Course Outline

Module 1: Windows Server Security for Government

This module provides an overview of securing an Active Directory environment by implementing least privilege principles and placing user accounts in the Protected Users group. It covers methods to limit authentication scope and remediate potentially insecure accounts. The module also details how to enhance the security configuration of a Windows Server operating system environment for government use. Additionally, it discusses the deployment of operating system updates using Windows Server Update Services to ensure networked computers are current. Finally, the module addresses securing Windows Server DNS to protect the network's name resolution infrastructure.

Lessons

  • Secure Windows Server User Accounts for Government
  • Hardening Windows Server for Government Use
  • Windows Server Update Management for Government
  • Secure Windows Server DNS for Government Networks

Lab : Configuring Security in Windows Server for Government

  • Configuring Windows Defender Credential Guard for Government
  • Identifying Problematic Accounts for Government
  • Implementing LAPS (Local Administrator Password Solution) for Government

After completing this module, students will be able to:

  • Diagnose and remediate potential security vulnerabilities in Windows Server resources for government.
  • Harden the security configuration of the Windows Server operating system environment for government use.
  • Deploy operating system updates to computers on a network by using Windows Server Update Services for government.
  • Secure Windows Server DNS to protect the network name resolution infrastructure for government.
  • Implement DNS policies for government networks.

Module 2: Implementing Security Solutions in Hybrid Scenarios for Government

This module explains how to secure on-premises Windows Server resources and Azure IaaS workloads for government. It covers improving network security for Windows Server infrastructure as a service (IaaS) VMs and diagnosing network security issues with those VMs. The module introduces Azure Security Center and describes how to onboard Windows Server computers to this service for enhanced security. Additionally, it explains enabling Azure Update Management, deploying updates, reviewing update assessments, and managing updates for Azure VMs. The module also discusses using Adaptive application controls and BitLocker disk encryption to protect Windows Server IaaS VMs for government. Finally, the module covers monitoring Windows Server Azure IaaS VMs for changes in files and the registry, as well as modifications made to application software.

Lessons

  • Implement Windows Server IaaS VM Network Security for Government
  • Audit the Security of Windows Server IaaS Virtual Machines for Government
  • Manage Azure Updates for Government
  • Create and Implement Application Allowlists with Adaptive Application Control for Government
  • Configure BitLocker Disk Encryption for Windows IaaS VMs in Government
  • Implement Change Tracking and File Integrity Monitoring for Windows Server IaaS VMs for Government

Lab : Using Azure Security Center in Hybrid Scenarios for Government

  • Provisioning Azure VMs Running Windows Server for Government
  • Configuring Azure Security Center for Government
  • Onboarding On-Premises Windows Server into Azure Security Center for Government
  • Verifying the Hybrid Capabilities of Azure Security Center for Government
  • Configuring Windows Server Security in Azure VMs for Government

After completing this module, students will be able to:

  • Diagnose network security issues in Windows Server IaaS virtual machines for government.
  • Onboard Windows Server computers to Azure Security Center for enhanced security in government environments.
  • Deploy and manage updates for Azure VMs by enabling Azure Automation Update Management for government.
  • Implement Adaptive application controls to protect Windows Server IaaS VMs for government.
  • Configure Azure Disk Encryption for Windows IaaS VMs in government environments.
  • Back up and recover encrypted data for government use.
  • Monitor Windows Server Azure IaaS VMs for changes in files and the registry for government.

Module 3: Implementing High Availability for Government

This module describes technologies and options to create a highly available Windows Server environment for government. It introduces Clustered Shared Volumes for shared storage access across multiple cluster nodes in government settings. The module also highlights failover clustering, stretch clusters, and cluster sets for implementing high availability of Windows Server workloads for government. It discusses high availability provisions for Hyper-V and Windows Server VMs, such as network load balancing, live migration, and storage migration. The module covers high availability options for shares hosted on Windows Server file servers for government. Finally, it describes how to implement scaling for virtual machine scale sets and load-balanced VMs, and how to implement Azure Site Recovery for government.

