AZ-802: Administer Windows Server

Microsoft AZ-802: Administer Windows Server Course Outline

Module 1: Deploy and Manage Active Directory Domain Services Domain Controllers

• Introduction
• Define Active Directory Domain Services
• Define Active Directory Domain Services Forests and Domains
• Deploy Active Directory Domain Services Domain Controllers
• Migrate a Domain Controller to a New Site
• Manage Active Directory Domain Services Operations Masters

Module 2: Deploy and Manage Azure IaaS Active Directory Domain Controllers in Azure

• Introduction
• Select an Option to Implement Directory and Identity Services Using Active Directory Domain Services in Azure
• Deploy and Configure Active Directory Domain Services Domain Controllers in Azure VMs
• Install a Replica Active Directory Domain Controller in an Azure VM
• Install a New Active Directory Forest on an Azure VNet

Module 3: Manage AD DS Domain Controllers and FSMO Roles

• Introduction 
• Deploy AD DS Domain Controllers
• Maintain AD DS Domain Controllers
• Manage the AD DS Global Catalog Role
• Manage AD DS Operations Masters
• Manage AD DS Schema

Module 4: Create and Manage Active Directory Objects

• Introduction
• Define Users, Groups, and Computers
• Define Organisational Units
• Manage Objects and Their Properties in Active Directory
• Create Objects in Active Directory
• Configure Objects in Active Directory
• Perform Bulk Management Tasks for User Accounts
• Maintain Active Directory Domain Services Domain Controllers

Module 5: Implement Hybrid Identity with Windows Server

• Introduction 
• Select a Microsoft Entra Integration Model
• Plan for Microsoft Entra Integration
• Prepare On-Premises Active Directory for Directory Synchronisation
• Install and Configure Directory Synchronisation with Microsoft Entra Connect
• Implement Seamless Single Sign-On
• Enable Microsoft Entra Login for Windows VM in Azure
• Knowledge Check 1
• Describe Microsoft Entra Domain Services
• Implement and Configure Microsoft Entra Domain Services
• Manage Windows Server in a Microsoft Entra Domain Services Environment
• Create and Configure a Microsoft Entra Domain Services Instance
• Join a Windows Server VM to a Managed Domain 

Module 6: Create and Configure Group Policy Objects in Active Directory

• Introduction
• Define Group Policy Objects
• Implement Group Policy Object Scope and Inheritance
• Define Domain-Based Group Policy Objects
• Create and Configure a Domain-Based Group Policy Object
• Configure a Domain Password Policy
• Configure and Apply a Fine-Grained Password Policy

Module 7: Implement Group Policy Objects

• Introduction
• Define GPOs
• Implement GPO Scope and Inheritance
• Define Domain-Based GPOs
• Create and Configure a Domain-Based GPO
• Define GPO Storage
• Define Administrative Templates

Module 8: Manage Advanced Features of AD DS

• Introduction
• Create Trust Relationships
• Implement ESAE Forests
• Monitor and Troubleshoot AD DS
• Create Custom AD DS Partitions

Module 9: Administer and Manage Windows Server IaaS Virtual Machine Remotely

• Introduction
• Select the Appropriate Remote Administration Tool
• Manage Windows Virtual Machines with Azure Bastion
• Create an Azure Bastion Host
• Configure Just-in-Time Administration

Module 10: Describe Windows Server Administration Tools

• Introduction
• Explore Windows Admin Center
• Use Server Manager
• List Remote Server Administration Tools
• Use Windows PowerShell
• Use Windows PowerShell to Remotely Administer a Server

Module 11: Just Enough Administration in Windows Server

• Introduction
• Explain the Concept of Just Enough Administration (JEA)
• Define Role Capabilities for a JEA Endpoint
• Create a Session Configuration File to Register a JEA Endpoint
• Describe How JEA Endpoints Work to Limit Access to a PowerShell Session
• Create and Connect to a JEA Endpoint
• Demonstration: Connect to a JEA Endpoint

