Module 1: Identity services in Windows Server

This module introduces identity services and describes Active Directory Domain Services (AD DS) in a Windows Server environment. The module describes how to deploy domain controllers in AD DS, as well as Azure Active Directory (AD) and the benefits of integrating Azure AD with AD DS. The module also covers Group Policy basics and how to configure group policy objects (GPOs) in a domain environment.

Lesson

• Introduction to AD DS
• Manage AD DS domain controllers and FSMO roles
• Implement Group Policy Objects
• Manage advanced features of AD DS

Lab: Implementing identity services and Group Policy

• Deploying a new domain controller on Server Core
• Configuring Group Policy

Module 2: Implementing identity in hybrid scenarios

This module discusses how to configure an Azure environment so that Windows IaaS workloads requiring Active Directory are supported. The module also covers integration of on-premises Active Directory Domain Services (AD DS) environment into Azure. Finally, the module explains how to extend an existing Active Directory environment into Azure by placing IaaS VMs configured as domain controllers onto a specially configured Azure virtual network subnet.

Lesson

• Implement hybrid identity with Windows Server
• Deploy and manage Azure IaaS Active Directory domain controllers in Azure

Lab: Implementing integration between AD DS and Azure AD

• Preparing Azure AD for AD DS integration
• Preparing on-premises AD DS for Azure AD integration
• Downloading, installing, and configuring Azure AD Connect
• Verifying integration between AD DS and Azure AD
• Implementing Azure AD integration features in AD DS

Module 3: Windows Server administration

This module describes how to implement the principle of least privilege through Privileged Access Workstation (PAW) and Just Enough Administration (JEA). The module also highlights several common Windows Server administration tools, such as Windows Admin Center, Server Manager, and PowerShell. This module also describes the post-installation configuration process and tools available to use for this process, such as sconfig and Desired State Configuration (DSC).

Lesson

• Perform Windows Server secure administration
• Describe Windows Server administration tools
• Perform post-installation configuration of Windows Server
• Just Enough Administration in Windows Server

Lab: Managing Windows Server

• Implementing and using remote server administration

Module 4: Facilitating hybrid management

This module covers tools that facilitate managing Windows IaaS VMs remotely. The module also covers how to use Azure Arc with on-premises server instances, how to deploy Azure policies with Azure Arc, and how to use role-based access control (RBAC) to restrict access to Log Analytics data.

Lesson

• Administer and manage Windows Server IaaS virtual machines remotely
• Manage hybrid workloads with Azure Arc

Lab: Using Windows Admin Center in hybrid scenarios

• Provisioning Azure VMs running Windows Server
• Implementing hybrid connectivity by using the Azure Network Adapter
• Deploying Windows Admin Center gateway in Azure
• Verifying functionality of the Windows Admin Center gateway in Azure

Module 5: Hyper-V virtualization in Windows Server

This module describes how to implement and configure Hyper-V VMs and containers. The module covers key features of Hyper-V in Windows Server, describes VM settings, and how to configure VMs in Hyper-V. The module also covers security technologies used with virtualization, such as shielded VMs, Host Guardian Service, admin-trusted and TPM-trusted attestation, and Key Protection Service (KPS). Finally, this module covers how to run containers and container workloads, and how to orchestrate container workloads on Windows Server using Kubernetes.

Lesson

• Configure and manage Hyper-V
• Configure and manage Hyper-V virtual machines
• Secure Hyper-V workloads
• Run containers on Windows Server
• Orchestrate containers on Windows Server using Kubernetes

Lab: Implementing and configuring virtualization in Windows Server

• Creating and configuring VMs
• Installing and configuring containers

Module 6: Deploying and configuring Azure VMs

This module describes Azure compute and storage in relation to Azure VMs, and how to deploy Azure VMs by using the Azure portal, Azure CLI, or templates. The module also explains how to create new VMs from generalized images and use Azure Image Builder templates to create and manage images in Azure. Finally, this module describes how to deploy Desired State Configuration (DSC) extensions, implement those extensions to remediate noncompliant servers, and use custom script extensions.

