Microsoft Windows Server Administration in a Hybrid Environment

Develop the knowledge and practical skills needed to administer Windows Server infrastructure, maintain secure and reliable operations, and integrate on-premises servers with Microsoft Azure services.

• Windows Server and IT infrastructure administrators who deploy, manage, and monitor servers in on-premises, hybrid, or cloud environments.
• Professionals responsible for identity, virtual machines, networking, storage, server security, and troubleshooting.
• Everyone who wants to prepare for the AZ-802 certification exam.

• Deploy and manage Active Directory Domain Services (AD DS), user accounts, groups, and Group Policy.
• Administer Windows Server remotely and manage hybrid servers with Azure Arc.
• Configure Hyper-V infrastructure and manage Windows Server virtual machines on-premises and in Azure.
• Implement and administer DNS and DHCP services.
• Manage file servers and storage, and implement Azure Files and Azure File Sync.
• Strengthen server and user account security with Windows LAPS, Credential Guard, and Group Policy.
• Monitor server performance, analyze event logs, and troubleshoot networking and Active Directory issues.
• Apply the knowledge and skills gained during the course when preparing for the AZ-802 exam.

• Experience administering Windows Server and its services, including AD DS, Hyper-V, Distributed File System (DFS), and File and Storage Services.
• Understanding of core networking concepts, including IP addressing, name resolution, and DHCP.
• Basic knowledge of Microsoft Azure and hybrid technologies, including Windows Server virtual machines in Azure and Microsoft Entra ID.
• Experience using Windows Admin Center, command-line tools, and Windows PowerShell.

Electronic training materials available in Microsoft Learn and lab instructions within the lab environment. The course includes eight hands-on labs to develop practical Windows Server administration skills.

AZ-802: Administering Windows Server, associated with the Microsoft Certified: Windows Server Administrator Associate certification (the exam fee is already included in the course price).

1. Deploy and manage Active Directory Domain Services

• Deploy and administer AD DS domain controllers.
• Create and manage users, groups, computers, and organisational units.
• Create, configure, and implement Group Policy Objects (GPOs).
• Manage Group Policy scope, inheritance, and password policies.
• Manage AD DS trust relationships, replication, and advanced features.

Lab: Implementing identity services and Group Policy.

2. Manage Windows Server in a hybrid environment

• Administer Windows Server virtual machines remotely.
• Use Windows Admin Center, Server Manager, RSAT, and PowerShell.
• Secure remote administration with Azure Bastion and Just-in-Time access.
• Connect on-premises servers to Azure Arc and manage them.

Lab: Managing Windows Server.

3. Manage virtual machines

• Implement and configure Hyper-V.
• Manage virtual machines, virtual hard disks, and virtual switches.
• Configure networking and storage for virtualisation.
• Plan and deploy Windows Server virtual machines in Azure.

Lab: Implementing and configuring virtualisation in Windows Server.

4. Implement on-premises and hybrid networking infrastructure

• Implement and manage Windows Server DNS.
• Configure DNS zones, records, and forwarding.
• Explore DNS solutions in Azure.
• Configure DHCP scopes and options.
• Configure DHCP high availability and failover.

Lab: Implementing and configuring network infrastructure services in Windows Server.

5. Manage storage and file services

• Implement hybrid file server infrastructure with Azure Files and Azure File Sync.
• Configure file synchronisation and cloud tiering.
• Manage Windows Server file systems, SMB shares, and File Server Resource Manager.
• Implement Storage Spaces and Storage Spaces Direct.
• Configure Data Deduplication and iSCSI storage.

Lab: Implementing Azure File Sync.

Lab: Implementing storage solutions in Windows Server.

6. Secure Windows Server infrastructure

• Manage local administrator passwords with Windows LAPS.
• Protect privileged access and domain controllers.
• Assess security configurations with the Security Compliance Toolkit.
• Encrypt SMB traffic.
• Configure user rights, the Protected Users group, and Credential Guard.
• Audit and restrict NTLM authentication.

Lab: Configuring security in Windows Server.

7. Monitor and troubleshoot Windows Server environments

• Monitor server performance and analyse resource utilisation.
• Use Performance Monitor, Resource Monitor, and System Insights.
• Manage event logs and configure centralised event collection.
• Diagnose DNS, DHCP, IP configuration, and routing issues.
• Use Packet Monitor and Azure Network Watcher.
• Recover AD DS objects and databases, and troubleshoot SYSVOL and replication issues.
• Diagnose hybrid authentication and Microsoft Entra Connect synchronisation issues.

Lab: Monitoring and troubleshooting Windows Server.