Premises Infrastructure with Azure Site Recovery

1. Understand the scope and architecture of Azure Site Recovery
2. Identify supported workloads for replication
3. Perform disaster recovery drills
4. Execute planned and unplanned failovers
5. Manage failback scenarios

Module 18: Protect Azure Infrastructure with Azure Site Recovery

1. Describe disaster recovery planning in Azure
2. Prepare Azure workloads for replication
3. Run recovery drills in a controlled environment
4. Automate failover and recovery processes
5. Monitor Azure Site Recovery readiness

Module 19: Protect Virtual Machines with Azure Backup

1. Review Azure Backup capabilities and scenarios
2. Configure VM backup using the Azure portal
3. Restore entire VMs or specific files from backups
4. Monitor backup jobs and alerts
5. Test backup compliance and retention

Module 20: Migrate On-Premises Windows Server to Azure

1. Plan and scope your Windows Server migration
2. Use Azure Migrate for server discovery and assessment
3. Perform readiness checks on physical or virtual servers
4. Execute workload migration to Azure VMs
5. Validate and optimize post-migration configuration

Module 21: Upgrade and Migrate Windows Server IaaS VMs

1. Describe Windows Server upgrade paths
2. Use Azure Migrate for in-place and side-by-side upgrades
3. Plan and execute file server migrations
4. Use Storage Migration Service for server migration
5. Monitor performance post-upgrade

Module 22: Migrate Active Directory Domain Services

1. Compare upgrade and migration scenarios
2. Upgrade AD DS to Windows Server 2022
3. Migrate AD DS from earlier versions
4. Use the Active Directory Migration Tool (ADMT)
5. Validate migrated domain functionality

Module 23: Migrate File Server Workloads with Storage Migration Service

1. Explore the capabilities of Storage Migration Service
2. Review requirements for source and destination systems
3. Execute file server migrations
4. Migrate user shares, ACLs, and configurations
5. Monitor migration progress and logs

Module 24: Migrate Windows Server Roles

1. Identify role migration use cases
2. Install and configure Windows Server Migration Tools
3. Export and import roles between systems
4. Validate migrated roles and dependencies
5. Troubleshoot role migration issues

Module 25: Monitor Windows Server IaaS and Hybrid Instances

1. Enable Azure Monitor for virtual machines
2. Collect performance and event data
3. Configure hybrid monitoring for on-prem workloads
4. Visualize metrics and alerts
5. Integrate with Microsoft Operations Manager

Module 26: Monitor Azure Virtual Machines with Azure Monitor

1. Monitor guest-level performance using VM insights
2. Use Metrics Explorer for detailed host metrics
3. Collect logs and counters from Azure VMs
4. Set up alert rules and dashboards
5. Review Azure Monitor logs for diagnostics

Module 27: Monitor Windows Server Performance

1. Use Performance Monitor and Resource Monitor
2. Monitor reliability and uptime with Reliability Monitor
3. Analyze data with Data Collector Sets
4. Predict trends with System Insights
5. Optimize performance using Admin Center tools

Module 28: Manage and Monitor Event Logs

1. Review and interpret Windows event logs
2. Use Windows Admin Center and Server Manager
3. Create and use custom log views
4. Configure event log subscriptions
5. Automate alerts from log events

Module 29: Implement Auditing and Diagnostics

1. Understand standard and advanced audit categories
2. Enable object and user access auditing
3. Log setup, login, and boot events
4. Use Group Policy for audit configuration
5. Collect diagnostic data for compliance

Module 30: Troubleshoot On-Prem and Hybrid Networking

1. Diagnose DHCP and DNS configuration issues
2. Troubleshoot IP addressing and routing problems
3. Use Packet Monitor for network-level insights
4. Utilize Azure Network Watcher for diagnostics
5. Resolve hybrid connectivity challenges

Module 31: Troubleshoot Windows Server VMs in Azure

1. Diagnose issues with VM deployment and extensions
2. Troubleshoot VM startup and performance problems
3. Resolve VM connectivity issues
4. Monitor storage performance
5. Investigate resource constraints and quotas

Module 32: Troubleshoot Active Directory Issues

1. Recover deleted objects using the AD Recycle Bin
2. Restore the Active Directory database and SYSVOL
3. Troubleshoot replication and trust issues
4. Resolve hybrid authentication and sync problems
5. Monitor and audit AD DS health