Module 12: Perform Windows Server Secure Administration

• Introduction
• Define Least Privilege Administration
• Implement Delegated Privileges
• Use Privileged Access Workstations
• Use Jump Servers

Module 13: Use Advanced Windows PowerShell Remoting Techniques

• Introduction
• Review Common Remoting Techniques of Windows PowerShell
• Send Parameters to Remote Computers in Windows PowerShell
• Set Access Protection to Variables, Aliases, and Functions by Using the Scope Modifier
• Enable Multi-Hop Remoting in Windows PowerShell

Module 14: Manage Single and Multiple Computers by Using Windows PowerShell Remoting

• Introduction
• Review the Remoting Feature of Windows PowerShell
• Compare Remoting with Remote Connectivity
• Review the Remoting Security Feature of Windows PowerShell
• Enable Remoting by Using Windows PowerShell
• Use One-to-One Remoting by Using Windows PowerShell
• Use One-to-Many Remoting by Using Windows PowerShell
• Compare Remoting Output with Local Output

Module 15: Manage Hybrid Workloads with Azure Arc

• Introduction
• Describe Azure Arc
• Onboard Windows Server Instances
• Connect Hybrid Machines to Azure from the Azure Portal
• Use Azure Arc to Manage Windows Server Instances
• Restrict Access with RBAC

Module 16: Manage Azure Updates

• Introduction
• Describe Azure Update Manager
• Prepare Machines for Azure Update Manager
• Deploy Updates
• Assess Updates
• Manage Updates at Scale

Module 17: Automate the Configuration of Windows Server IaaS Virtual Machines

• Introduction
• Describe Azure Automation
• Implement Azure Automation with DSC
• Remediate Noncompliant Servers
• Describe Custom Script Extensions
• Configure a Virtual Machine by Using DSC

Module 18: Enforce VM Security Configuration with Azure Machine Configuration

• Introduction
• Explore Azure Machine Configuration Extension Capabilities and Modes
• Apply Built-in Security Baseline Policies
• Author and Assign Custom Machine Configurations

Module 19: Explore Azure Automation with DevOps

• Introduction
• Create Automation Accounts
• What is a Runbook?
• Understand Automation Shared Resources
• Explore Runbook Gallery
• Examine Webhooks
• Explore Source Control Integration
• Explore PowerShell Workflows
• Create a Workflow
• Explore Hybrid Management
• Examine Checkpoint and Parallel Processing

Module 20: Configure and Manage Hyper-V Virtual Machines

• Introduction
• List the Virtual Machine Configuration Versions
• List the Virtual Machine Generation Versions
• List Available VHD Formats and Types
• Create and Configure VMs
• Determine Storage Options for VMs
• Define Shared VHDs and VHD Sets
• Implement Guest Clusters Using Shared VHDX

Module 21: Configure and Manage Hyper-V

• Introduction
• Define Hyper-V
• Define Hyper-V Manager
• Configure Hyper-V Hosts Using Best Practices
• Configure Hyper-V Networking
• Assess Advanced Hyper-V Networking Features
• Define Nested Virtualisation

Module 22: Secure Hyper-V Workloads

• Introduction
• Define Guarded Fabric
• Define the Host Guardian Service
• Explore TPM-Trusted Attestation
• Define KPS
• Determine Key Features of Shielded VMs
• Compare Encryption-Supported and Shielded VMs in a Guarded Fabric
• Implement a Shielded VM

Module 23: Implement High Availability of Windows Server VMs

• Introduction
• Select High-Availability Options for Hyper-V
• Consider Network Load Balancing for Hyper-V VMs
• Implement Hyper-V VM Live Migration
• Implement Hyper-V VMs Storage Migration

Module 24: Run Containers on Windows Server

• Introduction
• Define Containers
• List the Differences Between Containers and VMs
• Define Windows Server and Hyper-V Containers and Isolation Modes
• Explore Docker
• Prepare a Windows Server 2019 Host for Container Deployment
• Security, Storage, and Networking with Windows Containers

