Agenda

• Secure Windows Server user accounts
• Introduction
• Configure user account rights
• Protect user accounts with the Protected Users group
• Describe Windows Defender Credential Guard
• Block NTLM authentication
• Locate problematic accounts
• Hardening Windows Server
• Describe Local Password Administrator Solution
• Configure Privileged Access Workstations
• Secure domain controllers
• Analyze security configuration with Security Compliance Toolkit
• Secure SMB traffic
• Knowledge check
• Windows Server update management
• Explore Windows Update
• Outline Windows Server Update Services server deployment options
• Define Windows Server Update Services update management process
• Describe the process of Update Management
• Secure Windows Server DNS
• Implement split-horizon DNS
• Create DNS policies
• Implement DNS policies
• Secure Windows Server DNS
• Implement DNSSEC
• Implement Windows Server IaaS VM network security
• Implement network security groups and Windows IaaS VMs
• Implement adaptive network hardening
• Implement Azure Firewall and Windows IaaS VMs
• Implement Windows firewall with Windows Server IaaS VMs
• Choose the appropriate filtering solution
• Deploy and configure Azure firewall using the Azure portal
• Capture network traffic with network watcher
• Log network traffic to and from a VM using the Azure portal
• Audit the security of Windows Server IaaS Virtual Machines
• Describe Azure Security Center
• Enable Azure Security Center in hybrid environments
• Implement and assess security policies
• Protect your resources with Azure Security Center
• Implement Azure Sentinel
• Manage Azure updates
• Describe update management
• Enable update management
• Deploy updates
• View update assessments
• Manage updates for your Azure Virtual Machines
• Create and implement application allowlists with adaptive application control
• Describe adaptive application control
• Implement adaptive application control policies
• Configure BitLocker disk encryption for Windows IaaS Virtual Machines
• Describe Azure Disk Encryption and server-side encryption
• Configure Key Vault for Azure Disk Encryption
• Encrypt Azure IaaS Virtual Machine hard disks
• Back up and recover data from encrypted disks
• Create and encrypt a Windows Virtual Machine
• Implement change tracking and file integrity monitoring for Windows IaaS VMs
• Implement Change Tracking and Inventory
• Manage Change Tracking and Inventory
• Manage tracked files
• Implement File Integrity Monitoring
• Select and monitor entities
• Use File Integrity Monitoring
• Introduction to Cluster Shared Volumes
• Determine the functionality of Cluster Shared Volumes
• Explore the architecture and components of Cluster Shared Volumes
• Implement Cluster Shared Volumes
• Implement Windows Server failover clustering
• Define Windows Server failover clustering
• Plan Windows Server failover clustering
• Implement Windows Server failover clustering
• Manage Windows Server failover clustering
• Implement stretch clusters
• Define cluster sets
• Implement high availability of Windows Server VMs
• Select high-availability options for Hyper-V
• Consider network load balancing for Hyper-V VMs
• Implement Hyper-V VM live migration
• Implement Hyper-V VMs storage migration
• Implement Windows Server File Server high availability
• Explore the Windows Server File Server high-availability options
• Define Cluster Shared Volumes
• Implement Scale-Out File Server
• Implement Storage Replica
• Implement scale and high availability with Windows Server VM
• Describe virtual machine scale sets
• Implement scaling
• Implement load-balancing VMs
• Create a virtual machine scale set in the Azure portal
• Describe Azure Site Recovery
• Implement Azure Site Recovery
• Implement Hyper-V Replica
• Define Hyper-V Replica
• Plan for Hyper-V Replica
• Configure and implement Hyper-V Replica
• Define extended replication
• Define Azure Site Recovery
• Implement Site Recovery from on-premises site to Azure
• Implement Site Recovery from on-premises site to on-premises site
• Protect your on-premises infrastructure from disasters with Azure Site Recovery
• Azure Site Recovery overview
• Workloads supported for protection with Azure Site Recovery
• Run a disaster recovery drill
• Failover and failback
• Implement hybrid backup and recovery with Windows Server IaaS
• Describe Azure Backup
• Implement recovery vaults
• Implement Azure Backup policies
• Recover Windows IaaS Virtual Machines
• Perform file and folder recovery