Lessons

  • Introduction to Cluster Shared Volumes for Government
  • Implement Windows Server Failover Clustering for Government
  • Implement High Availability of Windows Server VMs for Government
  • Implement Windows Server File Server High Availability for Government
  • Implement Scale and High Availability with Windows Server VMs for Government

Lab : Implementing Failover Clustering for Government

  • Configuring iSCSI Storage for Government
  • Configuring a Failover Cluster for Government
  • Deploying and Configuring a Highly Available File Server for Government
  • Validating the Deployment of the Highly Available File Server for Government

After completing this module, students will be able to:

  • Implement highly available storage volumes by using Clustered Shared Volumes for government.
  • Implement highly available Windows Server workloads using failover clustering for government.
  • Describe Hyper-V VMs load balancing for government.
  • Implement Hyper-V VMs live migration and Hyper-V VMs storage migration for government.
  • Describe Windows Server File Server high availability options for government.
  • Implement scaling for virtual machine scale sets and load-balanced VMs for government.
  • Implement Azure Site Recovery for government environments.

Module 4: Disaster Recovery in Windows Server for Government

This module introduces Hyper-V Replica as a business continuity and disaster recovery solution for a virtual environment for government. It discusses Hyper-V Replica scenarios and use cases, and prerequisites for its use. The module also explains how to implement Azure Site Recovery in on-premises scenarios to recover from disasters for government.

Lessons

  • Implement Hyper-V Replica for Government
  • Protect Your On-Premises Infrastructure from Disasters with Azure Site Recovery for Government

Lab : Implementing Hyper-V Replica and Windows Server Backup for Government

  • Implementing Hyper-V Replica for Government
  • Implementing Backup and Restore with Windows Server Backup for Government

After completing this module, students will be able to:

  • Describe Hyper-V Replica, prerequisites for its use, and its high-level architecture and components for government.
  • Describe Hyper-V Replica use cases and security considerations for government.
  • Configure Hyper-V Replica settings, health monitoring, and failover options for government.
  • Describe extended replication for government.
  • Replicate, failover, and failback virtual machines and physical servers with Azure Site Recovery for government.

Module 5: Implementing Recovery Services in Hybrid Scenarios for Government

This module covers tools and technologies for implementing disaster recovery in hybrid scenarios for government. It begins with Azure Backup as a service to protect files and folders, highlighting how to implement Recovery Vaults and Azure Backup Policies. The module describes how to recover Windows IaaS virtual machines, perform backup and restore of on-premises workloads, and manage Azure VM backups for government. It also covers providing disaster recovery for Azure infrastructure by managing and orchestrating replication, failover, and failback of Azure virtual machines with Azure Site Recovery for government.

Lessons

  • Implement Hybrid Backup and Recovery with Windows Server IaaS for Government
  • Protect Your Azure Infrastructure with Azure Site Recovery for Government
  • Protect Your Virtual Machines by Using Azure Backup for Government

Lab : Implementing Azure-Based Recovery Services for Government

  • Implementing the Lab Environment for Government
  • Creating and Configuring an Azure Site Recovery Vault for Government
  • Implementing Hyper-V VM Protection by Using Azure Site Recovery Vault for Government
  • Implementing Azure Backup for Government

After completing this module, students will be able to:

  • Recover Windows Server IaaS virtual machines by using Azure Backup for government.
  • Use Azure Backup to protect data for on-premises servers and virtualized workloads for government.
  • Implement Recovery Vaults and Azure Backup policies for government.
  • Protect Azure VMs with Azure Site Recovery for government.
  • Run a disaster recovery drill to validate protection for government.
  • Failover and failback Azure virtual machines for government.

Module 6: Upgrade and Migrate in Windows Server for Government

This module discusses approaches to migrating and updating Windows Server workloads running in earlier versions of Windows Server for government. It covers strategies needed to move domain controllers to Windows Server 2022 and describes how the Active Directory Migration Tool can consolidate domains within a forest or migrate domains to a new AD DS forest for government. The module also discusses using Storage Migration Service to migrate files and file shares from existing file servers to new servers running Windows Server 2022 for government. Finally, it covers installing and using the Windows Server Migration Tools cmdlets to migrate commonly used server roles from earlier versions of Windows Server for government.

