Become a Microsoft Certified Windows Server Administrator Associate (AZ-802 + AZ-900)

Microsoft Azure AZ-900 fundamentals (1 day)

Module 1: discover cloud computing

• Different cloud computing concepts.
• Cloud services (IaaS, PaaS, SaaS).
• Public, private and hybrid cloud models.

Module 2: discover core Azure services

• Main components of Azure architecture.
• Azure workloads.
• Azure networking services.
• Azure storage services.
• Azure database structure.

Module 3: select suitable Azure solutions and tools

• Selecting an Azure IoT service.
• Selecting an AI service.
• Selecting an Azure server technology.
• Selecting suitable tools for DevOps and GitHub.
• Selecting management tools.
• Selecting an Azure monitoring service.

Module 4: discover basic Azure security and networking features

• Security tools and features.
• Configuring network connectivity.

Module 5: manage identities, governance and compliance

• Core Azure identity services.
• Azure governance strategy.
• Privacy, compliance and data protection standards.

Module 6: control Azure costs and the service lifecycle

• Forecasting and managing expenditure.
• Managing service-level agreements (SLAs).

Windows Server administration with AZ-802 (4 days)

Module 7: deploy and manage Active Directory Domain Services (AD DS)

• Deploying and managing domain controllers on premises and in Azure.
• Deploying read-only domain controllers (RODCs) and managing account security.
• Managing and troubleshooting Flexible Single-Master Operations (FSMO) roles.
• Configuring trust relationships between domains and forests.
• Configuring and managing AD DS sites and replication.
• Creating and managing users, groups and service accounts.
• Implementing Group Policy Objects (GPOs) and preferences.

Lab

• Deploy a hybrid domain controller and configure a Group Policy.

Module 8: manage Windows Server instances in a hybrid environment

• Configuring remote management: Windows Admin Center, PowerShell (double-hop, JEA), SSH and Remote Desktop.
• Implementing Azure Arc-enabled Windows Server instances.
• Configuring devices through Azure Arc and deploying virtual machine extensions on non-Azure servers.
• Managing updates with Azure Update Manager and creating Azure Automation runbooks.

Lab

• Connect a server to Azure Arc and deploy an update through Azure Update Manager.

Module 9: manage virtual machines

• Configuring memory, integration services and device assignment.
• GPU partitioning and managing virtual machine checkpoints.
• High availability for Hyper-V virtual machines and Hyper-V replication.
• Managing storage, capacity and availability sets for Azure VMs.
• Managing just-in-time (JIT) access and Azure Bastion.

Lab

• Configure GPU partitioning on a Hyper-V virtual machine and manage just-in-time access to an Azure VM.

Module 10: implement and manage on-premises and hybrid networking infrastructure

• On-premises and hybrid name resolution: DNS integration with AD DS, zones, conditional forwarders and DNSSEC security.
• Managing IP addressing in hybrid scenarios: DHCP role, reservations and DHCP high availability.

Lab

• Configure hybrid name resolution and DHCP high availability.

Module 11: manage storage and file services

• Creating and managing Azure Files shares and permissions.
• Configuring Azure File Sync and migrating DFS or file shares to Azure Files.
• Configuring access, File Server Resource Manager (FSRM) and DFS.
• Configuring SMB over QUIC and SMB settings.
• Configuring disks, volumes, Storage Spaces and Storage Spaces Direct.
• Managing BitLocker and recovering encrypted volumes.

Lab

• Configure an Azure File Sync share and a Storage Spaces Direct cluster.

Module 12: secure Windows Server infrastructure

• Configuring exploit protection, Application Control and Credential Guard.
• Managing baseline security through OSConfig and implementing Windows Local Administrator Password Solution (LAPS).
• Configuring Microsoft Defender for Servers and Windows Firewall.
• Configuring password policies and implementing Microsoft Entra Password Protection for AD DS.
• Hardening domain controllers and managing protected users.
• Managing AD delegation and authentication protocols.

Lab

• Implement Microsoft Entra Password Protection and harden a domain controller.

Module 13: monitor and troubleshoot Windows Server environments

• Monitoring with Performance Monitor, System Insights and Windows Admin Center.
• Configuring data collection rules and Azure Monitor alerts.
• Monitoring Azure virtual machines with VM Insights.
• Troubleshooting connectivity, name resolution and Windows Update issues.
• Troubleshooting performance, disk encryption and storage issues.
• Restoring objects from the AD Recycle Bin and recovering SYSVOL.
• Troubleshooting replication and Kerberos authentication issues.

Lab

• Diagnose a performance incident and restore an object from the Active Directory Recycle Bin.