Overview

This course teaches IT Professionals to configure advanced Windows Server services using on-premises, hybrid, and cloud technologies. The course teaches IT Professionals how to leverage the hybrid capabilities of Azure, how to migrate virtual and physical server workloads to Azure IaaS, and how to secure Azure VMs running Windows Server. The course also teaches IT Professionals how to perform tasks related to high availability, troubleshooting, and disaster recovery. The course highlights administrative tools and technologies including Windows Admin Center, PowerShell, Azure Arc, Azure Policy, Azure Monitor, Azure Update Manager, Microsoft Defender for Identity, Microsoft Defender for Cloud, and IaaS virtual machine administration.

Audience Profile

This four-day course is intended for Windows Server Hybrid Administrators who have experience working with Windows Server and want to extend the capabilities of their on-premises environments by combining on-premises and hybrid technologies. Windows Server Hybrid Administrators who already implement and manage on-premises core technologies want to secure and protect their environments, migrate virtual and physical workloads to Azure IaaS, enable a highly available, fully redundant environment, and perform monitoring and troubleshooting.

Syllabus

In this module, you'll focus on how to improve the network security for Windows Server infrastructure as a service (IaaS) virtual machines (VMs) and how to diagnose network security issues with those VMs.

Learning Objectives
  • Implement Network Security Groups (NSGs) with Windows Server IaaS VMs.
  • Implement adaptive network hardening.
  • Implement Azure Firewall.
  • Implement Windows Defender Firewall in Windows Server IaaS VMs.
  • Choose an appropriate filtering solution.
  • Capture network traffic with Network Watcher.

Learn about Microsoft Defender for Cloud and how to onboard Windows Server computers to Microsoft Defender for Cloud. Also learn about Microsoft Sentinel, security information and event management (SIEM), and security orchestration, automation, and response (SOAR).

Learning Objectives
  • Describe Microsoft Defender for Cloud.
  • Enable Microsoft Defender for Cloud in hybrid environments.
  • Onboard Windows Server computers to Microsoft Defender for Cloud.
  • Implement and assess security policies.
  • Describe Microsoft Sentinel.
  • Implement SIEM and SOAR.
  • Protect your resources with Microsoft Defender for Cloud.

You'll be able to enable Azure Update Management, deploy updates, review an update assessment, and manage updates for your Azure VMs.

Learning Objectives
  • Describe Azure updates.
  • Enable Update Management.
  • Deploy updates.
  • Review an update assessment.
  • Manage updates for your Azure VMs.

You're able to configure Azure Disk Encryption for Windows IaaS VMs and back up and recover encrypted data.

Learning Objectives
  • Describe Azure Disk Encryption.
  • Configure Key Vault to support Azure Disk Encryption.
  • Explain how to encrypt Azure IaaS VM hard disks.
  • Back up and recover encrypted data from IaaS VM hard disks.

In this module, learn how to monitor Windows Server Azure IaaS VMs for changes in files and the registry, and other monitor modifications made to application software.

Learning Objectives
  • Implement Change Tracking and Inventory
  • Manage Change Tracking and Inventory
  • Manage tracked files
  • Implement File Integrity Monitoring
  • Select and monitor entities
  • Use File Integrity Monitoring

Learn how to secure Windows Server DNS to help protect your network name resolution infrastructure and also learn how to implement DNS policies.

Learning Objectives
  • Describe split-horizon DNS and explain how to implement it.
  • Create DNS policies.
  • Implement DNS policies.
  • Describe the options for protecting the DNS server role.
  • Implement DNS security.

Protect your Active Directory environment by securing user accounts to least privilege and placing them in the Protected Users group. Learn how to limit authentication scope and remediate potentially insecure accounts.

Learning Objectives
  • Configure and manage user accounts to limit security threats across an organization
  • Apply Protected Users settings, policies, and authentication silos to protect highly privileged user accounts
  • Describe and configure Windows Defender Credential Guard
  • Configure Group Policy to block the use of NTLM for authentication

Learn how to harden the security configuration of your Windows Server operating system environment. Secure administrative access to Privileged Access Workstations (PAWs), apply security baselines, and secure domain controllers and SMB traffic.

