AZ-802: Administer Windows Server

·         This course teaches IT professionals how to deploy, manage, secure, and troubleshoot Windows Server workloads across on-premises, hybrid, and cloud environments. It covers Active Directory, virtualisation, networking, storage, security, monitoring, automation, and hybrid management using Azure services and modern Windows Server administration tools.

This course is designed for:

• Windows Server administrators who manage on-premises, cloud, or hybrid environments.
• IT professionals responsible for identity, security, networking, storage, compute, and monitoring services.
• Administrators working with Active Directory, Hyper-V, PowerShell, Azure Arc, Azure Monitor, and Windows Admin Center.
• Technical staff preparing for the Microsoft Certified: Windows Server Administrator Associate certification.

Students should have:

• Experience administering Windows Server operating systems.
• Familiarity with Active Directory Domain Services (AD DS).
• Experience with Hyper-V and Azure virtual machines.
• Familiarity with DNS, DHCP, storage management, and networking concepts.
• Basic PowerShell knowledge.
• Familiarity with Azure portal and Azure Arc fundamentals.

After completing this course, students will be able to:

• Deploy and manage Active Directory Domain Services environments.
• Implement hybrid identity using Microsoft Entra ID and Windows Server.
• Configure and administer Group Policy across enterprise environments.
• Manage Windows Server workloads in Azure and hybrid infrastructures.
• Secure Windows Server using least-privilege administration and modern security controls.
• Deploy, manage, and protect Hyper-V and Azure virtual machines.
• Implement high availability and disaster recovery solutions.
• Configure DNS, DHCP, IPAM, and hybrid networking services.
• Deploy and manage Azure Arc, Azure Update Manager, and automation solutions.
• Configure file services, storage technologies, replication, and hybrid file server environments.

1. Deploy and manage Active Directory Domain Services domain controllers

Learn how to deploy, manage, migrate, and maintain AD DS domain controllers and understand Active Directory forests, domains, and operations masters.

2. Deploy and manage Azure IaaS Active Directory domain controllers in Azure

Implement AD DS domain controllers in Azure virtual machines and design hybrid directory services connectivity between on-premises and Azure environments.

3. Manage AD DS domain controllers and FSMO roles

Manage domain controllers, global catalog servers, backups, recovery processes, and Flexible Single Master Operations (FSMO) roles.

4. Create and manage Active Directory objects

Create and administer users, groups, organisational units, managed service accounts, and perform directory maintenance tasks.

5. Implement hybrid identity with Windows Server

Integrate on-premises AD DS with Microsoft Entra ID and implement directory synchronisation, SSO, and cloud-based identity services.

6. Create and configure Group Policy Objects in Active Directory

Create and manage domain-based Group Policy Objects and apply policy settings across Active Directory environments.

7. Implement Group Policy Objects

Implement and manage Group Policy Objects to control security, user settings, and device configurations.

8. Manage advanced features of AD DS

Administer trusts, replication, security enhancements, monitoring tools, and advanced Active Directory features.

9. Administer and manage Windows Server IaaS Virtual Machine remotely

Use Azure and Windows administration tools to securely manage Windows Server virtual machines remotely.

10. Describe Windows Server administration tools

Explore Windows Admin Center, Server Manager, RSAT, and PowerShell-based administration capabilities.

11. Just Enough Administration in Windows Server

Implement JEA to provide constrained administrative access and improve security.

12. Perform Windows Server secure administration

Apply least-privilege administration, delegated permissions, privileged access workstations, and jump servers.

13. Use advanced Windows PowerShell remoting techniques

Use advanced remoting features to improve the management of remote Windows Server systems.

14. Manage single and multiple computers by using Windows PowerShell remoting

Administer one or many remote systems through PowerShell remoting and manage secure remote access.

15. Manage hybrid workloads with Azure Arc

Onboard and manage servers through Azure Arc and apply centralised governance and management controls.

16. Manage Azure updates

Use Azure Update Manager to assess, deploy, and manage updates across Azure and Arc-enabled servers.

17. Automate the configuration of Windows Server IaaS Virtual Machines

Implement Desired State Configuration, Azure Automation, and scripting to standardise server configurations.

18. Enforce VM security configuration with Azure Machine Configuration

Audit and enforce operating system security baselines and compliance settings for Azure and Arc-enabled servers.

19. Configure and manage Hyper-V virtual machines

Create, configure, and maintain Hyper-V virtual machines, storage, and clustering options.

20. Configure and manage Hyper-V

Install and administer Hyper-V hosts, networking components, and virtualisation infrastructure.

21. Secure Hyper-V workloads

Protect virtualisation environments using guarded fabric, Host Guardian Service, and shielded virtual machines.

22. Implement high availability of Windows Server VMs

Configure clustering, live migration, and highly available virtual machine services.

23. Run containers on Windows Server

Deploy and manage Windows containers and container-host infrastructure.

24. Plan and deploy Windows Server IaaS Virtual Machines

Plan, deploy, and optimise Azure-based Windows Server virtual machines.

25. Implement scale and high availability with Windows Server VM

Implement scaling, load balancing, and disaster recovery capabilities in Azure virtual machine environments.

26. Implement Windows Server IaaS VM IP addressing and routing

Configure Azure networking, IP addressing, routing, and virtual network connectivity for virtual machines.

27. Implement Windows Server IaaS VM network security

Secure Azure virtual machine networks using NSGs, Azure Firewall, Windows Defender Firewall, and monitoring tools.

28. Implement Windows Server DNS

Deploy and manage DNS services, zones, forwarding, and name resolution infrastructure.

29. Implement DNS for Windows Server IaaS VMs

Configure DNS services for Azure-based Windows Server virtual machines and hybrid environments.

30. Secure Windows Server DNS

Implement DNS security controls, DNS policies, and DNSSEC protections.

31. Deploy and manage DHCP

Deploy, configure, and troubleshoot DHCP services including failover and high availability solutions.

32. Implement IP Address Management

Use IPAM to centrally manage DNS, DHCP, address spaces, and network administration activities.

33. Implement a hybrid file server infrastructure

Deploy Azure Files and Azure File Sync to build and manage hybrid file services.

34. Manage Windows Server file servers

Administer file services, SMB features, FSRM, quotas, reports, and file storage security.

35. Implement Storage Spaces and Storage Spaces Direct

Configure software-defined storage solutions using Storage Spaces and Storage Spaces Direct.

36. Implement Windows Server Data Deduplication

Reduce storage usage and optimise storage resources through Data Deduplication technologies.

37. Implement Windows Server iSCSI

Configure block-level storage solutions using iSCSI targets, initiators, and redundancy options.

38. Implement Windows Server Storage Replica

Deploy Storage Replica for high availability, disaster recovery, and cross-site storage replication.