Course Outline
Module 1: Windows Server Security
This module explores strategies to protect an Active Directory environment by securing user accounts with least-privilege principles and assigning them to the Protected Users group. It covers limiting authentication scope and remediating insecure accounts, as well as hardening the Windows Server operating system configuration. The module also discusses using Windows Server Update Services to deploy OS updates across the network and securing Windows Server DNS to safeguard network name resolution infrastructure.
Lessons
- Securing Windows Server user accounts.
- Hardening Windows Server.
- Windows Server Update Management.
- Securing Windows Server DNS.
Lab : Configuring Security in Windows Server
- Configuring Windows Defender Credential Guard.
- Locating problematic accounts.
- Implementing LAPS.
After completing this module, students will be able to:
- Diagnose and remediate security vulnerabilities in Windows Server resources.
- Harden the security configuration of the Windows Server operating system.
- Deploy OS updates to network computers using Windows Server Update Services.
- Secure Windows Server DNS to protect network name resolution infrastructure.
- Implement DNS policies.
Module 2: Implementing Security Solutions in Hybrid Scenarios
This module focuses on securing on-premises Windows Server resources and Azure IaaS workloads. It covers enhancing network security for Windows Server IaaS VMs and diagnosing associated security issues. The module introduces Azure Security Center, explaining how to onboard Windows Server computers to it. It also details enabling Azure Update Management, deploying and reviewing updates for Azure VMs, and using Adaptive application controls and BitLocker disk encryption for protection. Finally, it explains monitoring Windows Server Azure IaaS VMs for file, registry, and application software modifications.
Lessons
- Implementing Windows Server IaaS VM network security.
- Auditing the security of Windows Server IaaS Virtual Machines.
- Managing Azure updates.
- Creating and implementing application allowlists with adaptive application control.
- Configuring BitLocker disk encryption for Windows IaaS Virtual Machines.
- Implementing change tracking and file integrity monitoring for Windows Server IaaS VMs.
Lab : Using Azure Security Center in Hybrid Scenarios
- Provisioning Azure VMs running Windows Server.
- Configuring Azure Security Center.
- Onboarding on-premises Windows Server into Azure Security Center.
- Verifying the hybrid capabilities of Azure Security Center.
- Configuring Windows Server security in Azure VMs.
After completing this module, students will be able to:
- Diagnose network security issues in Windows Server IaaS virtual machines.
- Onboard Windows Server computers to Azure Security Center.
- Deploy and manage updates for Azure VMs by enabling Azure Automation Update Management.
- Implement Adaptive application controls to protect Windows Server IaaS VMs.
- Configure Azure Disk Encryption for Windows IaaS VMs.
- Back up and recover encrypted data.
- Monitor Windows Server Azure IaaS VMs for changes in files and the registry.
Module 3: Implementing High Availability
This module outlines technologies and options for creating a highly available Windows Server environment. It introduces Clustered Shared Volumes for shared storage access across cluster nodes and highlights failover clustering, stretch clusters, and cluster sets for workload availability. The module discusses high availability provisions for Hyper-V and Windows Server VMs, including network load balancing, live migration, and storage migration. It also covers availability options for shares on Windows Server file servers and describes implementing scaling for virtual machine scale sets and load-balanced VMs, as well as using Azure Site Recovery.
Lessons
- Introduction to Cluster Shared Volumes.
- Implementing Windows Server failover clustering.
- Implementing high availability of Windows Server VMs.
- Implementing Windows Server File Server high availability.
- Implementing scaling and high availability with Windows Server VMs.
Lab : Implementing Failover Clustering
- Configuring iSCSI storage.
- Configuring a failover cluster.
- Deploying and configuring a highly available file server.
- Validating the deployment of the highly available file server.
After completing this module, students will be able to:
- Implement highly available storage volumes using Clustered Share Volumes.
- Implement highly available Windows Server workloads using failover clustering.
- Describe Hyper-V VMs load balancing.
- Implement Hyper-V VMs live migration and storage migration.
- Describe Windows Server File Server high availability options.
- Implement scaling for virtual machine scale sets and load-balanced VMs.
- Implement Azure Site Recovery.
Module 4: Disaster Recovery in Windows Server
This module introduces Hyper-V Replica as a business continuity and disaster recovery solution for virtual environments. It discusses Hyper-V Replica scenarios, use cases, and prerequisites. The module also covers implementing Azure Site Recovery in on-premises scenarios for disaster recovery.
Lessons
- Implementing Hyper-V Replica.
- Protecting on-premises infrastructure from disasters with Azure Site Recovery.
Lab : Implementing Hyper-V Replica and Windows Server Backup
- Implementing Hyper-V Replica.