Learning Objectives
  • Manage local administrator passwords using Local Administrator Password Solution
  • Limit administrative access to Privileged Access Workstations (PAWs)
  • Explain how to secure domain controllers from being compromised
  • Describe how to use the Microsoft Security Compliance Toolkit to harden servers
  • Secure SMB traffic using SMB encryption

Learn how to use Windows Server Update Services to deploy operating system updates to computers on your network. Select the appropriate deployment option and combine WSUS with Microsoft Azure Update Management to manage server updates.

Learning Objectives
  • Describe the role of Windows Server Update Services (WSUS)
  • Describe the WSUS update management process
  • Deploy updates with WSUS

Learn about the core functionality, benefits, use cases, and implementation of Cluster Shared Volumes (CSV) in Windows Server 2019.

Learning Objectives
  • Describe the functionality of CSV.
  • Describe the architecture and components of CSV.
  • Implement CSV.

Learn about the core functionality of Windows Server failover clustering, various configuration options for failover clustering, and the use of cluster sets.

Learning Objectives
  • Describe Windows Server failover clustering.
  • Implement Windows Server failover clustering.
  • Manage Windows Server failover clustering.
  • Implement stretch clusters.
  • Describe cluster sets.

Learn about the core functionality, benefits, use cases, and implementation of highly available Microsoft Hyper-V virtual machines (VMs) in Windows Server.

Learning Objectives
  • Describe the Hyper-V high availability options.
  • Describe Hyper-V VMs load balancing.
  • Implement Hyper-V VMs live migration.
  • Implement Hyper-V VMs storage migration.

Learn about the core functionality, benefits, use cases, and implementation of the highly available File Server role in Windows Server 2019.

Learning Objectives
  • Provide a high-level overview of Windows Server File Server high-availability options.
  • Describe the characteristics of, and high-level implementation steps for Cluster Shared Volumes (CSV).
  • Describe the characteristics of, and high-level implementation steps for Scale-Out File Server (SOFS).
  • Describe the characteristics of, and high-level implementation steps for Storage Replica.

Learn how to implement scaling for virtual machine scale sets and load-balanced VMs. Also learn how to implement Azure Site Recovery.

Learning Objectives
  • Describe virtual machine scale sets.
  • Implement scaling.
  • Implement load-balancing virtual machines.
  • Implement Azure Site Recovery.

Learn about Hyper-V Replica, scenarios for its use, and prerequisites to use it. Learn about Azure Site Recovery and the benefits of using it, focusing on implementing Site Recovery in on-premises scenarios.

Learning Objectives
  • Describe Hyper-V Replica, pre-requisites for its use, and its high-level architecture and components.
  • Describe Hyper-V Replica usage scenarios, available replication settings, and security considerations.
  • Configure Hyper-V Replica settings, health monitoring, and failover options.
  • Implement Hyper-V Replica.
  • Describe extended replication.
  • Describe Site Recovery.
  • Implement Site Recovery.

Learn about Azure Backup before learning to implement Recovery Vaults and Azure Backup Policies. Learn to implement Windows IaaS VM recovery, perform backup and restore of on-premises workloads, and manage Azure VM backups.

Learning Objectives
  • Describe Azure Backup.
  • Implement Recovery Vaults.
  • Implement Azure Backup policies.
  • Recover Windows IaaS VMs.
  • Perform file and folder recovery.
  • Perform backup and recovery of on-premises workloads.
  • Explain how to manage Azure VM backups with Azure Backup.

Learn how to provide disaster recovery for your on-premises infrastructure by using Azure Site Recovery to manage and orchestrate replication. Use Site Recovery to perform failover and failback of VMware virtual machines, Hyper-V virtual machines, and physical servers.

Learning Objectives
  • Identify the features and protection capabilities Azure Site Recovery provides to on-premises infrastructure
  • Identify the requirements for enabling protection of on-premises infrastructure

Use Azure Backup to help protect on-premises servers, virtual machines, SQL Server, Azure file shares, and other workloads.

Learning Objectives
  • Identify the scenarios for which Azure Backup provides backup and restore capabilities
  • Back up and restore an Azure virtual machine

You're able to plan a migration and select appropriate server migration tools. You'll also learn how to use Azure Migrate, how to assess physical servers, and how to migrate those servers.

Learning Objectives
  • Plan your migration.
  • Describe Azure Migrate.
  • Migrate server workloads using Windows Server Migration Tools.
  • Assess physical servers with Azure Migrate.
  • Migrate on-premises servers to Azure.

