CIS 238 - Windows Server Hybrid Advanced Services

1. Advanced Azure Integration: Extending on-premises infrastructure with advanced Azure services, including Azure Virtual Machines, Azure Kubernetes Service (AKS), Azure Functions, and Azure Logic Apps.

2. Hybrid Identity Management: Implementing advanced identity and access management solutions in hybrid environments, such as Azure Active Directory Domain Services (AAD DS), Azure AD Identity Protection, and Conditional Access policies.

3. Advanced Security Measures: Deploying advanced security measures to protect hybrid environments, including Azure Security Center, Azure Sentinel, Just-In-Time (JIT) Access, and Azure Firewall.

4. Hybrid Networking Optimization: Optimizing network connectivity between on-premises infrastructure and Azure, leveraging advanced networking features such as Azure Virtual WAN, Azure ExpressRoute Global Reach, and Azure DNS Private Zones.

5. Advanced High Availability and Disaster Recovery: Implementing advanced high availability and disaster recovery solutions for hybrid environments, including Azure Availability Zones, Geo-redundant Storage (GRS), and Azure Backup Vault.

6. Automation and Orchestration: Streamlining administrative tasks and workflows through automation and orchestration using tools such as Azure Automation, Azure DevOps, and PowerShell DSC (Desired State Configuration).

7. Performance Tuning and Optimization: Optimizing the performance of hybrid infrastructure components through advanced tuning techniques, including storage optimization, workload optimization, and performance monitoring.

8. Governance and Compliance: Implementing governance policies and ensuring compliance within hybrid environments, including Azure Policy, Azure Blueprints, and Azure Security Benchmark.

 
Course Outline:

1. Deploy and manage AD DS domain controllers

1. PowerShell Fundamentals for Server
2. Visualizing Domains, Trees, and Forests
3. Visualizing Active Directory Partitions
4. Before proceeding with the next video
5. Deploy and manage domain controllers on-premises
6. Joining a server to a domain
7. Deploy and manage domain controllers in Azure

2. Configure and manage multi-site, multi-domain, and multi-forest environments

1. Visualizing forest and domain trusts
2. Configure and manage forest and domain trusts
3. Visualizing sites and replication
4. Configure and manage AD DS sites
5. Configure and manage AD DS replication
6. Configure a DC as a Global Catalog server

3. Create and manage AD DS security principals

1. Create and manage AD DS users and organizational units
2. Visualizing groups in AD DS
3. Create and manage groups in multi domain forests scenarios
4. The universal group membership caching feature
5. Using PowerShell for AD DS Users, organizational units, and Groups
6. Implement group managed service accounts (gMSAs)
7. Implement Azure AD DS

4. Preparing your domain naming infrastructure for hybrid identities

1. Configuring AD to support additional domain names
2. Adding, Configuring, and Verifying additional domain names
3. Setting the Primary Domain Name
4. Configuring User Account for new domain names
5. Configuring On-Premise DNS to support Microsoft Online Services

5. Implement and manage hybrid identities

1. Preparing to implement Azure AD Connect
2. Understanding Directory Sync Designs
3. Cleaning up AD DS using Idfix before installing Azure AD Connect
4. Implement Azure AD Connect
5. Manage Azure AD Connect Health
6. Configure and manage AD DS passwords

6. Manage Windows Server by using domain-based Group Policies

1. Visualizing the concepts of Group Policy
2. Implement Group Policy in AD DS
3. Implement Group Policy Preferences in AD DS
4. Implement Group Policy in Azure AD DS

7. Manage Windows Servers in a hybrid environment

1. Removing AD DS from a DC in order to install Windows Admin Center
2. Deploy a Windows Admin Center gateway server
3. Configure a target machine for Windows Admin Center
4. Configure PowerShell Remoting with Windows Admin Center
5. Understanding CredSSP or Kerberos delegation for second hop remoting
6. Configure JEA for PowerShell

8. Manage Windows Servers and workloads by using Azure services

1. Manage Windows Servers by using Azure Arc
2. Assign Azure Policy Guest Configuration
3. Deploy Azure services using Azure Virtual Machine extensions on non-Azure machines
4. Manage updates with Azure Update Management and Integrate Log Analytics
5. Integrate Windows Servers with Defender for Cloud (formally Azure Security Center)

9. Manage Hyper-V and guest virtual machines

1. Installing Hyper-V on a server and using nested virtualization
2. Manage VM using PowerShell Remoting, PowerShell Direct, and HVC.exe
3. Understanding Discrete Device Assignment
4. Understanding hypervisor scheduling types
5. Manage VHD and VHDX files
6. Manage Azure Virtual Machines that run Windows Server

10. Create and manage containers

1. Understanding Windows Server containers
2. Installing support for Windows Server container images
3. Getting Docker installed for Windows Server container images
4. Pulling Windows Server base container images
5. Running a Windows Server container image
6. Configuring network settings from within a container image

11. Implement on-premises and hybrid name resolution

1. Visualizing DNS with AD DS
2. Integrate DNS with AD DS
3. Create and manage zones and records
4. Configure DNS forwarding/conditional forwarding
5. Integrate Windows Server DNS with Azure DNS private zones
6. Implement DNSSEC

12. Manage IP addressing in on-premises and hybrid scenarios

1. Implement and configure the DHCP server role (on-premises only)
2. Create and manage scopes
3. Create and manage IP reservations
4. Implement DHCP high availability
5. Implement and manage IPAM
6. Resolve IP address issues in hybrid environments
7. Understanding the Azure AD App Proxy

13. Configure and manage Azure File Sync

1. Create Azure File Sync service
2. Create sync groups and cloud endpoints
3. Register servers
4. Create server endpoints
5. Cloud tiering
6. Monitor File Sync

14. Configure and manage Windows Server file shares

1. Configure Windows Server file share access
2. Installing File Server Resource Manager (FSRM)
3. Configure file screens
4. Configure File Server Resource Manager (FSRM) quotas
5. Configure BranchCache
6. Visualizing Distributed File System (DFS)
7. Implement and configure Distributed File System (DFS)

15. Configure Windows Server storage

1. Configure disks and volumes
2. Configure and manage Storage Spaces and Replica
3. Configure Data Deduplication
4. Configure SMB direct
5. Configure Storage Quality of Service (QoS)

30%  - 40% lab work

20% - 30% facilitated discussion/group work
Mandatory Course Components:
None
Equivalent Courses:
None