• Perform backup and restore of on-premises workloads
• Manage Azure Virtual Machine backups with Azure Backup service
• Protect your Azure infrastructure with Azure Site Recovery
• What is Azure Site Recovery
• Prepare for disaster recovery with Azure Site Recovery
• Exercise - Set up disaster recovery with Azure Site Recovery
• Run a disaster recovery drill
• Exercise - Run a disaster recovery drill
• Failover and failback using Azure Site Recovery
• Protect your virtual machines by using Azure Backup
• Azure Backup features and scenarios
• Back up an Azure virtual machine by using Azure Backup
• Exercise - Back up an Azure virtual machine
• Restore virtual machine data
• Active Directory Domain Services migration
• Examine upgrade vs. migration
• Upgrade a previous version of Active Directory Domain Services to Windows Server 2022
• Migrate to Active Directory Domain Services in Windows Server 2022 from a previous version
• Explore the Active Directory Migration Tool
• Migrate file server workloads using Storage Migration Service
• Storage Migration Service overview and usage scenarios
• Storage migration requirements
• Migrate a server with Storage migration
• Evaluate storage migration considerations
• Migrate Windows Server roles
• Describe the Windows Server Migration Tools
• Install the Migration Tools
• Migrate roles using the Migration Tools
• Migrate on-premises Windows Server instances to Azure IaaS virtual machines
• Plan your migration
• Describe Azure Migrate
• Perform server assessment
• Assess physical servers with Azure Migrate
• Migrate Windows Server workloads by using Azure Migrate
• Upgrade and migrate Windows Server IaaS virtual machines
• Describe Azure Migrate
• Migrate Windows Server workloads by using Azure Migrate
• Describe storage migration
• Migrate file servers by using Storage Migration Service
• Containerize and migrate ASP.NET applications to Azure App Service
• Azure Migrate App Containerization overview
• Monitor Windows Server performance
• Use Performance Monitor to identify performance problems
• Use Resource Monitor to review current resource usage
• Review reliability with Reliability Monitor
• Implement a performance monitoring methodology
• Use Data Collector Sets to analyze server performance
• Monitor network infrastructure services
• Monitor virtual machines running Windows Server
• Monitor performance with Windows Admin Center
• Use System Insights to help predict future capacity issues
• Optimize the performance of Windows Server
• Manage and monitor Windows Server event logs
• Describe Windows Server event logs
• Use Windows Admin Center to review logs
• Use Server Manager to review logs
• Use custom views
• Implement event log subscriptions
• Implement Windows Server auditing and diagnostics
• Describe basic auditing categories
• Describe advanced categories
• Log user access
• Enable setup and boot event collection
• Troubleshoot Active Directory
• Recover objects from the AD recycle bin
• Recover the AD DS database
• Recover SYSVOL
• Troubleshoot AD DS replication
• Troubleshoot hybrid authentication issues
• Monitor Windows Server IaaS Virtual Machines and hybrid instances
• Enable Azure Monitor for Virtual Machines
• Monitor an Azure Virtual Machine with Azure Monitor
• Enable Azure Monitor in hybrid scenarios
• Collect data from a Windows computer in a hybrid environment
• Integrate Azure Monitor with Microsoft Operations Manager
• Monitor the health of your Azure virtual machine by using Azure Metrics Explorer and metric alerts
• Monitor the health of the virtual machine
• Exercise - Set up a VM with boot diagnostics
• View VM metrics
• Configure the Azure Diagnostics extension
• Exercise - Configure the Azure Diagnostics extension
• Diagnostic data case studies
• Monitor performance of virtual machines by using Azure Monitor VM Insights
• What are Azure Monitor Logs and Azure Monitor VM Insights?
• Exercise - Set up a Log Analytics workspace and Azure Monitor VM Insights
• Build log queries by using the Kusto Query Language
• Troubleshoot on-premises and hybrid networking
• Diagnose DHCP problems
• Diagnose DNS problems
• Diagnose IP configuration issues
• Diagnose routing problems
• Use Packet Monitor to help diagnose network problems
• Use Azure Network Watcher to help diagnose network problems
• Troubleshoot Windows Server Virtual Machines in Azure
• Troubleshoot VM deployment
• Troubleshoot VM startup
• Troubleshoot VM extensions
• Troubleshoot VM connectivity
• Troubleshoot VM performance
• Troubleshoot VM storage