- Implementing backup and restore with Windows Server Backup.
After completing this module, students will be able to:
- Describe Hyper-V Replica, its prerequisites, high-level architecture, and components.
- Describe Hyper-V Replica use cases and security considerations.
- Configure Hyper-V Replica settings, health monitoring, and failover options.
- Describe extended replication.
- Replicate, failover, and failback virtual machines and physical servers with Azure Site Recovery.
Module 5: Implementing Recovery Services in Hybrid Scenarios
This module covers tools and technologies for disaster recovery in hybrid scenarios, building on the previous module's focus on on-premises BCDR. It begins with Azure Backup as a service for protecting files and folders, then explains implementing Recovery Vaults and Azure Backup Policies. The module describes recovering Windows IaaS virtual machines, performing backup and restore of on-premises workloads, and managing Azure VM backups. It also covers providing disaster recovery for Azure infrastructure by managing and orchestrating replication, failover, and failback of Azure virtual machines with Azure Site Recovery.
Lessons
- Implementing hybrid backup and recovery with Windows Server IaaS.
- Protecting Azure infrastructure with Azure Site Recovery.
- Protecting virtual machines by using Azure Backup.
Lab : Implementing Azure-Based Recovery Services
- Implementing the lab environment.
- Creating and configuring an Azure Site Recovery vault.
- Implementing Hyper-V VM protection by using Azure Site Recovery vault.
- Implementing Azure Backup.
After completing this module, students will be able to:
- Recover Windows Server IaaS virtual machines using Azure Backup.
- Use Azure Backup to protect data for on-premises servers and virtualized workloads.
- Implement Recovery Vaults and Azure Backup policies.
- Protect Azure VMs with Azure Site Recovery.
- Run disaster recovery drills to validate protection.
- Fail over and fail back Azure virtual machines.
Module 6: Upgrade and Migrate in Windows Server
This module discusses approaches for migrating and updating Windows Server workloads from earlier versions. It covers strategies for moving domain controllers to Windows Server 2022 and describes using the Active Directory Migration Tool to consolidate domains within a forest or migrate them to a new AD DS forest. The module also discusses using Storage Migration Service to move files and shares from existing file servers to new Windows Server 2022 servers. Finally, it covers using Windows Server Migration Tools cmdlets to migrate commonly used server roles from earlier Windows Server versions.
Lessons
- Active Directory Domain Services migration.
- Migrating file server workloads using Storage Migration Service.
- Migrating Windows Server roles.
Lab : Migrating Windows Server Workloads to IaaS VMs
- Deploying AD DS domain controllers in Azure.
- Migrating file server shares by using Storage Migration Service.
After completing this module, students will be able to:
- Compare upgrading an AD DS forest and migrating to a new AD DS forest.
- Describe the Active Directory Migration Tool (ADMT).
- Identify requirements and considerations for using Storage Migration Service.
- Describe how to migrate a server with storage migration.
- Use Windows Server Migration Tools to migrate specific Windows Server roles.
Module 7: Implementing Migration in Hybrid Scenarios
This module discusses approaches for migrating Windows Server workloads to Infrastructure as a Service (IaaS) virtual machines. It introduces using Azure Migrate to assess and migrate on-premises Windows Server instances to Microsoft Azure. The module also covers migrating workloads to IaaS VMs and Windows Server 2022 using Windows Server migration tools or Storage Migration Service. Finally, it describes using the Azure Migrate App Containerization tool to containerize and migrate ASP.NET applications to Azure App Service.
Lessons
- Migrating on-premises Windows Server instances to Azure IaaS virtual machines.
- Upgrading and migrating Windows Server IaaS virtual machines.
- Containerizing and migrating ASP.NET applications to Azure App Service.
Lab : Migrating On-Premises VM Servers to IaaS VMs
- Implementing assessment and discovery of Hyper-V VMs using Azure Migrate.
- Implementing migration of Hyper-V workloads using Azure Migrate.
After completing this module, students will be able to:
- Plan a migration strategy and choose the appropriate migration tools.
- Perform server assessment and discovery using Azure Migrate.
- Migrate Windows Server workloads to Azure VM workloads using Azure Migrate.
- Explain how to migrate workloads using Windows Server Migration tools.
- Migrate file servers by using the Storage Migration Service.
- Discover and containerize ASP.NET applications running on Windows.
- Migrate a containerized application to Azure App Service.
Module 8: Server and Performance Monitoring in Windows Server
This module introduces tools for monitoring the OS and applications on a Windows Server computer, as well as configuring systems to optimize efficiency and troubleshoot problems. It covers using Event Viewer to observe and interpret events, and auditing/diagnosing a Windows Server environment for regulatory compliance, user activity, and troubleshooting. The module also explains troubleshooting AD DS service failures or degraded performance, including recovering deleted objects and the AD DS database, and addressing hybrid authentication issues.
