Course Overview
Introduction to AD DS
- Describe AD DS.
- Describe users, groups, and computers.
- Identify and describe AD DS forests and domains.
- Describe OUs.
- Manage objects and their properties in AD DS
- Define AD DS
- Define users, groups, and computers
- Define AD DS forests and domains
- Define OUs
- Manage objects and their properties in AD DS
Manage AD DS domain controllers and FSMO roles
- Deploy AD DS domain controllers.
- Maintain AD DS domain controllers.
- Describe the AD DS global catalog role and its placement considerations.
- Describe AD DS operations master roles, their placement considerations, and their management tasks.
- Describe AD DS schema and its management tasks.
- Deploy AD DS domain controllers
- Maintain AD DS domain controllers
- Manage the AD DS Global Catalog rol
- Manage AD DS operations masters
- Manage AD DS schema
Implement Group Policy Objects
- Describe GPOs.
- Describe GPO scope and inheritance.
- Describe domain-based GPOs.
- Create and configure GPOs.
- Explain GPO storage.
- Describe administrative templates and the Central Store.
- Define GPOs
- Implement GPO scope and inheritance
- Define domain-based GPOs
- Create and configure a domain-based GPO
- Define GPO storage
- Define administrative templates
Manage advanced features of AD DS
- Identify the purpose, types, and the process of creating trust relationships.
- Describe the purpose and the process of implementing ESAE forests.
- Monitor and troubleshoot AD DS replication.
- Identify the purpose and the process of creating custom AD DS partitions.
- Create trust relationships
- Implement ESAE forests
- Monitor and troubleshoot AD DS
- Create custom AD DS partitions
Implement hybird identity with Windows Server
- Select a Microsoft Entra integration model.
- Plan for Microsoft Entra integration.
- Prepare on-premises AD DS for directory synchronization.
- Install and configure directory synchronization using Microsoft Entra Connect.
- Implement Seamless Single Sign-on (SSO).
- Enable Microsoft Entra login for an Azure Windows virtual machine (VM).
- Describe Microsoft Entra Domain Services.
- Implement and configure Microsoft Entra Domain Services.
- Manage Windows Server 2019 in a Microsoft Entra Domain Services instance.
- Join a Windows Server VM to a managed domain.
- Select a Microsoft Entra integration model
- Plan for Microsoft Entra integration
- Prepare on-premises Active Directory for directory synchronization
- Install and configure directory synchronization with Microsoft Entra Connect
- Implement Seamless Single Sign-On
- Enable Microsoft Entra login in for Windows VM in Azure
- Knowledge check 1
- Describe Microsoft Entra Domain Services
- Implement and configure Microsoft Entra Domain Services
- Manage Windows Server 2019 in a Microsoft Entra Domain Services environment
- Create and configure a Microsoft Entra Domain Services instance
- Join a Windows Server VM to a managed domain
Deploy and manage Azure IaaS Active Directory Domain controllers in Azure
- Select an option to implement directory and identity services by using Active Directory Domain Services (AD DS) in Azure.
- Deploy and configure AD DS domain controllers in Azure VMs.
- Install a replica AD DS domain controller in an Azure VM.
- Install a new AD DS forest on an Azure VNet.
- Select an option to implement directory and identity services using Active Directory Domain Services in Azure
- Deploy and configure Active Directory Domain Services domain controllers in Azure VMs
- Install a replica Active Directory domain controller in an Azure VM
- Install a new Active Directory forest on an Azure VNet
Perform Windows Server secure administration
- Explain least privilege administrative models.
- Implement delegated privilege.
- Describe privileged access workstations.
- Describe jump servers.
- Define least privilege administration
- Implement delegated privileges
- Use privileged access workstations
- Use jump servers
Describe Windows Server administration tools
- Describe Windows Admin Center.
- Describe how to use Remote Server Administration Tools (RSAT) to manage servers.
- Describe Server Manager.
- Describe how to use Windows PowerShell to manage servers.
- Explain how to use Windows PowerShell to remotely administer a server.
- Explore Windows Admin Center
- Use Server Manager
- List Remote Server Administration Tools
- Use Windows PowerShell
- Use Windows PowerShell to remotely administer a server
Perform post-installation configuration of Windows Server
- Explain post-installation configuration and describe the available post-installation configuration tools.
- Use Sconfig to configure Windows Server.
- Describe Desired State Configuration (DSC) and explain how to use it to configure Windows Server.
- Use Windows Admin Center to perform post-installation configuration.
- Implement answer files to complete the configuration.