Lesson

• Plan and deploy Windows Server IaaS virtual machines
• Customize Windows Server IaaS virtual machine images
• Automate the configuration of Windows Server IaaS virtual machines

Lab: Deploying and configuring Windows Server on Azure VMs

• Authoring Azure Resource Manager (ARM) templates for Azure VM deployment
• Modifying ARM templates to include VM extension-based configuration
• Deploying Azure VMs running Windows Server by using ARM templates
• Configuring administrative access to Azure VMs running Windows Server
• Configuring Windows Server security in Azure VMs

Module 7: Network infrastructure services in Windows Server

This module describes how to implement core network infrastructure services in Windows Server, such as DHCP and DNS. This module also covers how to implement IP address management and how to use Remote Access Services.

Lesson

• Deploy and manage DHCP
• Implement Windows Server DNS
• Implement IP address management
• Implement remote access

Lab: Implementing and configuring network infrastructure services in Windows Server

• Deploying and configuring DHCP
• Deploying and configuring DNS

Module 8: Implementing hybrid networking infrastructure

This module describes how to connect an on-premises environment to Azure and how to configure DNS for Windows Server IaaS virtual machines. The module covers how to choose the appropriate DNS solution for your organization’s need and run a DNS server in a Windows Server Azure IaaS VM. Finally, this module covers how to manage Microsoft Azure virtual networks and IP address configuration for Windows Server infrastructure as a service (IaaS) virtual machines.

Lesson

• Implement hybrid network infrastructure
• Implement DNS for Windows Server IaaS VMs
• Implement Windows Server IaaS VM IP addressing and routing

Lab: Implementing Windows Server IaaS VM networking

• Implementing virtual network routing in Azure
• Implementing DNS name resolution in Azure

Module 9: File servers and storage management in Windows Server

This module covers the core functionality and use cases of file server and storage management technologies in Windows Server. The module discusses how to configure and manage the Windows File Server role, and how to use Storage Spaces and Storage Spaces Direct. This module also covers replication of volumes between servers or clusters using Storage Replica.

Lesson

• Manage Windows Server file servers
• Implement Storage Spaces and Storage Spaces Direct
• Implement Windows Server Data Deduplication
• Implement Windows Server iSCSI
• Implement Windows Server Storage Replica

Lab: Implementing storage solutions in Windows Server

• Implementing Data Deduplication
• Configuring iSCSI storage
• Configuring redundant Storage Spaces
• Implementing Storage Spaces Direct

Module 10: Implementing a hybrid file server infrastructure

This module introduces Azure file services and how to configure connectivity to Azure Files. The module also covers how to deploy and implement Azure File Sync to cache Azure file shares on an on-premises Windows Server file server. This module also describes how to manage cloud tiering and how to migrate from DFSR to Azure File Sync.

Lesson

• Overview of Azure file services
• Implementing Azure File Sync

Lab: Implementing Azure File Sync

• Implementing DFS Replication in your on-premises environment
• Creating and configuring a sync group
• Replacing DFS Replication with File Sync–based replication
• Verifying replication and enabling cloud tiering
• Troubleshooting replication issues

Module 1: Windows Server security

This module discusses how to protect an Active Directory environment by securing user accounts to least privilege and placing them in the Protected Users group. The module covers how to limit authentication scope and remediate potentially insecure accounts. The module also describes how to harden the security configuration of a Windows Server operating system environment. In addition, the module discusses the use of Windows Server Update Services to deploy operating system updates to computers on the network. Finally, the module covers how to secure Windows Server DNS to help protect the network name resolution infrastructure.

