Course Outline
Introduction to AD DS
- Describe AD DS
- Describe users, groups, and computers
- Identify and describe AD DS forests and domains
- Describe OUs
- Manage objects and their properties in AD DS
Manage AD DS domain controllers and FSMO roles
- Deploy AD DS, domain controllers
- Maintain AD DS, domain controllers
- Describe the AD DS global catalog role and its placement considerations
- Describe AD DS operations master roles, their placement considerations, and their management tasks
- Describe the AD DS schema and its management tasks
Implement Group Policy Objects
- Describe GPOs
- Describe GPO scope and inheritance
- Describe domain-based GPOs
- Create and configure GPOs
- Explain GPO storage
- Describe administrative templates and the Central Store
Manage advanced features of AD DS
- Identify the purpose, types, and process of creating trust relationships
- Describe the purpose and the process of implementing ESAE forests
- Monitor and troubleshoot AD DS replication
- Identify the purpose and the process of creating custom AD DS partitions
Implement hybrid identity with Windows Server
- Select an Azure AD integration model
- Plan for Azure AD integration
- Prepare on-premises AD DS for directory synchronization
- Install and configure directory synchronization using Azure AD Connect
- Implement Seamless Single Sign-on (SSO)
- Enable Azure AD login for an Azure Windows virtual machine (VM)
- Describe Azure AD DS
- Implement and configure Azure AD DS
- Manage Windows Server 2019 in an Azure AD DS instance
- Join a Windows Server VM to a managed domain
Deploy and manage Azure IaaS Active Directory domain controllers in Azure
- Select an option to implement directory and identity services by using Active Directory Domain
- Services (AD DS) in Azure
- Deploy and configure AD DS domain controllers in Azure VMs
- Install a replica AD DS domain controller in an Azure VM
- Install a new AD DS forest on an Azure VNet
Perform Windows Server secure administration
- Explain least privilege administrative models
- Implement delegated privilege
- Describe privileged access workstations
- Describe jump servers
Describe Windows Server administration tools
- Describe Windows Admin Center
- Describe how to use Remote Server Administration Tools (RSAT) to manage servers
- Describe Server Manager
- Describe how to use Windows PowerShell to manage servers
- Explain how to use Windows PowerShell to administer a server remotely
Perform post-installation configuration of Windows Server
- Explain post-installation configuration and describe the available post-installation configuration tools
- Use Sconfig to configure Windows Server
- Describe Desired State Configuration (DSC) and explain how to use it to configure Windows Server
- Use Windows Admin Center to perform post-installation configuration
- Implement answer files to complete the configuration
Just Enough Administration in Windows Server
- Explain the concept of Just Enough Administration (JEA)
- Define role group capabilities and session configurations for a JEA session
- Create and connect to a JEA endpoint
- Lab: Create a session configuration file to register a JEA endpoint
Administer and manage Windows Server IaaS Virtual Machine remotely
- Select appropriate remote administration tools
- Secure management connections to Windows Azure IaaS VMs with Azure Bastion
- Configure JIT VM access
Manage hybrid workloads with Azure Arc
- Describe Azure Arc
- Explain how to onboard on-premises Windows Server instances in Azure Arc
- Connect hybrid machines to Azure from the Azure portal
- Use Azure Arc to manage devices
- Restrict access using RBAC
Configure and manage Hyper-V
- Describe the functionality and features of Hyper-V on Windows Server
- Install Hyper-V on Windows Server
- Describe the options for managing Hyper-V virtual machines (VMs) on Windows Server
- Describe networking features and functionality in Hyper-V on Windows Server
- Create virtual switches (vSwitches) for use with Hyper-V
- Describe using nested virtualization in Hyper-V
Configure and manage Hyper-V virtual machines
- Describe settings, configuration, and generation versions available for VMs in Windows Server 2019
- Identify virtual hard disk (VHD) formats and types
- Create and configure a VM
- Determine storage options for VMs
- Describe shared VHDs and VHD Sets
- Describe host and guest clustering with shared VHDs
Secure Hyper-V workloads
- Describe the features and functionality of the HGS in Windows Server
- Describe the attestation options available with the HGS
- Describe shielded VMs, their creation, and their deployment
Run containers on Windows Server
- Describe containers and how they work
- Explain the difference between containers and virtual machines (VMs)