- List the available post-installation configuration tools
- Configure Server Core using Sconfig
- Use DSC to configure Windows Server
- Perform post-installation configuration with Windows Admin Center
- Configure a server with answer files
Administer and manage Windows Server IaaS Virtual Machine remotely
- Select appropriate remote administration tools.
- Secure management connections to Windows Azure IaaS VMs with Azure Bastion.
- Configure JIT VM access.
- Select the appropriate remote administration tool
- Manage Windows Virtual Machines with Azure Bastion
- Create an Azure Bastion host
- Configure just-in-time administration
Manage hybrid workloads with Azure Arc
- Describe Azure Arc.
- Explain how to onboard on-premises Windows Server instances in Azure Arc.
- Connect hybrid machines to Azure from the Azure portal.
- Use Azure Arc to manage devices.
- Restrict access using RBAC.
- Describe Azure Arc
- Onboard Windows Server instances
- Connect hybrid machines to Azure from the Azure portal
- Use Azure Arc to manage Windows Server instances
- Restrict access with RBAC
Optimizing IT operations and management with Azure Automanage
- Describe how Azure Automanage best practices can optimize the operations of Windows Server and Linux virtual machines.
- Explain the different services available through Azure Automanage.
- Create and assign a custom configuration profile for Azure Automanage machines.
- Describe how to extend Azure Automanage capabilities to non-Azure infrastructure using Azure Arc.
- Describe concepts around Azure Automanage best practices
- Enable Azure Automanage best practices
- Create and assign a custom configuration profile
- Extend Azure Automanage across non-Azure infrastructure with Azure Arc
Just Enough Administration in Windows Server
- Explain the concept of Just Enough Administration (JEA)
- Define role group capabilities and session configurations for a JEA session
- Create and connect to a JEA endpoint
- Explain the concept of Just Enough Administration (JEA)
- Define role capabilities for a JEA endpoint
- Create a session configuration file to register a JEA endpoint
- Describe how JEA endpoints work to limit access to a PowerShell session
- Create and connect to a JEA endpoint
- Demonstration: Connect to a JEA endpoint
Configure and manage Hyper-V
- Describe the functionality and features of Hyper-V on Windows Server.
- Install Hyper-V on Windows Server.
- Describe the options for managing Hyper-V virtual machines (VMs) on Windows Server.
- Describe networking features and functionality in Hyper-V on Windows Server.
- Create virtual switches (vSwitches) for use with Hyper-V.
- Describe using nested virtualization in Hyper-V
- Define Hyper-V
- Define Hyper-V Manager
- Configure Hyper-V hosts using best practices
- Configure Hyper-V networking
- Assess advanced Hyper-V networking features
- Define nested virtualization
Configure and manage Hyper-V virtual machines
- Describe settings, configuration, and generation versions available for VMs in Windows Server.
- Identify virtual hard disk (VHD) formats and types.
- Create and configure a VM.
- Determine storage options for VMs.
- Describe shared VHDs and VHD Sets.
- Describe host and guest clustering with shared VHDs.
- List the virtual machine configuration versions
- List the virtual machine generation versions
- List available VHD formats and types
- Create and configure VMs
- Determine storage options for VMs
- Define shared VHDs and VHD Sets
- Implement guest clusters using shared VHDX
Secure Hyper-V workloads
- Describe the features and functionality of the HGS in Windows Server.
- Describe the attestation options available with the HGS.
- Describe shielded VMs, their creation, and their deployment.
- Define guarded fabric
- Define the Host Guardian Service
- Explore TPM-trusted attestation
- Define KPS
- Determine key features of shielded VMs
- Compare encryption-supported and shielded VMs in a guarded fabric
- Implement a shielded VM
Plan and deploy Windows Server IaaS Virtual Machines
- Describe Azure compute.
- Describe Azure storage.
- Deploy Azure VMs.
- Create a VM from the Azure portal.
- Create a VM from Azure Cloud Shell.
- Deploy Azure VMs by using templates.
- Describe additional management optimization options
- Describe Azure compute
- Describe Virtual Machine storage
- Deploy Azure Virtual Machines
- Create a windows Virtual Machine using the portal
- Create a windows Virtual Machine using Azure CLI
- Deploy Azure Virtual Machines using templates
- Describe additional management optimization options
Customize Windows Server IaaS Virtual Machines images
- Create a generalized image.
- Create a new VM from a generalized image.
- Create a managed image of a generalized VM in Azure.
- Create a VM from a managed image.
- Describe Azure Image Builder.
- Use Azure Image Builder to create a Windows image.