Lesson

• Secure Windows Sever user accounts
• Hardening Windows Server
• Windows Server Update Management
• Secure Windows Server DNS

Lab: Configuring security in Windows Server

• Configuring Windows Defender Credential Guard
• Locating problematic accounts
• Implementing LAPS

Module 2: Implementing security solutions in hybrid scenarios

This module describes how to secure on-premises Windows Server resources and Azure IaaS workloads. The module covers how to improve the network security for Windows Server infrastructure as a service (IaaS) VMs and how to diagnose network security issues with those VMs. In addition, the module introduces Azure Security Center and explains how to onboard Windows Server computers to Security Center. The module also describes how to enable Azure Update Management, deploy updates, review an update assessment, and manage updates for Azure VMs. The module explains how Adaptive application controls and BitLocker disk encryption are used to protect Windows Server IaaS VMs. Finally, the module explains how to monitor Windows Server Azure IaaS VMs for changes in files and the registry, as well as monitoring modifications made to application software.

Lesson

• Implement Windows Server IaaS VM network security.
• Audit the security of Windows Server IaaS Virtual Machines
• Manage Azure updates
• Create and implement application allowlists with adaptive application control
• Configure BitLocker disk encryption for Windows IaaS Virtual Machines
• Implement change tracking and file integrity monitoring for Windows Server IaaS VMs

Lab: Using Azure Security Center in hybrid scenarios

• Provisioning Azure VMs running Windows Server
• Configuring Azure Security Center
• Onboarding on-premises Windows Server into Azure Security Center
• Verifying the hybrid capabilities of Azure Security Center
• Configuring Windows Server security in Azure VMs

Module 3: Implementing high availability

This module describes technologies and options to create a highly available Windows Server environment. The module introduces Clustered Shared Volumes for shared storage access across multiple cluster nodes. The module also highlights failover clustering, stretch clusters, and cluster sets for implementing high availability of Windows Server workloads. The module then discusses high availability provisions for Hyper-V and Windows Server VMs, such as network load balancing, live migration, and storage migration. The module also covers high availability options for shares hosted on Windows Server file servers. Finally, the module describes how to implement scaling for virtual machine scale sets and load balanced VMs, and how to implement Azure Site Recovery.

Lesson

• Introduction to Cluster Shared Volumes.
• Implement Windows Server failover clustering.
• Implement high availability of Windows Server VMs.
• Implement Windows Server File Server high availability.
• Implement scale and high availability with Windows Server VMs.

Lab: Implementing failover clustering

• Configuring iSCSI storage
• Configuring a failover cluster
• Deploying and configuring a highly available file server
• Validating the deployment of the highly available file server

Module 4: Disaster recovery in Windows Server

This module introduces Hyper-V Replica as a business continuity and disaster recovery solution for a virtual environment. The module discusses Hyper-V Replica scenarios and use cases, and prerequisites to use it. The module also discusses how to implement Azure Site Recovery in on-premises scenarios to recover from disasters.

Lesson

• Implement Hyper-V Replica
• Protect your on-premises infrastructure from disasters with Azure Site Recovery

Lab: Implementing Hyper-V Replica and Windows Server Backup

• Implementing Hyper-V Replica
• Implementing backup and restore with Windows Server Backup

Module 5: Implementing recovery services in hybrid scenarios

This module covers tools and technologies for implementing disaster recovery in hybrid scenarios, whereas the previous module focuses on BCDR solutions for on-premises scenarios. The module begins with Azure Backup as a service to protect files and folders before highlighting how to implement Recovery Vaults and Azure Backup Policies. The module describes how to recover Windows IaaS virtual machines, perform backup and restore of on-premises workloads, and manage Azure VM backups. The module also covers how to provide disaster recovery for Azure infrastructure by managing and orchestrating replication, failover, and failback of Azure virtual machines with Azure Site Recovery.

Lesson

• Implement hybrid backup and recovery with Windows Server IaaS
• Protect your Azure infrastructure with Azure Site Recovery
• Protect your virtual machines by using Azure Backup

Lab: Implementing Azure-based recovery services

• Implementing the lab environment
• Creating and configuring an Azure Site Recovery vault
• Implementing Hyper-V VM protection by using Azure Site Recovery vault
• Implementing Azure Backup

Module 6: Upgrade and migrate in Windows Server

This module discusses approaches to migrating and updating Windows Server workloads running in earlier versions of Windows Server. The module covers the necessary strategies needed to move domain controllers to Windows Server 2022 and describes how the Active Directory Migration Tool can consolidate domains within a forest or migrate domains to a new AD DS forest. The module also discusses the use of Storage Migration Service to migrate files and files shares from existing file servers to new servers running Windows Server 2022. Finally, the module covers how to install and use the Windows Server Migration Tools cmdlets to migrate commonly used server roles from earlier versions of Windows Server.

