AZ-800: Administering Windows Server Hybrid Core Infrastructure

Posted on 27 March, 2023 by Micheal Alexander

En este curso se enseña a los profesionales de TI a administrar cargas de trabajo y servicios principales Windows Server mediante tecnologías locales, híbridas y en la nube. En este curso se enseña a los profesionales de TI a implementar y administrar soluciones híbridas e locales, como identidad, administración, proceso, redes y almacenamiento en un entorno híbrido de Windows Server. AZ-800: Administering Windows Server Hybrid Core Infrastructure

Este curso de cuatro días está destinado a los administradores híbridos de Windows Server que tienen experiencia con Windows Server y desean ampliar las funcionalidades de sus entornos locales combinando tecnologías locales e híbridas. Los administradores de Windows Server Hybrid implementan y administran soluciones híbridas y locales, como identidad, administración, proceso, redes y almacenamiento en un entorno híbrido de Windows Server.

Module 1: Identity services in Windows Server

This module introduces identity services and describes Active Directory Domain Services (AD DS) in a Windows Server environment. The module describes how to deploy domain controllers in AD DS, as well as Azure Active Directory (AD) and the benefits of integrating Azure AD with AD DS. The module also covers Group Policy basics and how to configure group policy objects (GPOs) in a domain environment.

Lesson

Introduction to AD DS

Manage AD DS domain controllers and FSMO roles

Implement Group Policy Objects

Manage advanced features of AD DS

Lab : Implementing identity services and Group Policy

Deploying a new domain controller on Server Core

Configuring Group Policy

After completing this module, students will be able to:

Describe AD DS in a Windows Server environment.

Deploy domain controllers in AD DS.

Describe Azure AD and benefits of integrating Azure AD with AD DS.

Explain Group Policy basics and configure GPOs in a domain environment.

Module 2: Implementing identity in hybrid scenarios

This module discusses how to configure an Azure environment so that Windows IaaS workloads requiring Active Directory are supported. The module also covers integration of on-premises Active Directory Domain Services (AD DS) environment into Azure. Finally, the module explains how to extend an existing Active Directory environment into Azure by placing IaaS VMs configured as domain controllers onto a specially configured Azure virtual network subnet. Hardening con Docker

Lesson

Implement hybrid identity with Windows Server

Deploy and manage Azure IaaS Active Directory domain controllers in Azure

Lab : Implementing integration between AD DS and Azure AD

Preparing Azure AD for AD DS integration

Preparing on-premises AD DS for Azure AD integration

Downloading, installing, and configuring Azure AD Connect

Verifying integration between AD DS and Azure AD

Implementing Azure AD integration features in AD DS

After completing this module, students will be able to:

Integrate on-premises Active Directory Domain Services (AD DS) environment into Azure.

Install and configure directory synchronization using Azure AD Connect.

Implement and configure Azure AD DS.

Implement Seamless Single Sign-on (SSO).

Implement and configure Azure AD DS.

Install a new AD DS forest on an Azure VNet.

Module 3: Windows Server administration

This module describes how to implement the principle of least privilege through Privileged Access Workstation (PAW) and Just Enough Administration (JEA). The module also highlights several common Windows Server administration tools, such as Windows Admin Center, Server Manager, and PowerShell. This module also describes the post-installation configuration process and tools available to use for this process, such as sconfig and Desired State Configuration (DSC).

Lesson

Perform Windows Server secure administration

Describe Windows Server administration tools

Perform post-installation configuration of Windows Server

Just Enough Administration in Windows Server

Lab : Managing Windows Server

Implementing and using remote server administration

After completing this module, students will be able to:

Explain least privilege administrative models.

Decide when to use privileged access workstations.

Select the most appropriate Windows Server administration tool for a given situation.

Apply different methods to perform post-installation configuration of Windows Server.

Constrain privileged administrative operations by using Just Enough Administration (JEA).

Module 4: Facilitating hybrid management

This module covers tools that facilitate managing Windows IaaS VMs remotely. The module also covers how to use Azure Arc with on-premises server instances, how to deploy Azure policies with Azure Arc, and how to use role-based access control (RBAC) to restrict access to Log Analytics data.

Lesson

Administer and manage Windows Server IaaS virtual machines remotely

Manage hybrid workloads with Azure Arc

Lab : Using Windows Admin Center in hybrid scenarios

Provisioning Azure VMs running Windows Server

Implementing hybrid connectivity by using the Azure Network Adapter

Deploying Windows Admin Center gateway in Azure

Verifying functionality of the Windows Admin Center gateway in Azure

After completing this module, students will be able to:

Select appropriate tools and techniques to manage Windows IaaS VMs remotely.

Explain how to onboard on-premises Windows Server instances in Azure Arc.

Connect hybrid machines to Azure from the Azure portal.

Use Azure Arc to manage devices.

Restrict access using RBAC.

Module 5: Hyper-V virtualization in Windows Server

This module describes how to implement and configure Hyper-V VMs and containers. The module covers key features of Hyper-V in Windows Server, describes VM settings, and how to configure VMs in Hyper-V. The module also covers security technologies used with virtualization, such as shielded VMs, Host Guardian Service, admin-trusted and TPM-trusted attestation, and Key Protection Service (KPS). Finally, this module covers how to run containers and container workloads, and how to orchestrate container workloads on Windows Server using Kubernetes.

Lesson

Configure and manage Hyper-V

Configure and manage Hyper-V virtual machines

Secure Hyper-V workloads

Run containers on Windows Server

Orchestrate containers on Windows Server using Kubernetes

Lab : Implementing and configuring virtualization in Windows Server

Creating and configuring VMs

Installing and configuring containers

After completing this module, students will be able to:

Install and configure Hyper-V on Windows Server.

Configure and manage Hyper-V virtual machines.

Use Host Guardian Service to protect virtual machines.

Create and deploy shielded virtual machines.

Configure and manage container workloads.

Orchestrate container workloads using a Kubernetes cluster.

---