Windows Server Hybrid Administrator AI-802 Training - Armenia

Windows Server Hybrid Administrator AI-802 Course Outline

Module 1: Introduction to AD DS

• Introduction
• Define AD DS
• Define Users, Groups, and Computers
• Define AD DS Forests and Domains
• Define OUs
• Manage Objects and Their Properties in AD DS

Module 2: Manage AD DS Domain Controllers and FSMO Roles

• Introduction
• Deploy AD DS Domain Controllers
• Maintain AD DS Domain Controllers
• Manage the AD DS Global Catalog Role
• Manage AD DS Operations Masters
• Manage AD DS Schema

Module 3: Implement Group Policy Objects

• Introduction
• Define GPOs
• Implement GPO Scope and Inheritance
• Define Domain-Based GPOs
• Create and Configure a Domain-Based GPO
• Define GPO Storage
• Define Administrative Templates

Module 4: Manage Advanced Features of AD DS

• Introduction
• Create Trust Relationships
• Implement ESAE Forests
• Monitor and Troubleshoot AD DS
• Create Custom AD DS Partitions

Module 5: Implement Hybrid Identity with Windows Server

• Introduction
• Select a Microsoft Entra Integration Model
• Plan for Microsoft Entra Integration
• Prepare On-Premises Active Directory for Directory Synchronization
• Install and Configure Directory Synchronization with Microsoft Entra Connect
• Implement Seamless Single Sign-On
• Enable Microsoft Entra Login for Windows VM in Azure
• Knowledge Check
• Describe Microsoft Entra Domain Services
• Implement and Configure Microsoft Entra Domain Services
• Manage Windows Server in a Microsoft Entra Domain Services Environment
• Create and Configure a Microsoft Entra Domain Services Instance
• Join a Windows Server VM to a Managed Domain

Module 6: Deploy and Manage Azure IaaS Active Directory Domain Controllers in Azure

• Introduction
• Select an Option to Implement Directory and Identity Services Using Active Directory Domain Services in Azure
• Deploy and Configure Active Directory Domain Services Domain Controllers in Azure VMs
• Install a Replica Active Directory Domain Controller in an Azure VM
• Install a New Active Directory Forest on an Azure VNet

Module 7: Perform Windows Server Secure Administration

• Introduction
• Define Least Privilege Administration
• Implement Delegated Privileges
• Use Privileged Access Workstations
• Use Jump Servers

Module 8: Describe Windows Server Administration Tools

• Introduction
• Explore Windows Admin Center
• Use Server Manager
• List Remote Server Administration Tools
• Use Windows PowerShell
• Use Windows PowerShell to Remotely Administer a Server

Module 9: Perform Post-Installation Configuration of Windows Server

• Introduction
• List the Available Post-Installation Configuration Tools
• Configure Server Core Using Sconfig
• Use DSC to Configure Windows Server
• Perform Post-Installation Configuration with Windows Admin Center
• Configure a Server with Answer Files

Module 10: Administer and Manage Windows Server IaaS Virtual Machine Remotely

• Introduction
• Select the Appropriate Remote Administration Tool
• Manage Windows Virtual Machines with Azure Bastion
• Create an Azure Bastion Host
• Configure Just-in-Time Administration

Module 11: Manage Hybrid Workloads with Azure Arc

• Introduction
• Describe Azure Arc
• Onboard Windows Server Instances
• Connect Hybrid Machines to Azure from the Azure Portal
• Use Azure Arc to Manage Windows Server Instances
• Restrict Access with RBAC

Module 12: Just Enough Administration in Windows Server

• Introduction
• Explain the Concept of Just Enough Administration (JEA)
• Define Role Capabilities for a JEA Endpoint
• Create a Session Configuration File to Register a JEA Endpoint
• Describe How JEA Endpoints Work to Limit Access to a PowerShell Session
• Create and Connect to a JEA Endpoint
• Demonstration: Connect to a JEA Endpoint

Module 13: Configure and Manage Hyper-V

• Introduction
• Define Hyper-V
• Define Hyper-V Manager
• Configure Hyper-V Hosts Using Best Practices
• Configure Hyper-V Networking
• Assess Advanced Hyper-V Networking Features
• Define Nested Virtualization

Module 14: Configure and Manage Hyper-V Virtual Machines

• Introduction
• List the Virtual Machine Configuration Versions
• List the Virtual Machine Generation Versions
• List Available VHD Formats and Types
• Create and Configure VMs
• Determine Storage Options for VMs
• Define Shared VHDs and VHD Sets
• Implement Guest Clusters Using Shared VHDX

