Course Outline

Module 1: Identity Services in Windows Server for Government

This module introduces identity services and describes Active Directory Domain Services (AD DS) in a Windows Server environment. It covers the deployment of domain controllers in AD DS, as well as Azure Active Directory (Azure AD) and the benefits of integrating Azure AD with AD DS. The module also explains Group Policy basics and how to configure group policy objects (GPOs) in a domain environment.

Lessons

  • Introduction to AD DS for Government

  • Manage AD DS Domain Controllers and FSMO Roles for Government

  • Implement Group Policy Objects for Government

  • Manage Advanced Features of AD DS for Government

Lab: Implementing Identity Services and Group Policy for Government

  • Deploying a New Domain Controller on Server Core
  • Configuring Group Policy for Government

After completing this module, students will be able to:

  • Describe AD DS in a Windows Server environment for government.

  • Deploy domain controllers in AD DS for government.

  • Describe Azure AD and the benefits of integrating Azure AD with AD DS for government.

  • Explain Group Policy basics and configure GPOs in a domain environment for government.

Module 2: Implementing Identity in Hybrid Scenarios for Government

This module discusses how to configure an Azure environment so that Windows IaaS workloads requiring Active Directory are supported. It covers the integration of on-premises Active Directory Domain Services (AD DS) into Azure and explains how to extend an existing AD environment into Azure by placing IaaS VMs configured as domain controllers onto a specially configured Azure virtual network subnet.

Lessons

  • Implement Hybrid Identity with Windows Server for Government

  • Deploy and Manage Azure IaaS Active Directory Domain Controllers in Azure for Government

Lab: Implementing Integration Between AD DS and Azure AD for Government

  • Preparing Azure AD for AD DS Integration for Government
  • Preparing On-Premises AD DS for Azure AD Integration for Government
  • Downloading, Installing, and Configuring Azure AD Connect for Government
  • Verifying Integration Between AD DS and Azure AD for Government
  • Implementing Azure AD Integration Features in AD DS for Government

After completing this module, students will be able to:

  • Integrate on-premises Active Directory Domain Services (AD DS) into Azure for government.

  • Install and configure directory synchronization using Azure AD Connect for government.

  • Implement and configure Azure AD DS for government.

  • Implement Seamless Single Sign-on (SSO) for government.

  • Install a new AD DS forest on an Azure VNet for government.

Module 3: Windows Server Administration for Government

This module describes how to implement the principle of least privilege through Privileged Access Workstation (PAW) and Just Enough Administration (JEA). It highlights several common Windows Server administration tools, such as Windows Admin Center, Server Manager, and PowerShell. The module also covers the post-installation configuration process and tools available for this process, such as sconfig and Desired State Configuration (DSC).

Lessons

  • Perform Windows Server Secure Administration for Government

  • Describe Windows Server Administration Tools for Government

  • Perform Post-Installation Configuration of Windows Server for Government

  • Just Enough Administration in Windows Server for Government

Lab: Managing Windows Server for Government

  • Implementing and Using Remote Server Administration for Government

After completing this module, students will be able to:

  • Explain least privilege administrative models for government.

  • Decide when to use privileged access workstations for government.

  • Select the most appropriate Windows Server administration tool for a given situation in a government setting.

  • Apply different methods to perform post-installation configuration of Windows Server for government.

  • Constrain privileged administrative operations by using Just Enough Administration (JEA) for government.

Module 4: Facilitating Hybrid Management for Government

This module covers tools that facilitate managing Windows IaaS VMs remotely. It also discusses how to use Azure Arc with on-premises server instances, deploy Azure policies with Azure Arc, and restrict access to Log Analytics data using role-based access control (RBAC).

Lessons

  • Administer and Manage Windows Server IaaS Virtual Machines Remotely for Government

  • Manage Hybrid Workloads with Azure Arc for Government

Lab: Using Windows Admin Center in Hybrid Scenarios for Government

  • Provisioning Azure VMs Running Windows Server for Government
  • Implementing Hybrid Connectivity by Using the Azure Network Adapter for Government
  • Deploying Windows Admin Center Gateway in Azure for Government
  • Verifying Functionality of the Windows Admin Center Gateway in Azure for Government

After completing this module, students will be able to:

  • Select appropriate tools and techniques to manage Windows IaaS VMs remotely for government.

  • Explain how to onboard on-premises Windows Server instances in Azure Arc for government.

  • Connect hybrid machines to Azure from the Azure portal for government.