Learn to migrate a workload running in Windows Server to an infrastructure as a service (IaaS) virtual machine (VM) and to Windows Server 2025 by using Windows Server migration tools or the Storage Migration Service.

Learning Objectives
  • Describe Windows Server IaaS migration.
  • Explain how to migrate workloads using Windows Server Migration tools.
  • Describe storage migration.
  • Migrate file servers by using the Storage Migration Service.

Determine the best approach to moving domain controllers to Windows Server 2025. Learn how the Active Directory Migration Tool can consolidate domains within a forest or migrate domains to a new AD DS forest.

Learning Objectives
  • Compare upgrading an AD DS forest and migrating to a new AD DS forest
  • Describe how to upgrade an existing AD DS forest
  • Describe how to migrate to a new AD DS forest
  • Describe Active Directory Migration Tool (ADMT)

Learn to use Storage Migration Service to migrate files and files shares from existing file server to new servers running Windows Server. Configure storage migration for optimum performance of data migration.

Learning Objectives
  • Describe Storage Migration Service and its usage scenarios
  • Identify the requirements for using Storage Migration Service
  • Describe how to migrate a server with storage migration
  • List the considerations for using Storage Migration Service

Learn how to install and use the Windows Server Migration Tools cmdlets to migrate commonly used server roles from earlier versions of Windows Server.

Learning Objectives
  • Describe the Windows Server Migration Tools
  • Use the migration tools to migrate specific Windows Server roles

Learn to implement Azure Monitor for IaaS VMs in Azure, implement Azure Monitor in on-premises environments, and use dependency maps.

Learning Objectives
  • Enable Azure Monitor for VMs.
  • Monitor an Azure VM with Azure Monitor.
  • Enable Azure Monitor in hybrid scenarios.
  • Collect data from a Windows computer in a hybrid environment.
  • Integrate Azure Monitor with Microsoft Operations Manager.

Learn how to monitor your Azure VMs by using Azure Monitor to collect and analyze VM host and client metrics and logs.

Learning Objectives
  • Understand which monitoring data you need to collect from your VM.
  • Enable and view recommended alerts and diagnostics.
  • Use Azure Monitor to collect and analyze VM host metrics data.
  • Use Azure Monitor Agent to collect VM client performance metrics and event logs.

Learn to use a range of Windows Server tools to monitor the operating system and applications on a server computer. You'll also learn to configure your system to optimize efficiency and to troubleshoot problems.

Learning Objectives
  • Use built-in tools in Windows Server to monitor server performance
  • Understand the fundamentals of server performance tuning

Learn how Event Viewer provides a convenient and accessible location for you to observe events that occur. Access event information quickly and conveniently. Learn how to interpret the data in the event log.

Learning Objectives
  • Describe event logs
  • Use Server Manager and Windows Admin Center to - Review event logs
  • Implement custom views
  • Configure an event subscription

Learn to audit and diagnose your Windows Server environment for regulatory compliance, user activity, and troubleshooting. Implement security best practices through regular audits of your network environment to gain early warning of potential malicious activity.

Learning Objectives
  • Audit Windows Server events
  • Configure Windows Server to record diagnostic information

Learn to troubleshoot on-premises connectivity and hybrid network connectivity. Diagnose common issues with DHCP, name resolution, IP configuration, and routing that can cause reliability and connectivity problems in an on-premises and a hybrid environment.

Learning Objectives
  • Diagnose DHCP and DNS problems in on-premises contexts.
  • Diagnose IP configuration and routing problems.
  • Implement Packet Monitor to help diagnose network problems.
  • Use Azure Network Watcher to troubleshoot Microsoft Azure virtual networks.

Learn to troubleshoot configuration issues that affect connectivity to your Azure-hosted Windows Server virtual machines (VMs). Explore approaches to resolve issues with VM startup, extensions, performance, storage, and encryption.

Learning Objectives
  • Troubleshoot VM deployment and extension issues
  • Troubleshoot VM startup and performance issues
  • Troubleshoot VM storage and encryption issues
  • Troubleshoot connectivity to VMs

Learn how to troubleshoot AD DS service failures or degraded performance. Learn how to recover deleted security objects and the AD DS database, and how to troubleshoot hybrid authentication issues.

Learning Objectives
  • Recover the AD DS database, objects in AD DS, and SYSVOL
  • Troubleshoot AD DS replication
  • Troubleshoot Hybrid authentication issues