Module 15: Secure Hyper-V Workloads

• Introduction
• Define Guarded Fabric
• Define the Host Guardian Service
• Explore TPM-Trusted Attestation
• Define KPS
• Determine Key Features of Shielded VMs
• Compare Encryption-Supported and Shielded VMs in a Guarded Fabric
• Implement a Shielded VM

Module 16: Plan and Deploy Windows Server IaaS Virtual Machines

• Introduction
• Describe Azure Compute
• Describe Virtual Machine Storage
• Deploy Azure Virtual Machines
• Create a Windows Virtual Machine Using the Portal
• Create a Windows Virtual Machine Using Azure CLI
• Deploy Azure Virtual Machines Using Templates
• Describe Additional Management Optimization Options

Module 17: Customize Windows Server IaaS Virtual Machine Images

• Introduction
• Create a Generalized Image
• Create a New Virtual Machine from a Managed Image
• Create a Managed Image of a Generalized Virtual Machine in Azure
• Create a Virtual Machine from a Managed Image
• Implement Azure Image Builder
• Create a Windows Virtual Machine Using Azure Image Builder Template
• Create a Windows Virtual Machine with Azure Image Builder Using PowerShell

Module 18: Automate the Configuration of Windows Server IaaS Virtual Machines

• Introduction
• Describe Azure Automation
• Implement Azure Automation with DSC
• Remediate Noncompliant Servers
• Describe Custom Script Extensions
• Configure a Virtual Machine by Using DSC

Module 19: Run Containers on Windows Server

• Introduction
• Define Containers
• List the Differences Between Containers and VMs
• Define Windows Server and Hyper-V Containers and Isolation Modes
• Explore Docker
• Prepare a Windows Server 2019 Host for Container Deployment
• Security, Storage, and Networking with Windows Containers

Module 20: Orchestrate Containers on Windows Server Using Kubernetes

• Introduction
• Define Orchestration
• Define Kubernetes
• Deploy Kubernetes Resources
• Create a Kubernetes Cluster on Windows
• Define Azure Arc
• Connect an Azure Arc-Enabled Kubernetes Cluster to Azure Arc

Module 21: Implement DNS for Windows Server IaaS VMs

• Introduction
• Understand Azure DNS
• Implement Azure DNS
• Create an Azure DNS Zone and Record Using the Azure Portal
• Implement DNS with Azure IaaS Virtual Machines
• Implement Split-Horizon DNS in Azure
• Troubleshoot DNS

Module 22: Deploy and Manage DHCP

• Introduction
• Use DHCP to Simplify IP Configuration
• Install and Configure the DHCP Role
• Configure DHCP Options
• Configure DHCP Scopes
• Select DHCP High Availability Options
• Implement DHCP Failover

Module 23: Implement Windows Server DNS

• Introduction
• Explore the DNS Architecture
• Work with DNS Zones and Records
• Install and Configure the DNS Role
• Implement DNS Forwarding

Module 24: Implement IP Address Management

• Introduction
• Define IP Address Management
• Deploy IP Address Management
• Administer IP Address Management
• Configure IP Address Management Options
• Manage DNS Zones with IP Address Management
• Manage DHCP Servers with IP Address Management
• Use IP Address Management to Manage IP Addressing

Module 25: Implement Remote Access

• Introduction
• Examine the Remote Access Options in Windows Server
• Select and Set Up VPNs
• Use NPS to Create and Enforce Network Access Policies
• Plan and Implement NPS
• Deploy a PKI for Remote Access
• Use WAP as a Reverse Web Proxy

Module 26: Implement Hybrid Network Infrastructure

• Introduction
• Describe Azure Network Topologies
• Implement Azure VPN Options
• Create a Route-Based VPN Gateway Using the Azure Portal
• Implement Azure ExpressRoute
• Configure Azure Virtual WAN
• Implement DNS in Hybrid Environments

Module 27: Implement Windows Server IaaS VM IP Addressing and Routing

• Introduction
• Implement a Virtual Network
• Implement IaaS VM IP Addressing
• Assign and Manage IP Addresses
• Configure a Private IP Address for a Virtual Machine Using the Azure Portal
• Create a Virtual Machine with a Static Public IP Address Using the Azure Portal
• Implement IaaS Virtual Machine IP Routing
• Implement IPv6 for Windows Server IaaS Virtual Machines

