AZ-801T00: Configuring Windows Server Hybrid Advanced Services

In diesem Training erfahren IT-Experten, wie sie fortgeschrittene Windows Server-Dienste mithilfe lokaler, hybrider und cloudbasierter Technologien konfigurieren. In diesem Training erfahren IT-Experten, wie Sie die Hybridfunktionen von Azure nutzen können, virtuelle und physische Serverworkloads zu Azure IaaS migrieren und Azure-VMs unter Windows Server schützen. In diesem Training erfahren IT-Experten auch, wie sie Aufgaben im Zusammenhang mit Hochverfügbarkeit, Problembehandlung und Notfallwiederherstellung ausführen.

Physisch oder virtuell?

Nehmen Sie an einem unserer Standorte Frankfurt, München und Wien oder virtuell an unseren Klassenraumtrainings teil. Unter „Termin buchen“ werden Ihnen alle Optionen angezeigt, zuerst sortiert nach Standort, dann nach Datum.

Dauer

Trainingssprache

Deutsch

Trainingsart

brainyCLASS (offen)

Was werden Sie in diesem Training erlernen?

Entdecken Sie eine Vielzahl von Verwaltungstools und -technologien, darunter Windows Admin Center, PowerShell und Azure Arc, um Ihre Serverumgebung effizient zu verwalten. Erfahren Sie, wie Sie mit Azure-basierten Diensten wie Azure Automation Update Management, Microsoft Defender for Identity, Azure Security Center, Azure Migrate und Azure Monitor Ihre Sicherheit erhöhen und Ihre Workloads optimieren können. Bereiten Sie sich darauf vor, Ihre IT-Landschaft zu revolutionieren und neue Horizonte zu erkunden. Melden Sie sich jetzt an und starten Sie Ihre Reise in die Welt des Hybrid-Servermanagements!

