AZ-800T00-A: Administering Windows Server Hybrid Core Infrastructure

Course Description

This course teaches IT Professionals how to manage core Windows Server workloads and services using on-premises, hybrid, and cloud technologies. The course teaches IT Professionals how to implement and manage on-premises and hybrid solutions such as identity, management, compute, networking, and storage in a Windows Server hybrid environment.

Audience Profile

This four-day course is intended for Windows Server Hybrid Administrators who have experience working with Windows Server and want to extend the capabilities of their on-premises environments by combining on-premises and hybrid technologies. Windows Server Hybrid Administrators implement and manage on-premises and hybrid solutions such as identity, management, compute, networking, and storage in a Windows Server hybrid environment.

About this Course

Course Outline

Skills at a glance

Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments (30–35%)
Manage Windows Servers and workloads in a hybrid environment (10–15%)
Manage virtual machines and containers (15–20%)
Implement and manage an on-premises and hybrid networking infrastructure (15–20%)
Manage storage and file services (15–20%)

Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments (30–35%)

Deploy and manage AD DS domain controllers

Deploy and manage domain controllers on-premises
Deploy and manage domain controllers in Azure
Deploy read-only domain controllers (RODCs)
Troubleshoot flexible single master operation (FSMO) roles

Configure and manage multi-site, multi-domain, and multi-forest environments

Configure and manage forest and domain trusts
Configure and manage AD DS sites
Configure and manage AD DS replication

Create and manage AD DS security principals

Create and manage AD DS users and groups
Manage users and groups in multi-domain and multi-forest scenarios
Implement Group Managed Service Accounts (gMSAs)
Join Windows Servers to AD DS, Microsoft Entra Domain Services, and Microsoft Entra

Implement and manage hybrid identities

Integrate Microsoft Entra ID, AD DS and Microsoft Entra Domain Services
Implement Microsoft Entra Connect Sync
Manage Microsoft Entra Connect Sync synchronization
Implement Microsoft Entra Cloud Sync
Manage Microsoft Entra Domain Services
Manage Microsoft Entra Connect Health
Manage authentication in on-premises and hybrid environments
Configure and manage AD DS passwords

Manage Windows Server by using domain-based Group Policies

Implement Group Policy in AD DS
Implement Group Policy Preferences in AD DS
Implement Group Policy in Microsoft Entra Domain Services

Manage Windows Servers and workloads in a hybrid environment (10–15%)

Manage Windows Servers in a hybrid environment

Deploy a Windows Admin Center Gateway server
Configure a target machine for Windows Admin Center
Configure PowerShell remoting
Configure Credential Security Support Provider protocol (CredSSP) or Kerberos Delegation for 2nd Hop Remoting
Configure Just Enough Administration (JEA) for PowerShell remoting

Manage Windows Servers and workloads by using Azure services

Manage Windows Servers by using Azure Arc
Create and assign Azure Policy that uses guest configuration extension
Deploy Azure services using VM extensions on non-Azure machines
Manage updates for Windows machines
Integrate Windows Servers with Log Analytics
Integrate Windows Servers with Microsoft Defender for Cloud
Manage Windows Server Azure VMs
Implement Azure Automation for hybrid workloads
Create runbooks to automate tasks on target VMs
Implement Azure Automation State Configuration to prevent configuration drift in IaaS machines

Manage virtual machines and containers (15–20%)

Manage Hyper-V and guest virtual machines

Enable VM Enhanced session mode
Manage VM using PowerShell remoting, PowerShell Direct and Secure Shell (SSH) Direct for Linux VMs
Configure nested virtualization
Configure VM Memory
Configure integration services
Configure Discrete Device Assignment
Configure VM resource groups
Configure VM CPU groups
Configure hypervisor scheduling types
Manage VM checkpoints
Implementing high availability for virtual machines
Manage virtual hard disk (VHD) and virtual hard disk v2 (VHDX) files
Configure Hyper-V Network Adapter
Configure network interface card (NIC) Teaming
Configure Hyper-V Switch

Create and manage containers

Create Windows Server container images
Manage Windows Server container images
Configure container networking
Manage container instances

Manage Azure Virtual Machines that run Windows Server

Manage data disks
Resize Azure VM
Configure connections to VMs
Manage Azure VM network configuration

Implement and manage an on-premises and hybrid networking infrastructure (15–20%)

Implement on-premises and hybrid name resolution

Integrate DNS with AD DS
Create and manage DNS zones and records
Configure DNS forwarding/conditional forwarding
Integrate Windows Server DNS with Azure DNS private zones
Implement Domain Name System Security Extensions (DNSSEC)

Manage IP addressing in on-premises and hybrid scenarios

Implement and manage IP Address Management (IPAM)
Implement and configure the Dynamic Host Configuration protocol (DHCP) server role (on-premises only)
Resolve IP address issues in hybrid environments
Create and manage DHCP scopes
Create and manage IP reservations
Implement DHCP high availability

Manage storage and file services (15–20%)

Configure and manage Azure File Sync

Create Azure File Sync Service
Create sync groups
Create cloud endpoints
Register servers
Create server endpoints
Configure cloud tiering
Monitor File Sync
Migrate Distributed File System (DFS) to Azure File Sync

Configure and manage Windows Server file shares

Configure Windows Server file share access
Configuring file screens
Configure file server resource manager (FSRM) quotas
Configure BranchCache
Implement and configure Distributed File System (DFS)

Configure Windows Server storage

Configure disks and volumes
Configure and manage Storage Spaces
Configure and manage Storage Replica
Configure Data Deduplication
Configure Server Message Block (SMB) direct
Configure Storage QoS
Configure file systems