Module 28: Manage Windows Server File Servers

• Introduction
• Define the Windows Server File System
• List the Benefits and Uses of File Server Resource Manager
• Define SMB and Its Security Considerations
• Configure SMB Protocol
• Define Volume Shadow Copy Service

Module 29: Implement Storage Spaces and Storage Spaces Direct

• Introduction
• Define the Storage Spaces Architecture and Its Components
• List the Functionalities, Benefits, and Use Cases of Storage Spaces
• Implement Storage Spaces
• List the Functionalities, Components, Benefits, and Use Cases of Storage Spaces Direct
• Implement Storage Spaces Direct

Module 30: Implement Windows Server Data Deduplication

• Introduction
• Define the Architecture, Components, and Functionality of Data Deduplication
• Define the Use Cases and Interoperability of Data Deduplication
• Implement Data Deduplication
• Manage and Maintain Data Deduplication

Module 31: Implement Windows Server iSCSI

• Introduction
• List the Functionalities, Components, and Use Cases of iSCSI
• List the Considerations for Implementing iSCSI
• Implement iSCSI
• Configure High Availability for iSCSI

Module 32: Implement Windows Server Storage Replica

• Introduction
• List the Functionalities and Components of Storage Replica
• Examine the Prerequisites for Implementing Storage Replica
• Implement Storage Replica by Using Windows Admin Center
• Implement Storage Replica by Using Windows PowerShell

Module 33: Implement a Hybrid File Server Infrastructure

• Introduction
• Describe Azure File Services
• Configure Azure Files
• Configure Connectivity to Azure Files
• Describe Azure File Sync
• Implement Azure File Sync
• Deploy Azure File Sync
• Manage Cloud Tiering
• Migrate from DFSR to Azure File Sync

Module 34: Implement Windows Server IaaS VM Network Security

• Introduction
• Implement Network Security Groups and Windows IaaS VMs
• Implement Azure Firewall and Windows IaaS VMs
• Implement Windows Firewall with Windows Server IaaS VMs
• Choose the Appropriate Filtering Solution
• Deploy and Configure Azure Firewall Using the Azure Portal
• Capture Network Traffic with Network Watcher
• Log Network Traffic to and from a VM Using the Azure Portal

Module 35: Audit the Security of Windows Server IaaS Virtual Machines

• Introduction
• Describe Microsoft Defender for Cloud
• Enable Microsoft Defender for Cloud in Hybrid Environments
• Implement and Assess Security Policies
• Protect Your Resources with Microsoft Defender for Cloud
• Implement Microsoft Sentinel

Module 36: Manage Azure Updates

• Introduction
• Describe Update Management
• Enable Update Management
• Deploy Updates
• View Update Assessments
• Manage Updates for Your Azure Virtual Machines

Module 37: Configure BitLocker Disk Encryption for Windows IaaS Virtual Machines

• Introduction
• Describe Azure Disk Encryption and Server-Side Encryption
• Configure Key Vault for Azure Disk Encryption
• Encrypt Azure IaaS Virtual Machine Hard Disks
• Back Up and Recover Data from Encrypted Disks
• Create and Encrypt a Windows Virtual Machine

Module 38: Implement Change Tracking and File Integrity Monitoring for Windows IaaS VMs

• Introduction
• Implement Change Tracking and Inventory
• Manage Change Tracking and Inventory
• Manage Tracked Files
• Implement File Integrity Monitoring
• Select and Monitor Entities
• Use File Integrity Monitoring

Module 39: Secure Windows Server DNS

• Introduction
• Implement Split-Horizon DNS
• Create DNS Policies
• Implement DNS Policies
• Secure Windows Server DNS
• Implement DNSSEC

Module 40: Secure Windows Server User Accounts

• Introduction
• Configure User Account Rights
• Protect User Accounts with the Protected Users Group
• Describe Windows Defender Credential Guard
• Block NTLM Authentication
• Locate Problematic Accounts

Module 41: Hardening Windows Server

• Introduction
• Describe Local Password Administrator Solution
• Configure Privileged Access Workstations
• Secure Domain Controllers
• Analyze Security Configuration with Security Compliance Toolkit
• Secure SMB Traffic

Module 42: Windows Server Update Management

• Introduction
• Explore Windows Update
• Outline Windows Server Update Services Server Deployment Options
• Define Windows Server Update Services Update Management Process
• Describe the Process of Update Management

Module 43: Introduction to Cluster Shared Volumes

• Introduction
• Determine the Functionality of Cluster Shared Volumes
• Explore the Architecture and Components of Cluster Shared Volumes
• Implement Cluster Shared Volumes