- Describe the difference between process isolation and Hyper-V isolation modes
- Describe Docker and how it's used to manage Windows containers
- Identify the container-based images available from the Microsoft Container Registry
- Understand the process for running a Windows container
- Explain how to manage containers using Windows Admin Center (WAC)
Orchestrate containers on Windows Server using Kubernetes
- Describe container orchestration
- Describe Kubernetes
- Describe how to create a Kubernetes cluster
- Describe Azure Arc for Kubernetes
Plan and deploy Windows Server IaaS Virtual Machines
- Describe Azure compute
- Describe Azure storage
- Deploy Azure VMs
- Create a VM from the Azure portal
- Create a VM from Azure Cloud Shell
- Deploy Azure VMs by using templates
Customize Windows Server IaaS Virtual Machine images
- Create a generalized image
- Create a new VM from a generalized image
- Create a managed image of a generalized VM in Azure
- Create a VM from a managed image
- Describe Azure Image Builder
- Use Azure Image Builder to create a Windows image
Automate the configuration of Windows Server IaaS Virtual Machines
- Describe Azure automation
- Implement Azure automation with DSC
- Remediate noncompliant servers
- Describe the custom script extension
- Configure a VM by using DSC extensions
Deploy and manage DHCP
- Describe the DHCP Server role
- Install and configure the DHCP Server role
- Configure DHCP options
- Create and configure a DHCP scope
- Describe high availability options for DHCP
- Describe DHCP Failover and explain how to configure it
Implement Windows Server DNS
- Describe Windows Server DNS
- Describe DNS zones and records
- Install and configure the DNS role and DNS zones
- Describe how to implement DNS forwarding
Implement IP Address Management
- Describe IPAM
- Deploy IPAM
- Describe how to administer IPAM
- Configure IPAM options
- Manage DNS zones with IPAM
- Manage DHCP servers with IPAM
- Use IPAM to manage IP addressing
Implement remote access
- Describe the remote access options available in Windows Server
- Select VPN options and set up VPN servers
- Describe the NPS server roles
- Plan and implement NPS
- Determine when to deploy PKI for remote access
- Identify the authentication options for Web Application Proxy and explain how to use it to publish applications
Implement hybrid network infrastructure
- Describe Azure network topologies
- Implement an Azure VPN
- Explain how to create a route-based VPN gateway using the Azure portal
- Implement Azure ExpressRoute
- Implement an Azure WAN
- Implement DNS resolution in hybrid environments
Implement DNS for Windows Server IaaS VMs
- Implement DNS in Azure
- Describe DNS options for Azure IaaS VMs
- Implement split-horizon DNS in Azure
- Troubleshoot DNS in Azure
- Create and configure an Azure DNS zone
Implement Windows Server IaaS VM IP addressing and routing
- Implement an Azure virtual network
- Implement IP Address Allocation in Azure
- Assign and manage IP addresses
- Configure a private IP address for an Azure virtual machine
- Create a virtual machine with a static IP address
- Implement IaaS VM IP routing
- Implement IPv6 for Windows IaaS Virtual Machines
Manage Windows Server file servers
- Describe the Windows Server file system
- Describe the benefits and use of File Server Resource Manager
- Describe SMB and its security considerations
- Manage SMB configuration
- Describe Volume Shadow Copy Service
Implement Storage Spaces and Storage Spaces Direct
- Describe the architecture and components of Storage Spaces
- Describe the functionality, benefits, and use cases of Storage Spaces
- Implement Storage Spaces
- Describe the functionality, components, and use cases of Storage Spaces Direct
- Implement Storage Spaces Direct
Implement Windows Server Data Deduplication
- Describe the architecture, components, and Data Deduplication functionality, components, and use cases of Data Deduplication
- Describe the use cases and interoperability of Data Deduplication
- Implement Data Deduplication
- Manage and maintain Data Deduplication
Implement Windows Server iSCSI
- Describe iSCSI functionality, components, and use cases
- Describe the considerations for implementing iSCSI
- Implement iSCSI
- Describe implementing high-availability iSCSI configurations
Implement Windows Server Storage Replica
- Describe the functionality and components of Storage Replica
- Describe the prerequisites for implementing Storage Replica
- Implement Storage Replica
Implement a hybrid file server infrastructure
- Describe Azure file services
- Configure Azure file services
- Configure connectivity to Azure file services
- Describe Azure File Sync
- Implement Azure File Sync
- Deploy Azure File Sync
- Manage cloud tiering
- Migrate from DFSR to Azure File Sync