Module 25: Plan and Deploy Windows Server IaaS Virtual Machines

• Introduction
• Describe Azure Compute
• Describe Virtual Machine Storage
• Deploy Azure Virtual Machines
• Create a Windows Virtual Machine Using the Portal
• Create a Windows Virtual Machine Using Azure CLI
• Deploy Azure Virtual Machines Using Templates
• Describe Additional Management Optimisation Options

Module 26: Implement Scale and High Availability with Windows Server VM

• Introduction
• Describe Virtual Machine Scale Sets
• Implement Scaling
• Implement Load-Balancing VMs
• Create a Virtual Machine Scale Set in the Azure Portal
• Describe Azure Site Recovery
• Implement Azure Site Recovery

Module 27: Implement Windows Server IaaS VM IP Addressing and Routing

• Introduction
• Implement a Virtual Network
• Implement IaaS VM IP Addressing
• Assign and Manage IP Addresses
• Configure a Private IP Address for a Virtual Machine Using the Azure Portal
• Create a Virtual Machine with a Static Public IP Address Using the Azure Portal
• Implement IaaS Virtual Machine IP Routing
• Implement IPv6 for Windows Server IaaS Virtual Machines

Module 28: Implement Windows Server IaaS VM Network Security

• Introduction 
• Implement Network Security Groups and Windows IaaS VMs
• Implement Azure Firewall and Windows IaaS VMs
• Implement Windows Firewall with Windows Server IaaS VMs
• Choose the Appropriate Filtering Solution
• Deploy and Configure Azure Firewall Using the Azure Portal
• Capture Network Traffic with Network Watcher
• Log Network Traffic to and from a VM Using the Azure Portal

Module 29: Administer and Manage Windows Server IaaS Virtual Machine Remotely

• Introduction
• Select the Appropriate Remote Administration Tool
• Manage Windows Virtual Machines with Azure Bastion
• Create an Azure Bastion Host
• Configure Just-in-Time Administration

Module 30: Implement Windows Server DNS

• Introduction
• Explore the DNS Architecture
• Work with DNS Zones and Records
• Install and Configure the DNS Role
• Implement DNS Forwarding

Module 31: Implement DNS for Windows Server IaaS VMs

• Introduction
• Understand Azure DNS
• Implement Azure DNS
• Create an Azure DNS Zone and Record Using the Azure Portal
• Implement DNS with Azure IaaS Virtual Machines
• Implement Split-Horizon DNS in Azure
• Troubleshoot DNS

Module 32: Secure Windows Server DNS

• Introduction
• Implement Split-Horizon DNS
• Create DNS Policies
• Implement DNS Policies
• Secure Windows Server DNS
• Implement DNSSEC

Module 33: Deploy and Manage DHCP

• Introduction
• Use DHCP to Simplify IP Configuration
• Install and Configure the DHCP Role
• Configure DHCP Options
• Configure DHCP Scopes
• Select DHCP High Availability Options
• Implement DHCP Failover

Module 34: Implement IP Address Management

• Introduction
• Define IP Address Management
• Deploy IP Address Management
• Administer IP Address Management
• Configure IP Address Management Options
• Manage DNS Zones with IP Address Management
• Manage DHCP Servers with IP Address Management
• Use IP Address Management to Manage IP Addressing

Module 35: Implement Windows Server IaaS VM IP Addressing and Routing

• Introduction 
• Implement a Virtual Network
• Implement IaaS VM IP Addressing
• Assign and Manage IP Addresses
• Configure a Private IP Address for a Virtual Machine Using the Azure Portal
• Create a Virtual Machine with a Static Public IP Address Using the Azure Portal
• Implement IaaS Virtual Machine IP Routing
• Implement IPv6 for Windows Server IaaS Virtual Machines

