Configuring Windows Server Hybrid Advanced Services

• Erfahrung mit der Verwaltung von Windows Server-Betriebssystemen und Windows Server-Workloads in lokalen Szenarios, einschließlich AD DS, DNS, DFS, Hyper-V und Datei-/Speicherdiensten
• Erfahrung mit allgemeinen Windows Server-Verwaltungstools (impliziert in der ersten Voraussetzung)
• Grundlegende Kenntnisse der zentralen Compute-, Speicher-, Netzwerk- und Virtualisierungstechnologien von Microsoft (impliziert in der ersten Voraussetzung)
• Erfahrung und Kenntnisse der wichtigsten Netzwerktechnologien wie IP-Adressierung, Namensauflösung und Dynamic Host Configuration Protocol (DHCP)
• Erfahrung im Umgang mit und Kenntnisse zu Microsoft Hyper-V und grundlegenden Servervirtualisierungskonzepten
• Wissen um grundlegende bewährte Methoden im Sicherheitsbereich
• Grundlegende Kenntnisse zu sicherheitsbezogenen Technologien (Firewalls, Verschlüsselung, mehrstufige Authentifizierung, SIEM/SOAR)
• Grundlegende Kenntnisse zu auf Windows Server basierenden Compute- und Speichertechnologien für lokale Resilienz (Failoverclustering, Speicherplätze)
• Grundlegende Kenntnisse zur Implementierung und Verwaltung von IaaS-Diensten in Microsoft Azure
• Grundlegende Kenntnisse im Umgang mit Azure Active Directory
• Praktische Erfahrung im Umgang mit Windows-Clientbetriebssystemen wie Windows 10 oder Windows 11
• Grundlegende Erfahrung mit Windows PowerShell

Ein Verständnis folgender Konzepte im Zusammenhang mit Windows Server-Technologien:

• Hochverfügbarkeit und Notfallwiederherstellung
• Automatisierung
• Überwachung
• Problembehandlung

In diesem Kurs erfahren IT-Expert*innen, wie sie fortgeschrittene Windows Server-Dienste mithilfe lokaler, hybrider und cloudbasierter Technologien konfigurieren. In diesem Kurs erfahren IT-Expert*innen, wie Sie die Hybridfunktionen von Azure nutzen können, virtuelle und physische Serverworkloads zu Azure IaaS migrieren und Azure-VMs unter Windows Server schützen. In diesem Kurs erfahren IT-Expert*innen auch, wie sie Aufgaben im Zusammenhang mit Hochverfügbarkeit, Problembehandlung und Notfallwiederherstellung ausführen. In diesem Kurs werden Verwaltungstools und -technologien wie Windows Admin Center, PowerShell, Azure Arc, die Azure Automation-Updateverwaltung, Microsoft Defender for Identity, Azure Security Center, Azure Migrate und Azure Monitor vorgestellt.
Dieser viertägige Kurs richtet sich an Windows Server-Hybridadministrator*innen, die Erfahrung mit Windows Server haben und die Funktionen ihrer lokalen Umgebungen erweitern möchten, indem sie lokale und hybride Technologien kombinieren. Windows Server-Hybridadministrator*inne, die bereits lokale Kerntechnologien implementieren und verwalten, möchten ihre Umgebungen sichern und schützen, virtuelle und physische Workloads zu Azure IaaS migrieren, eine hochverfügbare, vollständig redundante Umgebung bereitstellen und Überwachung und Problembehandlung durchführen.
Secure Windows Server user accounts

• Introduction
• Configure user account rights
• Protect user accounts with the Protected Users group
• Describe Windows Defender Credential Guard
• Block NTLM authentication
• Locate problematic accounts

Hardening Windows Server

• Describe Local Password Administrator Solution
• Configure Privileged Access Workstations
• Secure domain controllers
• Analyze security configuration with Security Compliance Toolkit
• Secure SMB traffic
• Knowledge check

Windows Server update management

• Explore Windows Update
• Outline Windows Server Update Services server deployment options
• Define Windows Server Update Services update management process
• Describe the process of Update Management