Module 44: Implement Windows Server Failover Clustering

• Introduction
• Define Windows Server Failover Clustering
• Plan Windows Server Failover Clustering
• Implement Windows Server Failover Clustering
• Manage Windows Server Failover Clustering
• Implement Stretch Clusters
• Define Cluster Sets

Module 45: Implement High Availability of Windows Server VMs

• Introduction
• Select High-Availability Options for Hyper-V
• Consider Network Load Balancing for Hyper-V VMs
• Implement Hyper-V VM Live Migration
• Implement Hyper-V VMs Storage Migration

Module 46: Implement Windows Server File Server High Availability

• Introduction
• Explore the Windows Server File Server High-Availability Options
• Define Cluster Shared Volumes
• Implement Scale-Out File Server
• Implement Storage Replica

Module 47: Implement Scale and High Availability with Windows Server VM

• Introduction
• Describe Virtual Machine Scale Sets
• Implement Scaling
• Implement Load-Balancing VMs
• Create a Virtual Machine Scale Set in the Azure Portal
• Describe Azure Site Recovery
• Implement Azure Site Recovery

Module 48: Implement Hyper-V Replica

• Introduction
• Define Hyper-V Replica
• Plan for Hyper-V Replica
• Configure and Implement Hyper-V Replica
• Define Extended Replication
• Define Azure Site Recovery
• Implement Site Recovery from On-Premises Site to Azure
• Implement Site Recovery from On-Premises Site to On-Premises Site

Module 49: Implement Hybrid Backup and Recovery with Windows Server IaaS

• Introduction
• Describe Azure Backup
• Implement Recovery Vaults
• Implement Azure Backup Policies
• Recover Windows IaaS Virtual Machines
• Perform File and Folder Recovery
• Perform Backup and Restore of On-Premises Workloads
• Manage Azure Virtual Machine Backups with Azure Backup Service

Module 50: Protect Your On-Premises Infrastructure from Disasters with Azure Site Recovery

• Introduction
• Azure Site Recovery Overview
• Workloads Supported for Protection with Azure Site Recovery
• Run a Disaster Recovery Drill
• Failover and Failback

Module 51: Protect Your Virtual Machines by Using Azure Backup

• Introduction
• Azure Backup Features and Scenarios
• Back Up an Azure Virtual Machine by Using Azure Backup
• Exercise - Back Up an Azure Virtual Machine
• Restore Virtual Machine Data
• Exercise - Restore Azure Virtual Machine Data

Module 52: Migrate On-Premises Windows Server Instances to Azure IaaS Virtual Machines

• Introduction
• Plan Your Migration
• Describe Azure Migrate
• Perform Server Assessment
• Assess Physical Servers with Azure Migrate
• Migrate Windows Server Workloads by Using Azure Migrate

Module 53: Upgrade and Migrate Windows Server IaaS Virtual Machines

• Introduction
• Describe Azure Migrate
• Migrate Windows Server Workloads by Using Azure Migrate
• Describe Storage Migration
• Migrate File Servers by Using Storage Migration Service

Module 54: Active Directory Domain Services Migration

• Introduction
• Examine Upgrade vs. Migration
• Upgrade a Previous Version of Active Directory Domain Services to Windows Server 2025
• Migrate to Active Directory Domain Services in Windows Server 2025 from a Previous Version

Module 55: Migrate File Server Workloads Using Storage Migration Service

• Introduction
• Storage Migration Service Overview and Usage Scenarios
• Storage Migration Requirements
• Migrate a Server with Storage Migration
• Evaluate Storage Migration Considerations

Module 56: Migrate Windows Server Roles

• Introduction
• Describe the Windows Server Migration Tools
• Install the Migration Tools
• Migrate Roles Using the Migration Tools

Module 57: Monitor Windows Server IaaS Virtual Machines and Hybrid Instances

• Introduction
• Enable Azure Monitor for Virtual Machines
• Monitor an Azure Virtual Machine with Azure Monitor
• Enable Azure Monitor in Hybrid Scenarios
• Collect Data from a Windows Computer in a Hybrid Environment
• Integrate Azure Monitor with Microsoft Operations Manager

Module 58: Monitor Your Azure Virtual Machines with Azure Monitor

• Introduction
• Monitoring for Azure VMs
• Monitor VM Host Data
• Use Metrics Explorer to View Detailed Host Metrics
• Collect Client Performance Counters by Using VM Insights
• Collect VM Client Event Logs