Lesson

• Active Directory Domain Services migration
• Migrate file server workloads using Storage Migration Service
• Migrate Windows Server roles

Lab: Migrating Windows Server workloads to IaaS VMs

• Deploying AD DS domain controllers in Azure
• Migrating file server shares by using Storage Migration Service

Module 7: Implementing migration in hybrid scenarios

This module discusses approaches to migrating workloads running in Windows Server to an infrastructure as a service (IaaS) virtual machine. The module introduces using Azure Migrate to assess and migrate on-premises Windows Server instances to Microsoft Azure. The module also covers how migrate a workload running in Windows Server to an infrastructure as a service (IaaS) virtual machine (VM) and to Windows Server 2022 by using Windows Server migration tools or the Storage Migration Service. Finally, this module describes how to use the Azure Migrate App Containerization tool to containerize and migrate ASP.NET applications to Azure App Service.

Lesson

• Migrate on-premises Windows Server instances to Azure IaaS virtual machines
• Upgrade and migrate Windows Server IaaS virtual machines
• Containerize and migrate ASP.NET applications to Azure App Service

Lab: Migrating on-premises VMs servers to IaaS VMs

• Implementing assessment and discovery of Hyper-V VMs using Azure Migrate
• Implementing migration of Hyper-V workloads using Azure Migrate

Module 8: Server and performance monitoring in Windows Server

This module introduces a range of tools to monitor the operating system and applications on a Windows Server computer as well as describing how to configure a system to optimize efficiency and to troubleshoot problems. The module covers how Event Viewer provides a convenient and accessible location for observing events that occur, and how to interpret the data in the event log. The module also covers how to audit and diagnose a Windows Server environment for regulatory compliance, user activity, and troubleshooting. Finally, the module explains how to troubleshoot AD DS service failures or degraded performance, including recovery of deleted objects and the AD DS database, and how to troubleshoot hybrid authentication issues.

Lesson

• Monitor Windows Server performance
• Manage and monitor Windows Server event logs
• Implement Windows Server auditing and diagnostics
• Troubleshoot Active Directory

Lab: Monitoring and troubleshooting Windows Server

• Establishing a performance baseline
• Identifying the source of a performance problem
• Viewing and configuring centralized event logs

Module 9: Implementing operational monitoring in hybrid scenarios

This module covers using monitoring and troubleshooting tools, processes, and best practices to streamline app performance and availability of Windows Server IaaS VMs and hybrid instances. The module describes how to implement Azure Monitor for IaaS VMs in Azure, implement Azure Monitor in on-premises environments, and use dependency maps. The module then explains how to enable diagnostics to get data about a VM, view VM metrics in Azure Metrics Explorer, and create a metric alert to monitor VM performance. The module then covers how to monitor VM performance by using Azure Monitor VM Insights. The module then describes various aspects of troubleshooting on premises and hybrid network connectivity, including how to diagnose common issues with DHCP, name resolution, IP configuration, and routing. Finally, the module examines how to troubleshoot configuration issues that impact connectivity to Azure-hosted Windows Server virtual machines (VMs), as well as approaches to resolve issues with VM startup, extensions, performance, storage, and encryption.

Lesson

• Monitor Windows Server IaaS Virtual Machines and hybrid instances
• Monitor the health of your Azure virtual machines by using Azure Metrics Explorer and metric alerts
• Monitor performance of virtual machines by using Azure Monitor VM Insights
• Troubleshoot on-premises and hybrid networking
• Troubleshoot Windows Server Virtual Machines in Azure

Lab: Monitoring and troubleshooting of IaaS VMs running Windows Server

• Enabling Azure Monitor for virtual machines
• Setting up a VM with boot diagnostics
• Setting up a Log Analytics workspace and Azure Monitor VM Insights