Configuring Windows Server Hybrid Advanced Services (AZ-801)

This four-day instructor-led course is designed for IT professionals who configure advanced Windows Server services using on-premises, hybrid, and cloud technologies. These professionals manage and support an infrastructure that includes on-premises and Azure IaaS -hosted Windows Server-based workloads. The course teaches IT professionals how to leverage the hybrid capabilities of Azure, how to migrate virtual and physical server workloads to Azure IaaS, and how to manage and secure Azure VM s running Windows Server. The course also covers how to perform tasks related to high availability, troubleshooting, and disaster recovery. The course highlights various administrative tools and technologies including Windows Admin Center, PowerShell, Azure Arc, Azure Automation Update Management, Microsoft Defender for Identity, Azure Security Center, Azure Migrate, and Azure Monitor.

Windows Server Hybrid Advanced Services Delivery Methods

• In-Person

• Online

Windows Server Hybrid Advanced Services Course Benefits

• Harden the security configuration of the Windows Server operating system environment.

• Enhance hybrid security using Azure Security Center, Azure Sentinel, and Windows Update Management.

• Apply security features to protect critical resources.

• Implement high availability and disaster recovery solutions.

• Implement recovery services in hybrid scenarios.

• Plan and implement hybrid and cloud-only migration, backup, and recovery scenarios.

• Perform upgrades and migration related to AD DS , and storage.

• Manage and monitor hybrid scenarios using WAC , Azure Arc, Azure Automation, and Azure Monitor.

• Implement service monitoring and performance monitoring and apply troubleshooting.

• Continue learning and face new challenges with after-course one-on-one instructor coaching.

Windows Server Hybrid Advanced Services Instructor-Led Outline

Important Windows Server Hybrid Advanced Services Information

Prerequisites

Before attending this course, students must have:

• Experience with managing Windows Server operating system and Windows Server workloads in on-premises scenarios, including AD DS , DNS , DFS , Hyper-V, and File and Storage Services
• Experience with common Windows Server management tools (implied in the first prerequisite)
• Basic knowledge of core Microsoft compute, storage, networking, and virtualization technologies (implied in the first prerequisite)
• Experience and an understanding of core networking technologies such as IP addressing, name resolution, and Dynamic Host Configuration Protocol ( DHCP )
• Experience working with and an understanding of Microsoft Hyper-V and basic server virtualization concepts
• An awareness of basic security best practices
• Basic understanding of security-related technologies (firewalls, encryption, multi-factor authentication, ( SIEM / SOAR )
• Basic knowledge of on-premises resiliency Windows Server-based compute and storage technologies (Failover Clustering, Storage Spaces)
• Basic experience with implementing and managing IaaS services in Microsoft Azure
• Basic knowledge of Azure Active Directory
• Experience working hands-on with Windows client operating systems such as Windows 10 or Windows 11
• Basic experience with Windows PowerShell

An understanding of the following concepts as related to Windows Server technologies:

• High availability and disaster recovery
• Automation
• Monitoring
• Troubleshooting

Who should attend?

This four-day course is intended for Windows Server Hybrid Administrators who have experience working with Windows Server and want to extend the capabilities of their on-premises environments by combining on-premises and hybrid technologies. Windows Server Hybrid Administrators who already implement and manage on-premises core technologies want to secure and protect their environments, migrate virtual and physical workloads to Azure IaaS , enable a highly available, fully redundant environment, and perform monitoring and troubleshooting.

Exam Information

This class helps attendees prepare for the Microsoft Certification AZ-801: Configuring Windows Server Hybrid Advanced Services

Module 1: Windows Server security

In this Module, you will learn how to:

Lessons

• Diagnose and remediate potential security vulnerabilities in Windows Server resources.
• Harden the security configuration of the Windows Server operating system environment.
• Deploy operating system updates to computers on a network by using Windows Server Update Services.
• Secure Windows Server DNS to help protect the network name resolution infrastructure.
• Implement DNS policies.

Lab: Configuring security in Windows Server

• Configuring Windows Defender Credential Guard
• Locating problematic accounts
• Implementing LAPS

Module 2: Implementing security solutions in hybrid scenarios

In this Module, you will learn how to:

Lessons

• Diagnose network security issues in Windows Server IaaS virtual machines.
• Onboard Windows Server computers to Azure Security Center.
• Deploy and manage updates for Azure VMs by enabling Azure Automation Update Management.
• Implement Adaptive application controls to protect Windows Server IaaS VM s.
• Configure Azure Disk Encryption for Windows IaaS virtual machines (VMs).
• Back up and recover encrypted data.
• Monitor Windows Server Azure IaaS VMs for changes in files and the registry.