Lessons

  • Active Directory Domain Services Migration for Government
  • Migrate File Server Workloads Using Storage Migration Service for Government
  • Migrate Windows Server Roles for Government

Lab : Migrating Windows Server Workloads to IaaS VMs for Government

  • Deploying AD DS Domain Controllers in Azure for Government
  • Migrating File Server Shares Using Storage Migration Service for Government

After completing this module, students will be able to:

  • Compare upgrading an AD DS forest and migrating to a new AD DS forest for government.
  • Describe the Active Directory Migration Tool (ADMT) for government.
  • Identify the requirements and considerations for using Storage Migration Service for government.
  • Describe how to migrate a server with storage migration for government.
  • Use the Windows Server Migration Tools to migrate specific Windows Server roles for government.

Module 7: Implementing Migration in Hybrid Scenarios for Government

This module discusses approaches to migrating workloads running in Windows Server to an infrastructure as a service (IaaS) virtual machine for government. It introduces using Azure Migrate to assess and migrate on-premises Windows Server instances to Microsoft Azure for government. The module also covers how to migrate a workload running in Windows Server to an IaaS VM and to Windows Server 2022 by using Windows Server migration tools or the Storage Migration Service for government. Finally, it describes how to use the Azure Migrate App Containerization tool to containerize and migrate ASP.NET applications to Azure App Service for government.

Lessons

  • Migrate On-Premises Windows Server Instances to Azure IaaS Virtual Machines for Government
  • Upgrade and Migrate Windows Server IaaS Virtual Machines for Government
  • Containerize and Migrate ASP.NET Applications to Azure App Service for Government

Lab : Migrating On-Premises VMs Servers to IaaS VMs for Government

  • Implementing Assessment and Discovery of Hyper-V VMs Using Azure Migrate for Government
  • Implementing Migration of Hyper-V Workloads Using Azure Migrate for Government

After completing this module, students will be able to:

  • Plan a migration strategy and choose the appropriate migration tools for government.
  • Perform server assessment and discovery using Azure Migrate for government.
  • Migrate Windows Server workloads to Azure VM workloads using Azure Migrate for government.
  • Explain how to migrate workloads using Windows Server Migration tools for government.
  • Migrate file servers by using the Storage Migration Service for government.
  • Discover and containerize ASP.NET applications running on Windows for government.
  • Migrate a containerized application to Azure App Service for government.

Module 8: Server and Performance Monitoring in Windows Server for Government

This module introduces a range of tools to monitor the operating system and applications on a Windows Server computer for government, as well as describing how to configure a system to optimize efficiency and troubleshoot problems. It covers how Event Viewer provides a convenient and accessible location for observing events that occur, and how to interpret the data in the event log for government. The module also covers auditing and diagnosing a Windows Server environment for regulatory compliance, user activity, and troubleshooting for government. Finally, it explains how to troubleshoot AD DS service failures or degraded performance, including recovery of deleted objects and the AD DS database, and how to troubleshoot hybrid authentication issues for government.

Lessons

  • Monitor Windows Server Performance for Government
  • Manage and Monitor Windows Server Event Logs for Government
  • Implement Windows Server Auditing and Diagnostics for Government
  • Troubleshoot Active Directory for Government

Lab : Monitoring and Troubleshooting Windows Server for Government

  • Establishing a Performance Baseline for Government
  • Identifying the Source of a Performance Problem for Government
  • Viewing and Configuring Centralized Event Logs for Government

After completing this module, students will be able to:

  • Explain the fundamentals of server performance tuning for government.
  • Use built-in tools in Windows Server to monitor server performance for government.
  • Use Server Manager and Windows Admin Center to review event logs for government.
  • Implement custom views for government.
  • Configure an event subscription for government.
  • Audit Windows Server events for government.
  • Configure Windows Server to record diagnostic information for government.
  • Recover the AD DS database and objects in AD DS for government.
  • Troubleshoot AD DS replication for government.
  • Troubleshoot hybrid authentication issues for government.