Secure Windows Server DNS

• Implement split-horizon DNS
• Create DNS policies
• Implement DNS policies
• Secure Windows Server DNS
• Implement DNSSEC

Implement Windows Server IaaS VM network security

• Implement network security groups and Windows IaaS VMs
• Implement adaptive network hardening
• Implement Azure Firewall and Windows IaaS VMs
• Implement Windows firewall with Windows Server IaaS VMs
• Choose the appropriate filtering solution
• Deploy and configure Azure firewall using the Azure portal
• Capture network traffic with network watcher
• Log network traffic to and from a VM using the Azure portal

Audit the security of Windows Server IaaS Virtual Machines

• Describe Azure Security Center
• Enable Azure Security Center in hybrid environments
• Implement and assess security policies
• Protect your resources with Azure Security Center
• Implement Azure Sentinel

Manage Azure updates

• Describe update management
• Enable update management
• Deploy updates
• View update assessments
• Manage updates for your Azure Virtual Machines

Create and implement application allowlists with adaptive application control

• Describe adaptive application control
• Implement adaptive application control policies

Configure BitLocker disk encryption for Windows IaaS Virtual Machines

• Describe Azure Disk Encryption and server-side encryption
• Configure Key Vault for Azure Disk Encryption
• Encrypt Azure IaaS Virtual Machine hard disks
• Back up and recover data from encrypted disks
• Create and encrypt a Windows Virtual Machine

Implement change tracking and file integrity monitoring for Windows IaaS VMs

• Implement Change Tracking and Inventory
• Manage Change Tracking and Inventory
• Manage tracked files
• Implement File Integrity Monitoring
• Select and monitor entities
• Use File Integrity Monitoring

Introduction to Cluster Shared Volumes

• Determine the functionality of Cluster Shared Volumes
• Explore the architecture and components of Cluster Shared Volumes
• Implement Cluster Shared Volumes

Implement Windows Server failover clustering

• Define Windows Server failover clustering
• Plan Windows Server failover clustering
• Implement Windows Server failover clustering
• Manage Windows Server failover clustering
• Implement stretch clusters
• Define cluster sets

Implement high availability of Windows Server VMs

• Select high-availability options for Hyper-V
• Consider network load balancing for Hyper-V VMs
• Implement Hyper-V VM live migration
• Implement Hyper-V VMs storage migration

Implement Windows Server File Server high availability

• Explore the Windows Server File Server high-availability options
• Define Cluster Shared Volumes
• Implement Scale-Out File Server
• Implement Storage Replica

Implement scale and high availability with Windows Server VM

• Describe virtual machine scale sets
• Implement scaling
• Implement load-balancing VMs
• Create a virtual machine scale set in the Azure portal
• Describe Azure Site Recovery
• Implement Azure Site Recovery

Implement Hyper-V Replica

• Define Hyper-V Replica
• Plan for Hyper-V Replica
• Configure and implement Hyper-V Replica
• Define extended replication
• Define Azure Site Recovery
• Implement Site Recovery from on-premises site to Azure
• Implement Site Recovery from on-premises site to on-premises site

Protect your on-premises infrastructure from disasters with Azure Site Recovery

• Azure Site Recovery overview
• Workloads supported for protection with Azure Site Recovery
• Run a disaster recovery drill
• Failover and failback

Implement hybrid backup and recovery with Windows Server IaaS

• Describe Azure Backup
• Implement recovery vaults
• Implement Azure Backup policies
• Recover Windows IaaS Virtual Machines
• Perform file and folder recovery
• Perform backup and restore of on-premises workloads
• Manage Azure Virtual Machine backups with Azure Backup service

Protect your Azure infrastructure with Azure Site Recovery

• What is Azure Site Recovery
• Prepare for disaster recovery with Azure Site Recovery
• Exercise – Set up disaster recovery with Azure Site Recovery
• Run a disaster recovery drill
• Exercise – Run a disaster recovery drill
• Failover and failback using Azure Site Recovery