Module 36: Implement a Hybrid File Server Infrastructure

• Introduction 
• Describe Azure File Services
• Configure Azure Files
• Configure Connectivity to Azure Files
• Describe Azure File Sync
• Implement Azure File Sync
• Deploy Azure File Sync
• Deploy Azure File Sync 2
• Manage Cloud Tiering
• Migrate from DFSR to Azure File Sync

Module 37: Manage Windows Server File Servers

• Introduction 
• Define the Windows Server File System
• List the Benefits and Uses of File Server Resource Manager
• Define SMB and Its Security Considerations
• Configure SMB Protocol
• Define Volume Shadow Copy Service

Module 38: Implement Storage Spaces and Storage Spaces Direct

• Introduction
• Define the Storage Spaces Architecture and Its Components
• List the Functionalities, Benefits, and Use Cases of Storage Spaces
• Implement Storage Spaces
• List the Functionalities, Components, Benefits, and Use Cases of Storage Spaces Direct
• Implement Storage Spaces Direct

Module 39: Implement Windows Server Data Deduplication

• Introduction
• Define the Architecture, Components, and Functionality of Data Deduplication
• Define the Use Cases and Interoperability of Data Deduplication
• Implement Data Deduplication
• Manage and Maintain Data Deduplication

Module 40: Implement Windows Server iSCSI

• Introduction
• List the Functionalities, Components, and Use Cases of iSCSI
• List the Considerations for Implementing iSCSI
• Implement iSCSI
• Configure High Availability for iSCSI

Module 41: Implement Windows Server Storage Replica

• Introduction 
• List the Functionalities and Components of Storage Replica
• Examine the Prerequisites for Implementing Storage Replica
• Implement Storage Replica by Using Windows Admin Center
• Implement Storage Replica by Using Windows PowerShell

Module 42: Hardening Windows Server

• Introduction
• Describe Local Password Administrator Solution
• Configure Privileged Access Workstations
• Secure Domain Controllers
• Analyse Security Configuration with Security Compliance Toolkit
• Secure SMB Traffic

Module 43: Manage Microsoft Defender for Endpoint

• Introduction 
• Explore Microsoft Defender for Endpoint
• Examine Key Capabilities of Microsoft Defender for Endpoint
• Explore Windows Defender Application Control and Device Guard
• Explore Microsoft Defender Application Guard
• Examine Windows Defender Exploit Guard
• Explore Windows Defender System Guard

Module 44: Manage Microsoft Defender in Windows Client

• Introduction
• Explore Windows Security Centre
• Explore Windows Defender Credential Guard
• Manage Microsoft Defender Antivirus
• Manage Windows Defender Firewall
• Explore Windows Defender Firewall with Advanced Security

Module 45: Understand Active Directory Group Policy Security Settings

• Introduction
• Configure Account Policies
• Assign User Rights
• Configure Security Options
• Configure Audit Policy
• Secure Groups, Services, Registry, Files, and Logs
• Deploy Network and Application Security Policies
• Design, Deploy, and Manage Security Settings at Scale

Module 46: Manage Security in Active Directory

• Introduction
• Configure User Account Rights
• Configure User Account Rights to Restrict Access
• Delegate Permissions in Active Directory
• Protect User Accounts with the Protected Users Group
• Describe Windows Defender Credential Guard
• Block Windows NTLM Authentication
• Locate Problematic Accounts

Module 47: Understand Windows Server Service Accounts

• Introduction
• Understand Local Service Account Types
• Understand Managed Service Account Types
• Service Account Best Practices

Module 48: Secure Windows Server User Accounts

• Introduction
• Configure User Account Rights
• Protect User Accounts with the Protected Users Group
• Describe Windows Defender Credential Guard
• Block NTLM Authentication
• Locate Problematic Accounts

