Home/Courses/Windows Server & Hybrid/AZ-800T00 Administer Windows Server Hybrid Core Infrastructu…
Windows Server & HybridAZ-800T00 Administer Windows Server Hybrid Core Infrastructure
Run Windows Server confidently across your datacentre and Azure.
4 daysIntermediate34 modulesAZ-800T00Microsoft Certified: Windows Server Hybrid Administrator Associate
About this course
Run Windows Server confidently across your datacentre and Azure. Over four days you will manage AD DS domain controllers, FSMO roles, trusts and Group Policy, integrate identity with Microsoft Entra, administer servers securely with Windows Admin Center and Just Enough Administration, extend management through Azure Arc and Automanage, and configure Hyper-V, preparing for exam AZ-800 towards the Windows Server Hybrid Administrator Associate certification.
Curriculum
34 modules
- Define AD DS
- Define users, groups, and computers
- Define AD DS forests and domains
- Define OUs
- Manage objects and their properties in AD DS
- Module assessment
- Deploy AD DS domain controllers
- Maintain AD DS domain controllers
- Manage the AD DS Global Catalog role
- Manage AD DS operations masters
- Manage AD DS schema
- Module assessment
- Define GPOs
- Implement GPO scope and inheritance
- Define domain-based GPOs
- Create and configure a domain-based GPO
- Define GPO storage
- Define administrative templates
- Module assessment
- Create trust relationships
- Implement ESAE forests
- Monitor and troubleshoot AD DS
- Create custom AD DS partitions
- Module assessment
- Select a Microsoft Entra integration model
- Plan for Microsoft Entra integration
- Prepare on-premises Active Directory for directory synchronization
- Install and configure directory synchronization with Microsoft Entra Connect
- Implement Seamless Single Sign-On
- Enable Microsoft Entra login in for Windows VM in Azure
- Describe Microsoft Entra Domain Services
- Implement and configure Microsoft Entra Domain Services
- Manage Windows Server in a Microsoft Entra Domain Services environment
- Create and configure a Microsoft Entra Domain Services instance
- Join a Windows Server VM to a managed domain
- Module assessment
- Select an option to implement directory and identity services using Active Directory Domain Services in Azure
- Deploy and configure Active Directory Domain Services domain controllers in Azure VMs
- Install a replica Active Directory domain controller in an Azure VM
- Install a new Active Directory forest on an Azure VNet
- Module assessment
- Define least privilege administration
- Implement delegated privileges
- Use privileged access workstations
- Use jump servers
- Module assessment
- Explore Windows Admin Center
- Use Server Manager
- List Remote Server Administration Tools
- Use Windows PowerShell
- Use Windows PowerShell to remotely administer a server
- Module assessment
- List the available post-installation configuration tools
- Configure Server Core using Sconfig
- Use DSC to configure Windows Server
- Perform post-installation configuration with Windows Admin Center
- Configure a server with answer files
- Module assessment
- Select the appropriate remote administration tool
- Manage Windows Virtual Machines with Azure Bastion
- Create an Azure Bastion host
- Configure just-in-time administration
- Module assessment
- Describe Azure Arc
- Onboard Windows Server instances
- Connect hybrid machines to Azure from the Azure portal
- Use Azure Arc to manage Windows Server instances
- Restrict access with RBAC
- Module assessment
- Describe concepts around Azure Automanage best practices
- Enable Azure Automanage best practices
- Create and assign a custom configuration profile
- Extend Azure Automanage across non-Azure infrastructure with Azure Arc
- Module assessment
- Explain the concept of Just Enough Administration (JEA)
- Define role capabilities for a JEA endpoint
- Create a session configuration file to register a JEA endpoint
- Describe how JEA endpoints work to limit access to a PowerShell session
- Create and connect to a JEA endpoint
- Demonstration: Connect to a JEA endpoint
- Module assessment
- Define Hyper-V
- Define Hyper-V Manager
- Configure Hyper-V hosts using best practices
- Configure Hyper-V networking
- Assess advanced Hyper-V networking features
- Define nested virtualization
- Module assessment
- List the virtual machine configuration versions
- List the virtual machine generation versions
- List available VHD formats and types
- Create and configure VMs
- Determine storage options for VMs
- Define shared VHDs and VHD Sets
- Implement guest clusters using shared VHDX
- Module assessment
- Define guarded fabric
- Define the Host Guardian Service
- Explore TPM-trusted attestation
- Define KPS
- Determine key features of shielded VMs
- Compare encryption-supported and shielded VMs in a guarded fabric
- Implement a shielded VM
- Module assessment
- Describe Azure compute
- Describe Virtual Machine storage
- Deploy Azure Virtual Machines
- Create a windows Virtual Machine using the portal
- Create a windows Virtual Machine using Azure CLI
- Deploy Azure Virtual Machines using templates
- Describe additional management optimization options
- Module assessment
- Create a generalized image
- Create a new Virtual Machine from a managed image
- Create a managed image of a generalized virtual machine in Azure
- Create a Virtual Machine from a managed image
- Implement Azure Image Builder
- Create a windows Virtual Machine using Azure Image Builder template
- Create a Windows Virtual Machine with Azure Image Builder using PowerShell
- Module assessment
- Describe Azure Automation
- Implement Azure Automation with DSC
- Remediate noncompliant servers
- Describe Custom Script Extensions