Module 9: Implementing Operational Monitoring in Hybrid Scenarios for Government

This module covers using monitoring and troubleshooting tools, processes, and best practices to streamline app performance and availability of Windows Server IaaS VMs and hybrid instances for government. It describes how to implement Azure Monitor for IaaS VMs in Azure and on-premises environments for government, and use dependency maps. The module explains how to enable diagnostics to get data about a VM, view VM metrics in Azure Metrics Explorer, and create a metric alert to monitor VM performance for government. It covers monitoring VM performance using Azure Monitor VM Insights for government. The module also discusses troubleshooting on-premises and hybrid network connectivity, including diagnosing common issues with DHCP, name resolution, IP configuration, and routing for government. Finally, it examines how to troubleshoot configuration issues that impact connectivity to Azure-hosted Windows Server virtual machines (VMs), as well as approaches to resolve issues with VM startup, extensions, performance, storage, and encryption for government.

Lessons

  • Monitor Windows Server IaaS Virtual Machines and Hybrid Instances for Government
  • Monitor the Health of Your Azure Virtual Machines by Using Azure Metrics Explorer and Metric Alerts for Government
  • Monitor Performance of Virtual Machines by Using Azure Monitor VM Insights for Government
  • Troubleshoot On-Premises and Hybrid Networking for Government
  • Troubleshoot Windows Server Virtual Machines in Azure for Government

Lab : Monitoring and Troubleshooting of IaaS VMs Running Windows Server for Government

  • Enabling Azure Monitor for Virtual Machines for Government
  • Setting Up a VM with Boot Diagnostics for Government
  • Setting Up a Log Analytics Workspace and Azure Monitor VM Insights for Government

After completing this module, students will be able to:

  • Implement Azure Monitor for IaaS VMs in Azure and on-premises environments for government.
  • View VM metrics in Azure Metrics Explorer for government.
  • Use monitoring data to diagnose problems for government.
  • Evaluate Azure Monitor Logs and configure Azure Monitor VM Insights for government.
  • Configure a Log Analytics workspace for government.
  • Troubleshoot on-premises connectivity and hybrid network connectivity for government.
  • Troubleshoot AD DS service failures or degraded performance for government.
  • Recover deleted security objects and the AD DS database for government.
  • Troubleshoot hybrid authentication issues for government.

Requirements

Before attending this course, students must have:

  • Experience with managing Windows Server operating systems and workloads in on-premises environments, including Active Directory Domain Services (AD DS), DNS, Distributed File System (DFS), Hyper-V, and File and Storage Services.
  • Familiarity with common Windows Server management tools (implied by the first prerequisite).
  • Basic knowledge of core Microsoft compute, storage, networking, and virtualization technologies (also implied by the first prerequisite).
  • Experience with and an understanding of essential networking technologies such as IP addressing, name resolution, and Dynamic Host Configuration Protocol (DHCP).
  • Hands-on experience with Microsoft Hyper-V and foundational server virtualization concepts.
  • An awareness of basic security best practices.
  • A fundamental understanding of security-related technologies, including firewalls, encryption, multi-factor authentication, and Security Information and Event Management (SIEM)/Security Orchestration, Automation, and Response (SOAR) systems.
  • Basic knowledge of on-premises resiliency Windows Server-based compute and storage technologies, such as Failover Clustering and Storage Spaces.
  • Basic experience with implementing and managing Infrastructure as a Service (IaaS) services in Microsoft Azure.
  • A foundational understanding of Azure Active Directory.
  • Hands-on experience with Windows client operating systems, such as Windows 10 or Windows 11.
  • Basic proficiency with Windows PowerShell.

An understanding of the following concepts as they relate to Windows Server technologies for government:

  • High availability and disaster recovery strategies.
  • Automation techniques.
  • Monitoring practices.
  • Troubleshooting methodologies.
 28 Hours

Number of participants


Price per participant

Upcoming Courses

Related Categories