Module 49: Manage Security Controls for Identity and Access

• Introduction
• Microsoft Cloud Security Benchmark: Identity Management and Privileged Access
• What is Microsoft Entra ID?
• Secure Microsoft Entra Users
• Create a New User in Microsoft Entra ID
• Secure Microsoft Entra Groups
• Recommend When to Use External Identities
• Secure External Identities
• Implement Microsoft Entra Identity Protection
• Microsoft Entra Connect
• Microsoft Entra Cloud Sync
• Authentication Options
• Password Hash Synchronisation with Microsoft Entra ID
• Microsoft Entra Pass-Through Authentication
• Federation with Microsoft Entra ID
• What is Microsoft Entra Authentication?
• Implement Multifactor Authentication (MFA)
• Kerberos Authentication
• New Technology Local Area Network Manager (NTLM)
• Passwordless Authentication Options for Microsoft Entra ID
• Implement Passwordless Authentication
• Implement Password Protection
• Microsoft Entra ID Single Sign-On
• Implement Single Sign-On (SSO)
• Integrate Single Sign-On (SSO) and Identity Providers
• Introduction to Microsoft Entra Verified ID
• Configure Microsoft Entra Verified ID
• Recommend and Enforce Modern Authentication Protocols
• Azure Management Groups
• Configure Azure Role Permissions for Management Groups, Subscriptions, Resource Groups, and Resources
• Azure Role-Based Access Control
• Azure Built-in Roles
• Assign Azure Role Permissions for Management Groups, Subscriptions, Resource Groups, and Resources
• Microsoft Entra Built-in Roles
• Assign Built-in Roles in Microsoft Entra ID
• Microsoft Entra Role-Based Access Control
• Create and Assign a Custom Role in Microsoft Entra ID
• Zero Trust Security
• Microsoft Entra Privileged Identity Management
• Configure Privileged Identity Management
• Microsoft Entra ID Governance
• Identity Lifecycle Management
• Lifecycle Workflows
• Entitlement Management
• Delegation and Roles in Entitlement Management
• Access Reviews
• Configure Role Management and Access Reviews by Using Microsoft Entra ID Governance
• Implement Conditional Access Policies for Cloud Resources in Azure
• Azure Lighthouse Overview

Module 50: Security Monitoring and Governance

• Introduction
• Implement Pipeline Security
• Explore Microsoft Defender for Cloud
• Examine Microsoft Defender for Cloud Usage Scenarios
• Explore Azure Policy
• Understand Policies
• Explore Initiatives
• Explore Resource Locks
• Understand Microsoft Defender for Identity
• Integrate GitHub Advanced Security with Microsoft Defender for Cloud
• Configure GitHub Advanced Security for GitHub and Azure DevOps

Module 51: Monitor Windows Server IaaS Virtual Machines and Hybrid Instances

• Introduction 
• Enable Azure Monitor for Virtual Machines
• Monitor an Azure Virtual Machine with Azure Monitor
• Enable Azure Monitor in Hybrid Scenarios
• Collect Data from a Windows Computer in a Hybrid Environment
• Integrate Azure Monitor with Microsoft Operations Manager

Module 52: Monitor Your Azure Virtual Machines with Azure Monitor

• Introduction
• Monitoring for Azure VMs
• Monitor VM Host Data
• Use Metrics Explorer to View Detailed Host Metrics
• Collect Client Performance Counters by Using VM Insights
• Collect VM Client Event Logs

Module 53: Monitor Windows Server Performance

• Introduction 
• Use Performance Monitor to Identify Performance Problems
• Use Resource Monitor to Review Current Resource Usage
• Review Reliability with Reliability Monitor
• Implement a Performance Monitoring Methodology
• Use Data Collector Sets to Analyse Server Performance
• Monitor Network Infrastructure Services
• Monitor Virtual Machines Running Windows Server
• Monitor Performance with Windows Admin Center
• Use System Insights to Help Predict Future Capacity Issues
• Optimise the Performance of Windows Server