  • Use Azure Arc to manage devices for government.

  • Restrict access using RBAC for government.

Module 5: Hyper-V Virtualization in Windows Server for Government

This module describes how to implement and configure Hyper-V VMs and containers. It covers key features of Hyper-V in Windows Server, VM settings, and how to configure VMs in Hyper-V. The module also discusses security technologies used with virtualization, such as shielded VMs, Host Guardian Service, admin-trusted and TPM-trusted attestation, and Key Protection Service (KPS). Finally, this module covers running containers and container workloads, and orchestrating container workloads on Windows Server using Kubernetes.

Lessons

  • Configure and Manage Hyper-V for Government

  • Configure and Manage Hyper-V Virtual Machines for Government

  • Secure Hyper-V Workloads for Government

  • Run Containers on Windows Server for Government

  • Orchestrate Containers on Windows Server Using Kubernetes for Government

Lab: Implementing and Configuring Virtualization in Windows Server for Government

  • Creating and Configuring VMs for Government
  • Installing and Configuring Containers for Government

After completing this module, students will be able to:

  • Install and configure Hyper-V on Windows Server for government.

  • Configure and manage Hyper-V virtual machines for government.

  • Use Host Guardian Service to protect virtual machines for government.

  • Create and deploy shielded virtual machines for government.

  • Configure and manage container workloads for government.

  • Orchestrate container workloads using a Kubernetes cluster for government.

Module 6: Deploying and Configuring Azure VMs for Government

This module describes Azure compute and storage in relation to Azure VMs, and how to deploy Azure VMs using the Azure portal, Azure CLI, or templates. It also explains how to create new VMs from generalized images and use Azure Image Builder templates to manage images in Azure. Finally, this module covers deploying Desired State Configuration (DSC) extensions, implementing those extensions to remediate noncompliant servers, and using custom script extensions.

Lessons

  • Plan and Deploy Windows Server IaaS Virtual Machines for Government

  • Customize Windows Server IaaS Virtual Machine Images for Government

  • Automate the Configuration of Windows Server IaaS Virtual Machines for Government

Lab: Deploying and Configuring Windows Server on Azure VMs for Government

  • Authoring Azure Resource Manager (ARM) Templates for Azure VM Deployment for Government
  • Modifying ARM Templates to Include VM Extension-Based Configuration for Government
  • Deploying Azure VMs Running Windows Server by Using ARM Templates for Government
  • Configuring Administrative Access to Azure VMs Running Windows Server for Government
  • Configuring Windows Server Security in Azure VMs for Government

After completing this module, students will be able to:

  • Create a VM from the Azure portal and from Azure Cloud Shell for government.

  • Deploy Azure VMs by using templates for government.

  • Automate the configuration of Windows Server IaaS VMs for government.

  • Detect and remediate noncompliant servers for government.

  • Create new VMs from generalized images for government.

  • Use Azure Image Builder templates to create and manage images in Azure for government.

Module 7: Network Infrastructure Services in Windows Server for Government

This module describes how to implement core network infrastructure services in Windows Server, such as DHCP and DNS. It also covers how to implement IP address management and use Remote Access Services.

Lessons

  • Deploy and Manage DHCP for Government

  • Implement Windows Server DNS for Government

  • Implement IP Address Management for Government

  • Implement Remote Access for Government

Lab: Implementing and Configuring Network Infrastructure Services in Windows Server for Government

  • Deploying and Configuring DHCP for Government
  • Deploying and Configuring DNS for Government

After completing this module, students will be able to:

  • Implement automatic IP configuration with DHCP in Windows Server for government.

  • Deploy and configure name resolution with Windows Server DNS for government.

  • Implement IPAM to manage an organization’s DHCP and DNS servers, and IP address space for government.

  • Select, use, and manage remote access components for government.

  • Implement Web Application Proxy (WAP) as a reverse proxy for internal web applications for government.

Module 8: Implementing Hybrid Networking Infrastructure for Government

This module describes how to connect an on-premises environment to Azure and configure DNS for Windows Server IaaS virtual machines. It covers how to choose the appropriate DNS solution for your organization’s needs and run a DNS server in a Windows Server Azure IaaS VM. Finally, this module discusses managing Microsoft Azure virtual networks and IP address configuration for Windows Server infrastructure as a service (IaaS) virtual machines.