Agenda

Secure Windows Server user accounts

Introduction

Configure user account rights

Protect user accounts with the Protected Users group

Describe Windows Defender Credential Guard

Block NTLM authentication

Locate problematic accounts

Hardening Windows Server

Describe Local Password Administrator Solution

Configure Privileged Access Workstations

Secure domain controllers

Analyze security configuration with Security Compliance Toolkit

Secure SMB traffic

Knowledge check

Windows Server update management

Explore Windows Update

Outline Windows Server Update Services server deployment options

Define Windows Server Update Services update management process

Describe the process of Update Management

Secure Windows Server DNS

Implement split-horizon DNS

Create DNS policies

Implement DNS policies

Secure Windows Server DNS

Implement DNSSEC

Implement Windows Server IaaS VM network security

Implement network security groups and Windows IaaS VMs

Implement adaptive network hardening

Implement Azure Firewall and Windows IaaS VMs

Implement Windows firewall with Windows Server IaaS VMs

Choose the appropriate filtering solution

Deploy and configure Azure firewall using the Azure portal

Capture network traffic with network watcher

Log network traffic to and from a VM using the Azure portal

Audit the security of Windows Server IaaS Virtual Machines

Describe Azure Security Center

Enable Azure Security Center in hybrid environments

Implement and assess security policies

Protect your resources with Azure Security Center

Implement Azure Sentinel

Manage Azure updates

Describe update management

Enable update management

Deploy updates

View update assessments

Manage updates for your Azure Virtual Machines

Create and implement application allowlists with adaptive application control

Describe adaptive application control

Implement adaptive application control policies

Configure BitLocker disk encryption for Windows IaaS Virtual Machines

Describe Azure Disk Encryption and server-side encryption

Configure Key Vault for Azure Disk Encryption

Encrypt Azure IaaS Virtual Machine hard disks

Back up and recover data from encrypted disks

Create and encrypt a Windows Virtual Machine

Implement change tracking and file integrity monitoring for Windows IaaS VMs

Implement Change Tracking and Inventory

Manage Change Tracking and Inventory

Manage tracked files

Implement File Integrity Monitoring

Select and monitor entities

Use File Integrity Monitoring

Introduction to Cluster Shared Volumes

Determine the functionality of Cluster Shared Volumes

Explore the architecture and components of Cluster Shared Volumes

Implement Cluster Shared Volumes

Implement Windows Server failover clustering

Define Windows Server failover clustering

Plan Windows Server failover clustering

Implement Windows Server failover clustering

Manage Windows Server failover clustering

Implement stretch clusters

Define cluster sets

Implement high availability of Windows Server VMs

Select high-availability options for Hyper-V

Consider network load balancing for Hyper-V VMs

Implement Hyper-V VM live migration

Implement Hyper-V VMs storage migration

Implement Windows Server File Server high availability

Explore the Windows Server File Server high-availability options

Define Cluster Shared Volumes

Implement Scale-Out File Server

Implement Storage Replica

Implement scale and high availability with Windows Server VM

Describe virtual machine scale sets

Implement scaling

Implement load-balancing VMs

Create a virtual machine scale set in the Azure portal

Describe Azure Site Recovery

Implement Azure Site Recovery

Implement Hyper-V Replica

Define Hyper-V Replica

Plan for Hyper-V Replica

Configure and implement Hyper-V Replica

Define extended replication

Define Azure Site Recovery

Implement Site Recovery from on-premises site to Azure

Implement Site Recovery from on-premises site to on-premises site

Protect your on-premises infrastructure from disasters with Azure Site Recovery

Azure Site Recovery overview

Workloads supported for protection with Azure Site Recovery

Run a disaster recovery drill

Failover and failback

Implement hybrid backup and recovery with Windows Server IaaS

Describe Azure Backup

Implement recovery vaults

Implement Azure Backup policies

Recover Windows IaaS Virtual Machines

Perform file and folder recovery

Perform backup and restore of on-premises workloads

Manage Azure Virtual Machine backups with Azure Backup service

Protect your Azure infrastructure with Azure Site Recovery

What is Azure Site Recovery

Prepare for disaster recovery with Azure Site Recovery

Exercise - Set up disaster recovery with Azure Site Recovery

Run a disaster recovery drill

Exercise - Run a disaster recovery drill

Failover and failback using Azure Site Recovery

Protect your virtual machines by using Azure Backup

Azure Backup features and scenarios

Back up an Azure virtual machine by using Azure Backup

Exercise - Back up an Azure virtual machine

Restore virtual machine data

Active Directory Domain Services migration

Examine upgrade vs. migration

Upgrade a previous version of Active Directory Domain Services to Windows Server 2022

Migrate to Active Directory Domain Services in Windows Server 2022 from a previous version

Explore the Active Directory Migration Tool

Migrate file server workloads using Storage Migration Service

Storage Migration Service overview and usage scenarios

Storage migration requirements

Migrate a server with Storage migration

Evaluate storage migration considerations

Migrate Windows Server roles

Describe the Windows Server Migration Tools

Install the Migration Tools

Migrate roles using the Migration Tools

Migrate on-premises Windows Server instances to Azure IaaS virtual machines

Plan your migration

Describe Azure Migrate

Perform server assessment

Assess physical servers with Azure Migrate

Migrate Windows Server workloads by using Azure Migrate

Upgrade and migrate Windows Server IaaS virtual machines

Describe Azure Migrate

Migrate Windows Server workloads by using Azure Migrate

Describe storage migration

Migrate file servers by using Storage Migration Service

Containerize and migrate ASP.NET applications to Azure App Service

Azure Migrate App Containerization overview

Monitor Windows Server performance

Use Performance Monitor to identify performance problems

Use Resource Monitor to review current resource usage

Review reliability with Reliability Monitor

Implement a performance monitoring methodology

Use Data Collector Sets to analyze server performance

Monitor network infrastructure services

Monitor virtual machines running Windows Server

Monitor performance with Windows Admin Center

Use System Insights to help predict future capacity issues

Optimize the performance of Windows Server

Manage and monitor Windows Server event logs

Describe Windows Server event logs

Use Windows Admin Center to review logs

Use Server Manager to review logs

Use custom views

Implement event log subscriptions

Implement Windows Server auditing and diagnostics

Describe basic auditing categories

Describe advanced categories

Log user access

Enable setup and boot event collection

Troubleshoot Active Directory

Recover objects from the AD recycle bin

Recover the AD DS database

Recover SYSVOL

Troubleshoot AD DS replication

Troubleshoot hybrid authentication issues

Monitor Windows Server IaaS Virtual Machines and hybrid instances

Enable Azure Monitor for Virtual Machines

Monitor an Azure Virtual Machine with Azure Monitor

Enable Azure Monitor in hybrid scenarios

Collect data from a Windows computer in a hybrid environment

Integrate Azure Monitor with Microsoft Operations Manager

Monitor the health of your Azure virtual machine by using Azure Metrics Explorer and metric alerts

