Module 1: Identity services in Windows Server
This module introduces identity services and describes
Active Directory Domain Services (AD DS) in a Windows Server environment. The
module describes how to deploy domain controllers in AD DS, as well as Azure
Active Directory (AD) and the benefits of integrating Azure AD with AD DS. The
module also covers Group Policy basics and how to configure group policy
objects (GPOs) in a domain environment.
Lessons
Introduction to AD DS
Manage AD DS domain controllers and FSMO roles
Implement Group Policy Objects
Manage advanced features of AD DS
Lab : Implementing identity services and Group Policy
After completing this module, students will be able to:
Describe AD DS in a Windows Server environment.
Deploy domain controllers in AD DS.
Describe Azure AD and benefits of integrating Azure AD
with AD DS.
Explain Group Policy basics and configure GPOs in a
domain environment.
Module 2: Implementing identity in hybrid scenarios
This module discusses how to configure an Azure
environment so that Windows IaaS workloads requiring Active Directory are
supported. The module also covers integration of on-premises Active Directory
Domain Services (AD DS) environment into Azure. Finally, the module explains
how to extend an existing Active Directory environment into Azure by placing
IaaS VMs configured as domain controllers onto a specially configured Azure
virtual network subnet.
Lessons
Lab : Implementing integration between AD DS and Azure AD
Preparing Azure AD for AD DS integration
Preparing on-premises AD DS for Azure AD integration
Downloading, installing, and configuring Azure AD Connect
Verifying integration between AD DS and Azure AD
Implementing Azure AD integration features in AD DS
After completing this module, students will be able to:
Integrate on-premises Active Directory Domain Services
(AD DS) environment into Azure.
Install and configure directory synchronization using
Azure AD Connect.
Implement and configure Azure AD DS.
Implement Seamless Single Sign-on (SSO).
Implement and configure Azure AD DS.
Install a new AD DS forest on an Azure VNet.
Module 3: Windows Server administration
This module describes how to implement the principle of
least privilege through Privileged Access Workstation (PAW) and Just Enough
Administration (JEA). The module also highlights several common Windows Server
administration tools, such as Windows Admin Center, Server Manager, and
PowerShell. This module also describes the post-installation configuration
process and tools available to use for this process, such as sconfig and
Desired State Configuration (DSC).
Lessons
Perform Windows Server secure administration
Describe Windows Server administration tools
Perform post-installation configuration of Windows Server
Just Enough Administration in Windows Server
Lab : Managing Windows Server
After completing this module, students will be able to:
Explain least privilege administrative models.
Decide when to use privileged access workstations.
Select the most appropriate Windows Server administration
tool for a given situation.
Apply different methods to perform post-installation
configuration of Windows Server.
Constrain privileged administrative operations by using
Just Enough Administration (JEA).
Module 4: Facilitating hybrid management
This module covers tools that facilitate managing Windows
IaaS VMs remotely. The module also covers how to use Azure Arc with on-premises
server instances, how to deploy Azure policies with Azure Arc, and how to use
role-based access control (RBAC) to restrict access to Log Analytics data.
Lessons
Lab : Using Windows Admin Center in hybrid scenarios
Provisioning Azure VMs running Windows Server
Implementing hybrid connectivity by using the Azure
Network Adapter
Deploying Windows Admin Center gateway in Azure
Verifying functionality of the Windows Admin Center
gateway in Azure
After completing this module, students will be able to:
Select appropriate tools and techniques to manage Windows
IaaS VMs remotely.
Explain how to onboard on-premises Windows Server
instances in Azure Arc.
Connect hybrid machines to Azure from the Azure portal.
Use Azure Arc to manage devices.
Restrict access using RBAC.
Module 5: Hyper-V virtualization in Windows Server
This module describes how to implement and configure
Hyper-V VMs and containers. The module covers key features of Hyper-V in
Windows Server, describes VM settings, and how to configure VMs in Hyper-V. The
module also covers security technologies used with virtualization, such as
shielded VMs, Host Guardian Service, admin-trusted and TPM-trusted attestation,
and Key Protection Service (KPS). Finally, this module covers how to run
containers and container workloads, and how to orchestrate container workloads
on Windows Server using Kubernetes.
Lessons
Configure and manage Hyper-V
Configure and manage Hyper-V virtual machines
Secure Hyper-V workloads
Run containers on Windows Server
Orchestrate containers on Windows Server using Kubernetes
Lab : Implementing and configuring virtualization in
Windows Server
After completing this module, students will be able to:
Install and configure Hyper-V on Windows Server.
Configure and manage Hyper-V virtual machines.
Use Host Guardian Service to protect virtual machines.
Create and deploy shielded virtual machines.
Configure and manage container workloads.
Orchestrate container workloads using a Kubernetes
cluster.