Protect your virtual machines by using Azure Backup

• Azure Backup features and scenarios
• Back up an Azure virtual machine by using Azure Backup
• Exercise – Back up an Azure virtual machine
• Restore virtual machine data

Active Directory Domain Services migration

• Examine upgrade vs. migration
• Upgrade a previous version of Active Directory Domain Services to Windows Server 2022
• Migrate to Active Directory Domain Services in Windows Server 2022 from a previous version
• Explore the Active Directory Migration Tool

Migrate file server workloads using Storage Migration Service

• Storage Migration Service overview and usage scenarios
• Storage migration requirements
• Migrate a server with Storage migration
• Evaluate storage migration considerations

Migrate Windows Server roles

• Describe the Windows Server Migration Tools
• Install the Migration Tools
• Migrate roles using the Migration Tools

Migrate on-premises Windows Server instances to Azure IaaS virtual machines

• Plan your migration
• Describe Azure Migrate
• Perform server assessment
• Assess physical servers with Azure Migrate
• Migrate Windows Server workloads by using Azure Migrate

Upgrade and migrate Windows Server IaaS virtual machines

• Describe Azure Migrate
• Migrate Windows Server workloads by using Azure Migrate
• Describe storage migration
• Migrate file servers by using Storage Migration Service

Containerize and migrate ASP.NET applications to Azure App Service
Azure Migrate App Containerization overview

Monitor Windows Server performance

• Use Performance Monitor to identify performance problems
• Use Resource Monitor to review current resource usage
• Review reliability with Reliability Monitor
• Implement a performance monitoring methodology
• Use Data Collector Sets to analyze server performance
• Monitor network infrastructure services
• Monitor virtual machines running Windows Server
• Monitor performance with Windows Admin Center
• Use System Insights to help predict future capacity issues
• Optimize the performance of Windows Server

Manage and monitor Windows Server event logs

• Describe Windows Server event logs
• Use Windows Admin Center to review logs
• Use Server Manager to review logs
• Use custom views
• Implement event log subscriptions

Implement Windows Server auditing and diagnostics

• Describe basic auditing categories
• Describe advanced categories
• Log user access
• Enable setup and boot event collection

Troubleshoot Active Directory

• Recover objects from the AD recycle bin
• Recover the AD DS database
• Recover SYSVOL
• Troubleshoot AD DS replication
• Troubleshoot hybrid authentication issues

Monitor Windows Server IaaS Virtual Machines and hybrid instances

• Enable Azure Monitor for Virtual Machines
• Monitor an Azure Virtual Machine with Azure Monitor
• Enable Azure Monitor in hybrid scenarios
• Collect data from a Windows computer in a hybrid environment
• Integrate Azure Monitor with Microsoft Operations Manager

Monitor the health of your Azure virtual machine by using Azure Metrics Explorer and metric alerts

• Monitor the health of the virtual machine
• Exercise – Set up a VM with boot diagnostics
• View VM metrics
• Configure the Azure Diagnostics extension
• Exercise – Configure the Azure Diagnostics extension
• Diagnostic data case studies

Monitor performance of virtual machines by using Azure Monitor VM Insights

• What are Azure Monitor Logs and Azure Monitor VM Insights?
• Exercise – Set up a Log Analytics workspace and Azure Monitor VM Insights
• Build log queries by using the Kusto Query Language

Troubleshoot on-premises and hybrid networking

• Diagnose DHCP problems
• Diagnose DNS problems
• Diagnose IP configuration issues
• Diagnose routing problems
• Use Packet Monitor to help diagnose network problems
• Use Azure Network Watcher to help diagnose network problems

Troubleshoot Windows Server Virtual Machines in Azure

• Troubleshoot VM deployment
• Troubleshoot VM startup
• Troubleshoot VM extensions
• Troubleshoot VM connectivity
• Troubleshoot VM performance
• Troubleshoot VM storage

https://www.etc.at/seminare/AZ-801T00