- Create a generalized image
- Create a new Virtual Machine from a managed image
- Create a managed image of a generalized virtual machine in Azure
- Create a Virtual Machine from a managed image
- Implement Azure Image Builder
- Create a windows Virtual Machine using Azure Image Builder template
- Create a Windows Virtual Machine with Azure Image Builder using PowerShell
Automate the configuration of Windows Server IaaS Virtual Machines
- Describe Azure automation.
- Implement Azure automation with DSC.
- Remediate noncompliant servers.
- Describe custom script extension.
- Configure a VM by using DSC extensions.
- Run Containers on Windows Server
Orchestrate containers on Windows Server using Kubernetes
- Describe container orchestration.
- Describe Kubernetes.
- Describe how to create a Kubernetes cluster.
- Describe Azure Arc for Kubernetes.
- Define orchestration
- Define Kubernetes
- Deploy Kubernetes resources
- Create a Kubernetes cluster on Windows
- Define Azure Arc
- Connect an Azure Arc-enabled Kubernetes cluster to Azure Arc
Implement DNS for Windows Server IaaS VMs
- Implement DNS in Azure
- Describe DNS options for Azure IaaS VMs
- Implement split-horizon DNS in Azure
- Troubleshoot DNS in Azure
- Create and configure an Azure DNS zone
- Understand Azure DNS
- Implement Azure DNS
- Create an Azure DNS zone and record using the Azure portal
- Implement DNS with Azure IaaS virtual machines
- Implement split-horizon DNS in Azure
- Troubleshoot DNS
Deploy and manage DHCP
Implement Windows Server DNS
Implement IP Address Management
Implement remote access
Implement hybrid network infrastructure
Implement Windows Server IaaS VM IP addressing and routing
Manage Windows Server file servers
Implement Storage Spaces and Storage Spaces Direct
Implement Windows Server Data Deduplication
Implement Windows Server iSCSI
Implement Windows Server Storage Replica
Implement a hybrid file server infrastructure
Implement Windows Server IaaS VM network security
Audit the security of Windows Server IaaS Virtual Machines
Manage Azure updates
Configure BitLocker disk encryption for Windows IaaS Virtual Machines
Implement change tracking and file integrity monitoring for Windows IaaS VMS
Secure Windows Server DNS
Secure Windows Server user accounts
Hardening Windows Server
Windows Server update management
Introduction to Cluster Shared Volumes
Implement Windows Server failover clustering
Implement high availability of Windows Server VMs
Implement Windows Server File Server high availability
Implement scale and high availability with Windows Server VM
Implement Hyper-V Replica
Implement hybrid backup and recovery with Windows Server IaaS
Protect your on-premises infrastructure from disasters with Azure Site Recover
Protect your Azure infrastructure with Azure Site Recovery
Protect your virtual machines by using Azure Backup
Migrate on-premises Windows Server instances to Azure IaaS virtual machines
Upgrade and migrate Windows Server IaaS virtual machines
Active Directory Domain Services migration
MIgrate file server workloads using Storage Migration Server
Migrate Windows Server roles
Containerize and migrate ASP.NET applications to Azure App Service
Monitor Windows Server IaaS Virtual Machines and hybrid instances
Monitor your Azure virtual machines with Azure Monitor
Monitor Windows Server performance
Manage and monitor Windows Server event logs
Implement Windows Server auditing and diagnostics
Troubleshoot on-premises and hybrid networking
- Diagnose DHCP and DNS problems in on-premises contexts.
- Diagnose IP configuration and routing problems.
- Implement Packet Monitor to help diagnose network problems.
- Use Azure Network Watcher to troubleshoot Microsoft Azure virtual networks.
- Diagnose DHCP problems
- Diagnose DNS problems
- Diagnose IP configuration issues
- Diagnose routing problems
- Use Packet Monitor to help diagnose network problems
- Use Azure Network Watcher to help diagnose network problems
Troubleshoot Windows Server Virtual Machines in Azure
- Troubleshoot VM deployment and extension issues
- Troubleshoot VM startup and performance issues
- Troubleshoot VM storage and encryption issues
- Troubleshoot connectivity to VMs
- Troubleshoot VM deployment
- Troubleshoot VM startup
- Troubleshoot VM extensions
- Troubleshoot VM connectivity
- Troubleshoot VM performance
- Troubleshoot VM storage
Troubleshoot Active Directory
- Recover the AD DS database, objects in AD DS, and SYSVOL
- Troubleshoot AD DS replication
- Troubleshoot Hybrid authentication issues
- Recover objects from the AD recycle bin
- Recover the AD DS database
- Recover SYSVOL
- Troubleshoot AD DS replication
- Troubleshoot hybrid authentication issues