Lessons
- Monitoring Windows Server performance.
- Managing and monitoring Windows Server event logs.
- Implementing Windows Server auditing and diagnostics.
- Troubleshooting Active Directory.
Lab : Monitoring and Troubleshooting Windows Server
- Establishing a performance baseline.
- Identifying the source of a performance problem.
- Viewing and configuring centralized event logs.
After completing this module, students will be able to:
- Explain the fundamentals of server performance tuning.
- Use built-in tools in Windows Server to monitor server performance.
- Use Server Manager and Windows Admin Center to review event logs.
- Implement custom views.
- Configure an event subscription.
- Audit Windows Server events.
- Configure Windows Server to record diagnostic information.
- Recover the AD DS database and objects in AD DS.
- Troubleshoot AD DS replication.
- Troubleshoot hybrid authentication issues.
Module 9: Implementing Operational Monitoring in Hybrid Scenarios
This module covers monitoring and troubleshooting tools, processes, and best practices to streamline application performance and availability for Windows Server IaaS VMs and hybrid instances. It describes implementing Azure Monitor for IaaS VMs in Azure and on-premises environments, and using dependency maps. The module explains enabling diagnostics, viewing VM metrics in Azure Metrics Explorer, and creating metric alerts for VM performance. It also covers monitoring VM performance using Azure Monitor VM Insights. Additionally, it describes troubleshooting on-premises and hybrid network connectivity, including diagnosing issues with DHCP, name resolution, IP configuration, and routing. Finally, it examines troubleshooting configuration issues impacting connectivity to Azure-hosted Windows Server VMs, and resolving issues with VM startup, extensions, performance, storage, and encryption.
Lessons
- Monitoring Windows Server IaaS Virtual Machines and hybrid instances.
- Monitoring the health of your Azure virtual machines by using Azure Metrics Explorer and metric alerts.
- Monitoring performance of virtual machines by using Azure Monitor VM Insights.
- Troubleshooting on-premises and hybrid networking.
- Troubleshooting Windows Server Virtual Machines in Azure.
Lab : Monitoring and Troubleshooting of IaaS VMs Running Windows Server
- Enabling Azure Monitor for virtual machines.
- Setting up a VM with boot diagnostics.
- Setting up a Log Analytics workspace and Azure Monitor VM Insights.
After completing this module, students will be able to:
- Implement Azure Monitor for IaaS VMs in Azure and on-premises environments.
- View VM metrics in Azure Metrics Explorer.
- Use monitoring data to diagnose problems.
- Evaluate Azure Monitor Logs and configure Azure Monitor VM Insights.
- Configure a Log Analytics workspace.
- Troubleshoot on-premises connectivity and hybrid network connectivity.
- Troubleshoot AD DS service failures or degraded performance.
- Recover deleted security objects and the AD DS database.
- Troubleshoot hybrid authentication issues.
Requirements
Prior to attending this course, students are expected to have:
- Experience managing the Windows Server operating system and workloads in on-premises scenarios, including AD DS, DNS, DFS, Hyper-V, and File and Storage Services.
- Proficiency with common Windows Server management tools (inherent in the first prerequisite).
- Foundational knowledge of core Microsoft compute, storage, networking, and virtualization technologies (inherent in the first prerequisite).
- Understanding of core networking technologies, including IP addressing, name resolution, and Dynamic Host Configuration Protocol (DHCP).
- Experience with Microsoft Hyper-V and a solid grasp of basic server virtualization concepts.
- Awareness of basic security best practices.
- Basic understanding of security-related technologies such as firewalls, encryption, multi-factor authentication, and SIEM/SOAR.
- Foundational knowledge of on-premises resiliency technologies for Windows Server-based compute and storage, such as Failover Clustering and Storage Spaces.
- Basic experience implementing and managing IaaS services in Microsoft Azure.
- Basic knowledge of Azure Active Directory.
- Hands-on experience with Windows client operating systems like Windows 10 or Windows 11.
- Basic experience with Windows PowerShell.
An understanding of the following concepts as they relate to Windows Server technologies is also required:
- High availability and disaster recovery.
- Automation.
- Monitoring.
- Troubleshooting.
Testimonials (2)
Thank you for the informative and wonderful course. I would also like to thank the trainer Mr. Ahmed El Gendy for delivering the information in a very smooth and understandable manner. I have benefited greatly from this course and can confidently say that I now understand all the topics and can apply them practically.
Atheer hadi aljezani - Tamkeen Technologies
Course - Windows Server 2019 Administration (authorized training course WS 011T00)
The environment is very very good