- Configure a Virtual Machine by using DSC
- Module assessment
- Define containers
- List the differences between containers and VMs
- Define Windows Server and Hyper-V containers and isolation modes
- Explore Docker
- Prepare a Windows Server 2019 host for container deployment
- Security, Storage, and Networking with Windows containers
- Module assessment
- Define orchestration
- Define Kubernetes
- Deploy Kubernetes resources
- Create a Kubernetes cluster on Windows
- Define Azure Arc
- Connect an Azure Arc-enabled Kubernetes cluster to Azure Arc
- Module assessment
- Understand Azure DNS
- Implement Azure DNS
- Create an Azure DNS zone and record using the Azure portal
- Implement DNS with Azure IaaS virtual machines
- Implement split-horizon DNS in Azure
- Troubleshoot DNS
- Module assessment
- Use DHCP to simplify IP configuration
- Install and configure the DHCP role
- Configure DHCP options
- Configure DHCP scopes
- Select DHCP high availability options
- Implement DHCP Failover
- Module assessment
- Explore the DNS architecture
- Work with DNS zones and records
- Install and configure the DNS role
- Implement DNS forwarding
- Module assessment
- Define IP Address Management
- Deploy IP Address Management
- Administer IP Address Management
- Configure IP Address Management options
- Manage DNS zones with IP Address Management
- Manage DHCP servers with IP Address Management
- Use IP Address Management to manage IP addressing
- Module assessment
- Examine the remote access options in Windows Server
- Select and set up VPNs
- Use NPS to create and enforce network access policies
- Plan and implement NPS
- Deploy a PKI for remote access
- Use WAP as a reverse web proxy
- Module assessment
- Describe Azure network topologies
- Implement Azure VPN options
- Create a route-based VPN gateway using the Azure portal
- Implement Azure ExpressRoute
- Configure Azure Virtual WAN
- Implement DNS in hybrid environments
- Module assessment
- Implement a virtual network
- Implement IaaS VM IP addressing
- Assign and manage IP addresses
- Configure a private IP address for a virtual machine using the Azure portal
- Create a virtual machine with a static public IP address using the Azure portal
- Implement IaaS virtual machine IP routing
- Implement IPv6 for Windows Server IaaS virtual machines
- Module assessment
- Define the Windows Server file system
- List the benefits and uses of File Server Resource Manager
- Define SMB and its security considerations
- Configure SMB protocol
- Define Volume Shadow Copy Service
- Module assessment
- Define the Storage Spaces architecture and its components
- List the functionalities, benefits, and use cases of Storage Spaces
- Implement Storage Spaces
- List the functionalities, components, benefits, and use cases of Storage Spaces Direct
- Implement Storage Spaces Direct
- Module assessment
- Define the architecture, components, and functionality of Data Deduplication
- Define the use cases and interoperability of Data Deduplication
- Implement Data Deduplication
- Manage and maintain Data Deduplication
- Module assessment
- List the functionalities, components, and use cases of iSCSI
- List the considerations for implementing iSCSI
- Implement iSCSI
- Configure high availability for iSCSI
- Module assessment
- List the functionalities and components of Storage Replica
- Examine the prerequisites for implementing Storage Replica
- Implement Storage Replica by using Windows Admin Center
- Implement Storage Replica by using Windows PowerShell
- Module assessment
- Describe Azure File services
- Configure Azure Files
- Configure connectivity to Azure Files
- Describe Azure File Sync
- Implement Azure File Sync
- Deploy Azure File Sync
- Deploy Azure File Sync 2
- Manage cloud tiering
- Migrate from DFSR to Azure File Sync
- Module assessment
Who it's for
Windows Server administrators extending their on-premises skills into hybrid and Azure environments.
Before you start
- Experience with managing Windows Server operating system and Windows Server workloads in on-premises scenarios, including AD DS, DNS, DFS, Hyper-V, and File and Storage Services
- Experience with common Windows Server management tools (implied in the first prerequisite).
- Basic knowledge of core Microsoft compute, storage, networking, and virtualization technologies (implied in the first prerequisite).
- Experience and an understanding of core networking technologies such as IP addressing, name resolution, and Dynamic Host Configuration Protocol (DHCP)
- Experience working with and an understanding of Microsoft Hyper-V and basic server virtualization concepts
- Basic experience with implementing and managing IaaS services in Microsoft Azure
- Basic knowledge of Azure Active Directory
- Experience working hands-on with Windows client operating systems such as Windows 10 or Windows 11
- Basic experience with Windows PowerShell
Prepares for
Related courses
More in Windows Server & Hybrid →AdvancedAZ-801T00
AZ-801T00 Configure Windows Server Hybrid Advanced Services
Windows Server & Hybrid
View course →IntermediateAZ-500T00
Microsoft Azure Security Technologies (AZ-500T00)
Microsoft Azure
View course →FoundationMS-102T00
MS-102T00 Microsoft 365 Administrator Essentials
Microsoft 365 Administration
View course →Intermediate
55202 PowerShell 5.0 and Desired State Configuration
Windows Server & Hybrid
View course →Advanced
55318 Advanced Automated Administration with Windows PowerShell
Windows Server & Hybrid
View course →Intermediate
55343 Networking with Windows Server
Windows Server & Hybrid
View course →Let's plan your next step together.
Tell us the course or certification you have in mind and we'll send the outline, upcoming dates, fees and private-team options.