Lab: Using Azure Security Center in hybrid scenarios

• Provisioning Azure VMs running Windows Server
• Configuring Azure Security Center
• Onboarding on-premises Windows Server into Azure Security Center
• Verifying the hybrid capabilities of Azure Security Center
• Configuring Windows Server 2019 security in Azure VMs

Module 3: Implementing high availability

In this Module, you will learn how to:

Lessons

• Implement highly available storage volumes by using Clustered Share Volumes.
• Implement highly available Windows Server workloads using failover clustering.
• Describe Hyper-V VMs load balancing.
• Implement Hyper-V VMs live migration and Hyper-V VMs storage migration.
• Describe Windows Server File Server high availability options.
• Implement scaling for virtual machine scale sets and load-balanced VMs.
• Implement Azure Site Recovery.

Lab: Implementing failover clustering

• Configuring iSCSI storage
• Configuring a failover cluster
• Deploying and configuring a highly available file server
• Validating the deployment of the highly available file server

Module 4: Disaster recovery in Windows Server

In this Module, you will learn how to:

Lessons

• Describe Hyper-V Replica, pre-requisites for its use, and its high-level architecture and components.
• Describe Hyper-V Replica use cases and security considerations.
• Configure Hyper-V Replica settings, health monitoring, and failover options.
• Describe extended replication.
• Replicate, failover, and failback virtual machines and physical servers with Azure Site Recovery.

Lab: Implementing Hyper-V Replica and Windows Server Backup

• Implementing Hyper-V Replica
• Implementing backup and restore with Windows Server Backup

Module 5: Implementing recovery services in hybrid scenarios

In this Module, you will learn how to:

Lessons

• Recover Windows Server IaaS virtual machines by using Azure Backup.
• Use Azure Backup to help protect the data for on-premises servers and virtualized workloads.
• Implement Recovery Vaults and Azure Backup policies.
• Protect Azure VMs with Azure Site Recovery.
• Run a disaster recovery drill to validate protection.
• Failover and failback Azure virtual machines.

Lab: Implementing Azure-based recovery services

• Implementing the lab environment
• Creating and configuring an Azure Site Recovery vault
• Implementing Hyper-V VM protection by using Azure Site Recovery vault
• Implementing Azure Backup

Module 6: Upgrade and migrate in Windows Server

In this Module, you will learn how to:

Lessons

• Compare upgrading an AD DS forest and migrating to a new AD DS forest.
• Describe the Active Directory Migration Tool ( ADMT ).
• Identify the requirements and considerations for using Storage Migration Service.
• Describe how to migrate a server with storage migration.
• Use the Windows Server Migration Tools to migrate specific Windows Server roles.

Lab: Migrating Windows Server workloads to IaaS VMs

• Deploying AD DS domain controllers in Azure
• Migrating file server shares by using Storage Migration Service

Module 7: Implementing migration in hybrid scenarios

In this Module, you will learn how to:

Lessons

• Plan a migration strategy and choose the appropriate migration tools.
• Perform server assessment and discovery using Azure Migrate.
• Migrate Windows Server workloads to Azure VM workloads using Azure Migrate.
• Explain how to migrate workloads using Windows Server Migration tools.
• Migrate file servers by using the Storage Migration Service.
• Discover and containerize ASP.NET applications running on Windows.
• Migrate a containerized application to Azure App Service.

Lab: Migrating on-premises VMs servers to IaaS VMs

• Implementing assessment and discovery of Hyper-V VMs using Azure Migrate
• Implementing migration of Hyper-V workloads using Azure Migrate

Module 8: Server and performance monitoring in Windows Server

In this Module, you will learn how to:

Lessons

• Explain the fundamentals of server performance tuning.
• Use built-in tools in Windows Server to monitor server performance.
• Use Server Manager and Windows Admin Center to review event logs.
• Implement custom views.
• Configure an event subscription.
• Audit Windows Server events.
• Configure Windows Server to record diagnostic information.
• Recover the AD DS database and objects in AD DS.
• Troubleshoot AD DS replication.
• Troubleshoot hybrid authentication issues.

Lab: Monitoring and troubleshooting Windows Server

• Establishing a performance baseline
• Identifying the source of a performance problem
• Viewing and configuring centralized event logs

Module 9: Implementing operational monitoring in hybrid scenarios

In this Module, you will learn how to:

Lessons

• Implement Azure Monitor for IaaS VMs in Azure and in on-premises environments.
• Implement Azure Monitor for IaaS VMs in Azure and in on-premises environments.
• View VM metrics in Azure Metrics Explorer.
• Use monitoring data to diagnose problems.
• Evaluate Azure Monitor Logs and configure Azure Monitor VM Insights.
• Configure a Log Analytics workspace.
• Troubleshoot on-premises connectivity and hybrid network connectivity.
• Troubleshoot AD DS service failures or degraded performance.
• Recover deleted security objects and the AD DS database.
• Troubleshoot hybrid authentication issues.

Lab: Monitoring and troubleshooting of IaaS VMs running Windows Server

• Enabling Azure Monitor for virtual machines
• Setting up a VM with boot diagnostics
• Setting up a Log Analytics workspace and Azure Monitor VM Insights