Lessons

  • Implement Hybrid Network Infrastructure for Government

  • Implement DNS for Windows Server IaaS VMs for Government

  • Implement Windows Server IaaS VM IP Addressing and Routing for Government

Lab: Implementing Windows Server IaaS VM Networking for Government

  • Implementing Virtual Network Routing in Azure for Government
  • Implementing DNS Name Resolution in Azure for Government

After completing this module, students will be able to:

  • Implement an Azure virtual private network (VPN) for government.

  • Configure DNS for Windows Server IaaS VMs for government.

  • Run a DNS server in a Windows Server Azure IaaS VM for government.

  • Create a route-based VPN gateway using the Azure portal for government.

  • Implement Azure ExpressRoute for government.

  • Implement an Azure wide area network (WAN) for government.

  • Manage Microsoft Azure virtual networks (VNets) for government.

  • Manage IP address configuration for Windows Server IaaS virtual machines (VMs) for government.

Module 9: File Servers and Storage Management in Windows Server for Government

This module covers the core functionality and use cases of file server and storage management technologies in Windows Server. It discusses how to configure and manage the Windows File Server role, and how to use Storage Spaces and Storage Spaces Direct. This module also covers replication of volumes between servers or clusters using Storage Replica.

Lessons

  • Manage Windows Server File Servers for Government

  • Implement Storage Spaces and Storage Spaces Direct for Government

  • Implement Windows Server Data Deduplication for Government

  • Implement Windows Server iSCSI for Government

  • Implement Windows Server Storage Replica for Government

Lab: Implementing Storage Solutions in Windows Server for Government

  • Implementing Data Deduplication for Government
  • Configuring iSCSI Storage for Government
  • Configuring Redundant Storage Spaces for Government
  • Implementing Storage Spaces Direct for Government

After completing this module, students will be able to:

  • Configure and manage the Windows Server File Server role for government.

  • Protect data from drive failures using Storage Spaces for government.

  • Increase scalability and performance of storage management using Storage Spaces Direct for government.

  • Optimize disk utilization using Data DeDuplication for government.

  • Configure high availability for iSCSI for government.

  • Enable replication of volumes between clusters using Storage Replica for government.

  • Use Storage Replica to provide resiliency for data hosted on Windows Servers volumes for government.

Module 10: Implementing a Hybrid File Server Infrastructure for Government

This module introduces Azure file services and how to configure connectivity to Azure Files. It covers deploying and implementing Azure File Sync to cache Azure file shares on an on-premises Windows Server file server. This module also describes managing cloud tiering and migrating from DFSR to Azure File Sync.

Lessons

  • Overview of Azure File Services for Government

  • Implementing Azure File Sync for Government

Lab: Implementing Azure File Sync for Government

  • Implementing DFS Replication in Your On-Premises Environment for Government
  • Creating and Configuring a Sync Group for Government
  • Replacing DFS Replication with File Sync–Based Replication for Government
  • Verifying Replication and Enabling Cloud Tiering for Government
  • Troubleshooting Replication Issues for Government

After completing this module, students will be able to:

  • Configure Azure file services for government.

  • Configure connectivity to Azure file services for government.

  • Implement Azure File Sync for government.

  • Deploy Azure File Sync for government.

  • Manage cloud tiering for government.

  • Migrate from DFSR to Azure File Sync for government.

Requirements

Before attending this course, students must have:

  • Experience managing the Windows Server operating system and Windows Server workloads in on-premises environments, including Active Directory Domain Services (AD DS), DNS, Distributed File System (DFS), Hyper-V, and File and Storage Services.

  • Familiarity with common Windows Server management tools (implied by the first prerequisite).

  • Basic understanding of core Microsoft compute, storage, networking, and virtualization technologies (implied by the first prerequisite).

  • Experience and knowledge of fundamental networking technologies such as IP addressing, name resolution, and Dynamic Host Configuration Protocol (DHCP).

  • Hands-on experience with Microsoft Hyper-V and a basic understanding of server virtualization concepts.

  • Basic experience implementing and managing Infrastructure as a Service (IaaS) services in Microsoft Azure.

  • Familiarity with Azure Active Directory.

  • Practical experience working with Windows client operating systems, such as Windows 10 or Windows 11.

  • Basic proficiency with Windows PowerShell.

This course is designed to enhance the skills of IT professionals for government and other public sector organizations, ensuring they are well-prepared to manage and support critical infrastructure and services.

 28 Hours

Number of participants


Price per participant

Upcoming Courses

Related Categories