AZ-800T00: Administering Windows Server Hybrid Core Infrastructure

Duration: 4 Days

The AZ-800T00: Administering Windows Server Hybrid Core Infrastructure course is designed to provide IT professionals with the knowledge and skills needed to manage and maintain a hybrid infrastructure combining on-premises Windows Server environments with Azure services. As a part of the course curriculum, learners will delve into deploying and managing Active Directory Domain Services (AD DS), configuring complex environments, managing security principals, and implementing hybrid identities.
Audience Profile

The AZ-800T00 course equips IT professionals with skills to manage Windows Server hybrid infrastructures, integrating on-premises and cloud environments.

  • IT System Administrators responsible for managing and maintaining Windows Servers
  • Network Administrators who oversee on-premises and hybrid networking infrastructure
  • Active Directory Administrators focusing on deployment and management of AD DS
  • Cloud Administrators working with Azure services to manage server workloads
  • IT Professionals seeking to enhance their knowledge of virtualization with Hyper-V and containers
  • Infrastructure Architects designing hybrid cloud and on-premises solutions
  • Security Specialists managing identity and access within Windows Server environments
  • Technical Support Engineers providing troubleshooting for Windows Server issues
  • IT Managers looking to update their team’s skills in line with current hybrid cloud technologies
  • Systems Engineers involved in the deployment and management of storage and file services on Windows Server
Course Syllabus 
Module 1: Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments (30–35%)
Deploy and manage AD DS domain controllers
  • Deploy and manage domain controllers on-premises
  • Deploy and manage domain controllers in Azure
  • Deploy read-only domain controllers (RODCs)
  • Troubleshoot flexible single master operation (FSMO) roles
Configure and manage multi-site, multi-domain, and multi-forest environments
  • Configure and manage forest and domain trusts
  • Configure and manage AD DS sites
  • Configure and manage AD DS replication

 

Create and manage AD DS security principals
  • Create and manage AD DS users and groups
  • Manage users and groups in multi-domain and multi-forest scenarios
  • Implement Group Managed Service Accounts (gMSAs)
  • Join Windows Servers to AD DS, Microsoft Entra Domain Services, and Microsoft Entra
Implement and manage hybrid identities
  • Integrate Microsoft Entra ID, AD DS and Microsoft Entra Domain Services
  • Implement Microsoft Entra Connect Sync
  • Manage Microsoft Entra Connect Sync synchronization
  • Implement Microsoft Entra Cloud Sync
  • Manage Microsoft Entra Domain Services
  • Manage Microsoft Entra Connect Health
  • Manage authentication in on-premises and hybrid environments
  • Configure and manage AD DS passwords
Manage Windows Server by using domain-based Group Policies
  • Implement Group Policy in AD DS
  • Implement Group Policy Preferences in AD DS
  • Implement Group Policy in Microsoft Entra Domain Services
Module 2: Manage Windows Servers and workloads in a hybrid environment (10– 15%)
Manage Windows Servers in a hybrid environment
  • Deploy a Windows Admin Center Gateway server
  • Configure a target machine for Windows Admin Center
  • Configure PowerShell remoting
  • Configure Credential Security Support Provider protocol (CredSSP) or Kerberos Delegation for 2nd Hop Remoting
  • Configure Just Enough Administration (JEA) for PowerShell remoting

 

Manage Windows Servers and workloads by using Azure services
  • Manage Windows Servers by using Azure Arc
  • Create and assign Azure Policy that uses guest configuration extension
  • Deploy Azure services using VM extensions on non-Azure machines
  • Manage updates for Windows machines
  • Integrate Windows Servers with Log Analytics
  • Integrate Windows Servers with Microsoft Defender for Cloud
  • Manage Windows Server Azure VMs
  • Implement Azure Automation for hybrid workloads
  • Create runbooks to automate tasks on target VMs
  • Implement Azure Automation State Configuration to prevent configuration drift in IaaS machines
Module 3: Manage virtual machines and containers (15–20%)
Manage Hyper-V and guest virtual machines
  • Enable VM Enhanced session mode
  • Manage VM using PowerShell remoting, PowerShell Direct and Secure Shell (SSH) Direct for Linux VMs
  • Configure nested virtualization
  • Configure VM Memory
  • Configure integration services
  • Configure Discrete Device Assignment
  • Configure VM resource groups
  • Configure VM CPU groups
  • Configure hypervisor scheduling types
  • Manage VM checkpoints
  • Implementing high availability for virtual machines
  • Manage virtual hard disk (VHD) and virtual hard disk v2 (VHDX) files
  • Configure Hyper-V Network Adapter
  • Configure network interface card (NIC) Teaming
  • Configure Hyper-V Switch
Create and manage containers
  • Create Windows Server container images
  • Manage Windows Server container images
  • Configure container networking
  • Manage container instances
Manage Azure Virtual Machines that run Windows Server
  • Manage data disks
  • Resize Azure VM
  • Configure connections to VMs
  • Manage Azure VM network configuration
Module 4: Implement and manage an on-premises and hybrid networking infrastructure (15–20%)
Implement on-premises and hybrid name resolution
  • Integrate DNS with AD DS
  • Create and manage DNS zones and records
  • Configure DNS forwarding/conditional forwarding
  • Integrate Windows Server DNS with Azure DNS private zones
  • Implement Domain Name System Security Extensions (DNSSEC)
Manage IP addressing in on-premises and hybrid scenarios
  • Implement and manage IP Address Management (IPAM)
  • Implement and configure the Dynamic Host Configuration protocol (DHCP) server role (on-premises only)
  • Resolve IP address issues in hybrid environments
  • Create and manage DHCP scopes
  • Create and manage IP reservations
  • Implement DHCP high availability
Implement on-premises and hybrid network connectivity
  • Implement and manage the Remote Access role
  • Implement and manage Azure Network Adapter
  • Implement and manage Azure extended network
  • Implement and manage Network Policy and Access Services role
  • Implement Web Application Proxy
  • Implement Azure Relay
  • Implement site-to-site VPN
  • Implement Azure Virtual WAN
  • Implement Microsoft Entra Application Proxy
Module 5: Manage storage and file services (15–20%)
Configure and manage Azure File Sync
  • Create Azure File Sync Service
  • Create sync groups
  • Create cloud endpoints
  • Register servers
  • Create server endpoints
  • Configure cloud tiering
  • Monitor File Sync
  • Migrate Distributed File System (DFS) to Azure File Sync
Configure and manage Windows Server file shares
  • Configure Windows Server file share access
  • Configuring file screens
  • Configure file server resource manager (FSRM) quotas
  • Configure BranchCache
  • Implement and configure Distributed File System (DFS)

 

Configure Windows Server storage
  • Configure disks and volumes
  • Configure and manage Storage Spaces
  • Configure and manage Storage Replica
  • Configure Data Deduplication
  • Configure Server Message Block (SMB) direct
  • Configure Storage QoS
  • Configure file systems