Module 54: Manage and Monitor Windows Server Event Logs

• Introduction 
• Describe Windows Server Event Logs
• Use Windows Admin Center to Review Logs
• Use Server Manager to Review Logs
• Use Custom Views
• Implement Event Log Subscriptions

Module 55: Implement Windows Server Auditing and Diagnostics

• Introduction
• Describe Basic Auditing Categories
• Describe Advanced Categories
• Log User Access
• Enable Setup and Boot Event Collection

Module 56: Troubleshoot On-Premises and Hybrid Networking

• Introduction
• Diagnose DHCP Problems
• Diagnose DNS Problems
• Diagnose IP Configuration Issues
• Diagnose Routing Problems
• Use Packet Monitor to Help Diagnose Network Problems
• Use Azure Network Watcher to Help Diagnose Network Problems

Module 57: Troubleshoot Windows Server Virtual Machines in Azure

• Introduction 
• Troubleshoot VM Deployment
• Troubleshoot VM Start-up
• Troubleshoot VM Extensions
• Troubleshoot VM Connectivity
• Troubleshoot VM Performance
• Troubleshoot VM Storage

Module 58: Windows Server Update ManagemenT

• Introduction
• Explore Windows Update
• Outline Windows Server Update Services Server Deployment Options
• Define Windows Server Update Services Update Management Process
• Describe the Process of Update Management

Module 59: Troubleshoot Active Directory

• Introduction 
• Recover Objects from the AD Recycle Bin
• Recover the AD DS Database
• Recover SYSVOL
• Troubleshoot AD DS Replication
• Troubleshoot Hybrid Authentication Issues
   

Who Should Attend this Microsoft AZ-802: Administer Windows Server Course?

The Microsoft AZ-802 Course is designed for professionals responsible for deploying, implementing, managing, and troubleshooting Windows Server workloads across on-premises, cloud, and hybrid environments. It is particularly suitable for those involved in managing identity, security, compute, networking, storage, and monitoring for Windows Server. The following professionals can benefit from this training

• Windows Server Administrators
• Systems Administrators
• Cloud Administrators
• Hybrid Infrastructure Administrators
• Infrastructure Engineers
• Network Administrators
• IT Operations Engineers
• Server Support Engineers

Prerequisites of the Microsoft AZ-802: Administer Windows Server Course

There are no formal prerequisites for attending the Microsoft AZ-802 Course. However, experience administering Windows Server and familiarity with Active Directory Domain Services, Hyper-V, PowerShell, and hybrid management technologies are recommended.
 

Microsoft AZ-802: Administer Windows Server Course Overview

The Microsoft AZ-802 Course covers Windows Server administration across on-premises, hybrid, and cloud environments. It includes AD DS, hybrid identity, Hyper-V and Azure Virtual Machines, networking, storage, security, monitoring, and troubleshooting.

Delegates will develop skills in administering Active Directory, managing Windows Server remotely, configuring Hyper-V and Azure VMs, and managing networking and storage. They will also gain practical knowledge of security, automation, monitoring, and hybrid management.

This 5-Day course by The Knowledge Academy enables delegates to administer and maintain Windows Server workloads across diverse environments. They will be able to manage infrastructure, secure servers, monitor performance, and troubleshoot common server and hybrid issues.

Microsoft AZ-802: Administer Windows Server Course Objectives

• To deploy and manage Active Directory Domain Services
• To administer Windows Server across hybrid environments
• To manage Hyper-V and Azure Virtual Machines
• To manage networking, DNS, DHCP, and IP addressing
• To configure storage, file services, and server security
• To monitor and troubleshoot Windows Server environments

After completing this course, delegates will be able to administer Windows Server across on-premises, hybrid, and Azure environments. They will be better prepared to manage identity, compute, networking, storage, security, monitoring, and troubleshooting tasks.

What’s Included in this Microsoft AZ-802: Administer Windows Server Course?

• World-Class Training Sessions from Experienced Instructors
• Interactive Learning with 24*7 Support
• Digital Delegate Pack