Module 59: Monitor Windows Server Performance

• Introduction
• Use Performance Monitor to Identify Performance Problems
• Use Resource Monitor to Review Current Resource Usage
• Review Reliability with Reliability Monitor
• Implement a Performance Monitoring Methodology
• Use Data Collector Sets to Analyze Server Performance
• Monitor Network Infrastructure Services
• Monitor Virtual Machines Running Windows Server
• Monitor Performance with Windows Admin Center
• Use System Insights to Help Predict Future Capacity Issues
• Optimize the Performance of Windows Server

Module 60: Manage and Monitor Windows Server Event Logs

• Introduction
• Describe Windows Server Event Logs
• Use Windows Admin Center to Review Logs
• Use Server Manager to Review Logs
• Use Custom Views
• Implement Event Log Subscriptions

Module 61: Implement Windows Server Auditing and Diagnostics

• Introduction
• Describe Basic Auditing Categories
• Describe Advanced Categories
• Log User Access
• Enable Setup and Boot Event Collection

Module 62: Troubleshoot On-Premises and Hybrid Networking

• Introduction
• Diagnose DHCP Problems
• Diagnose DNS Problems
• Diagnose IP Configuration Issues
• Diagnose Routing Problems
• Use Packet Monitor to Help Diagnose Network Problems
• Use Azure Network Watcher to Help Diagnose Network Problems

Module 63: Troubleshoot Windows Server Virtual Machines in Azure

• Introduction
• Troubleshoot VM Deployment
• Troubleshoot VM Startup
• Troubleshoot VM Extensions
• Troubleshoot VM Connectivity
• Troubleshoot VM Performance
• Troubleshoot VM Storage

Module 64: Troubleshoot Active Directory

• Introduction
• Recover Objects from the AD Recycle Bin
• Recover the AD DS Database
• Recover SYSVOL
• Troubleshoot AD DS Replication
• Troubleshoot Hybrid Authentication Issues

Who Should Attend this Windows Server Hybrid Administrator AI-802 Course?

This course is designed for professionals looking to manage and secure hybrid Windows Server environments effectively. It is suitable for individuals aiming to build expertise in Azure integration, identity management, and infrastructure administration. Delegates who will benefit from this course are:

• System Administrator
• Cloud Administrator
• Network Administrator
• IT Support Engineer
• Infrastructure Engineer
• DevOps Engineer
• Security Administrator
• IT Professional

Prerequisites for this Windows Server Hybrid Administrator AI-802 Course

There are no formal prerequisites for this course. However, a basic understanding of Windows Server, networking, and cloud concepts will be beneficial.

Windows Server Hybrid Administrator AI-802 Course Overview

The Windows Server Hybrid Administrator AI-802 Training provides delegates with a comprehensive understanding of managing hybrid infrastructure using Windows Server and Azure. It focuses on identity management, virtualisation, networking, and security.

This training helps delegates build the skills required to manage complex hybrid environments, automate administrative tasks, and ensure system reliability. It supports improved performance, scalability, and secure infrastructure management.

This 4-Day course offered by The Knowledge Academy enables delegates to apply hybrid administration techniques effectively. Delegates gain practical expertise to manage modern IT environments confidently.

Windows Server Hybrid Administrator AI-802 Course Objectives

• To understand hybrid Windows Server architecture and manage on-premises and Azure environments
• To implement Active Directory, Group Policy, and hybrid identity with Microsoft Entra integration
• To configure networking components including DNS, DHCP, IP addressing, and hybrid connectivity
• To apply security practices such as access control, identity protection, and system hardening
• To automate administration using PowerShell, Azure tools, and configuration management
• To monitor performance, manage logs, and troubleshoot hybrid infrastructure issues

Upon completion of this Windows Server Hybrid Administrator AI-802 Course, delegates will be able to manage hybrid environments effectively. They will also enhance their ability to implement secure, scalable, and high-performing infrastructure solutions.

What's Included in this Windows Server Hybrid Administrator AI-802 Course?

• World-Class Training Sessions from Experienced Instructors
• Windows Server Hybrid Administrator AI-802 Certificate
• Interactive Learning with 24*7 Support
• Digital Delegate Pack
   

You’ll also get access to the MyTKA Training Portal, which will be your go to hub for all your training.
Hands-On Labs: Included as part of our online instructor-led delivery, these labs provide real-world exercises in a simulated environment guided by expert instructors to enhance your practical skills.