Monitor the health of the virtual machine

Exercise - Set up a VM with boot diagnostics

View VM metrics

Configure the Azure Diagnostics extension

Exercise - Configure the Azure Diagnostics extension

Diagnostic data case studies

Monitor performance of virtual machines by using Azure Monitor VM Insights

What are Azure Monitor Logs and Azure Monitor VM Insights?

Exercise - Set up a Log Analytics workspace and Azure Monitor VM Insights

Build log queries by using the Kusto Query Language

Troubleshoot on-premises and hybrid networking

Diagnose DHCP problems

Diagnose DNS problems

Diagnose IP configuration issues

Diagnose routing problems

Use Packet Monitor to help diagnose network problems

Use Azure Network Watcher to help diagnose network problems

Troubleshoot Windows Server Virtual Machines in Azure

Troubleshoot VM deployment

Troubleshoot VM startup

Troubleshoot VM extensions

Troubleshoot VM connectivity

Troubleshoot VM performance

Troubleshoot VM storage

REVIEWING ARCHITECTING CONCEPTS

SINGLE TO MULTIPLE ACCOUNTS

Group Exercise: Review Architecting on AWS core best practices
AWS Organizations for multi-account access and permissions
AWS SSO to simplify access and authentication across AWS accounts and third-party services
AWS Control Tower
Permissions, access, and authentication

HYBRID CONNECTIVITY

SPECIALIZED INFRASTRUCTURE

Zielgruppe

Dieses viertägige Training richtet sich an Windows Server-Hybridadministratoren, die Erfahrung mit Windows Server haben und die Funktionen ihrer lokalen Umgebungen erweitern möchten, indem sie lokale und hybride Technologien kombinieren. Windows Server-Hybridadministratoren, die bereits lokale Kerntechnologien implementieren und verwalten, möchten ihre Umgebungen sichern und schützen, virtuelle und physische Workloads zu Azure IaaS migrieren, eine hochverfügbare, vollständig redundante Umgebung bereitstellen und Überwachung und Problembehandlung durchführen.

Voraussetzung für den Kurs

Ein Verständnis folgender Konzepte im Zusammenhang mit Windows Server-Technologien: Erfahrung mit der Verwaltung von Windows Server-Betriebssystemen und Windows Server-Workloads in lokalen Szenarios, einschließlich AD DS, DNS, DFS, Hyper-V und Datei-/Speicherdiensten Erfahrung mit allgemeinen Windows Server-Verwaltungstools (impliziert in der ersten Voraussetzung) Grundlegende Kenntnisse der zentralen Compute-, Speicher-, Netzwerk- und Virtualisierungstechnologien von Microsoft (impliziert in der ersten Voraussetzung) Erfahrung und Kenntnisse der wichtigsten Netzwerktechnologien wie IP-Adressierung, Namensauflösung und Dynamic Host Configuration Protocol (DHCP) Erfahrung im Umgang mit und Kenntnisse zu Microsoft Hyper-V und grundlegenden Servervirtualisierungskonzepten Wissen um grundlegende bewährte Methoden im Sicherheitsbereich Grundlegende Kenntnisse zu sicherheitsbezogenen Technologien (Firewalls, Verschlüsselung, mehrstufige Authentifizierung, SIEM/SOAR) Grundlegende Kenntnisse zu auf Windows Server basierenden Compute- und Speichertechnologien für lokale Resilienz (Failoverclustering, Speicherplätze) Grundlegende Kenntnisse zur Implementierung und Verwaltung von IaaS-Diensten in Microsoft Azure Grundlegende Kenntnisse im Umgang mit Azure Active Directory Praktische Erfahrung im Umgang mit Windows-Clientbetriebssystemen wie Windows 10 oder Windows 11 Grundlegende Erfahrung mit Windows PowerShell

Partner

Microsoft Technik