Trainer References
Table of contents
- Learning Path 1: Secure Windows Server on-premises and hybrid infrastructures (Windows Server security)
- Learning Path 2: Secure Windows Server on-premises and Hybrid Infrastructures (Implementing Security Solutions in Hybrid Scenarios)
- Learning Path 3: Implementing Windows Server high Availability
- Learning Path 4: Implement Disaster Recovery in Windows Server on-premises and Hybrid Environments (Disaster Recovery in Windows Server)
- Learning Path 5: Implement Disaster Recovery in Windows Server on-premises and Hybrid Environments (Implementing Disaster Recovery Services in Hybrid Scenarios)
- Learning Path 6: Migrate Servers and Workloads in on-premises and Hybrid Environments (Upgrade and migrate in Windows Server)
- Learning Path 7: Migrate Servers and Workloads in on-premises and Hybrid Environments (Implementing migration in hybrid scenarios)
- Learning Path 8: Monitor and Troubleshoot Windows Server Environment (Server and performance monitoring in Windows Server)
- Learning Path 9: Monitor and troubleshoot Windows Server environment (Implementing operational monitoring in hybrid scenarios)
Learning Path 1: Secure Windows Server on-premises and hybrid infrastructures (Windows Server security)
| Lessons | Notes |
|---|---|
| Secure Windows Server user accounts | - Credential Guard overview |
| Hardening Windows Server | - Windows LAPS overview - New tool: Policy Analyzer - Microsoft Security Compliance Toolkit - How to use - Download Microsoft Security Compliance Toolkit 1.0 |
| Secure Windows Server DNS | - DNNSEC - BIND DNSSEC Guide + Scripts + Tools + RFCs from DNS.pt - Webcheck: Check the security of your domaino |
Learning Path 2: Secure Windows Server on-premises and Hybrid Infrastructures (Implementing Security Solutions in Hybrid Scenarios)
| Lessons | Notes |
|---|---|
| Implement Windows Server IaaS VM network security | - Azure network security groups overview - What is Azure Firewall? - Microsoft Network Monitor 3.4 (archive) |
| Manage Azure VM updates | - Azure Update Manager overview |
| Create and implement application allowlists with adaptive application control | - Understand adaptive application controls |
| Audit the security of Windows Server IaaS virtual machines | - What is Microsoft Sentinel? - MITRE ATT&CK |
| Configure BitLocker disk encryption for Windows IaaS Virtual Machines | - BitLocker overview - Overview of managed disk encryption options - Find your BitLocker recovery key for home users |
| Implement change tracking and file integrity monitoring for Windows IaaS VMs | - Announcing public preview: Azure Change Tracking & Inventory using Azure Monitor agent (AMA) - Azure Monitor Agent overview |
| Lab | Resource |
|---|---|
| Lab 02: Implementing Security Solutions in Hybrid Scenarios | - Log Analytics Windows Agent (64 bit): https://go.microsoft.com/fwlink/?LinkId=828603 - Log Analytics Windows Agent (32 bit): https://go.microsoft.com/fwlink/?LinkId=828604 - Log Analytics Linux Agent: https://go.microsoft.com/fwlink/?LinkId=692028 - Download and onboard agent for Linux: wget https://raw.githubusercontent.com/Microsoft/OMS-Agent-for-Linux/master/installer/scripts/onboard_agent.sh && sh onboard_agent.sh -w 3bd6999e-7f72-476b-9c42-73b11d8081b9 -s e/89OyCsoJm1Ox756oailfMDvQCjTzvu5Dx2Jaf39hR1CSMFznqNn7ouh2f65m0dVBlrhrfl5hDZOTif25pjTg== -d opinsights.azure.com |
Note: The legacy Log Analytics agent will be deprecated by August 2024. After this date, Microsoft will no longer provide any support for the Log Analytics agent. Migrate to Azure Monitor agent before August 2024 to continue ingesting data.
Learning Path 3: Implementing Windows Server high Availability
| Lessons | Notes |
|---|---|
| Introduction to Cluster Shared Volumes | Cluster Shared Volumes (CSV): Disk Ownership |
Learning Path 4: Implement Disaster Recovery in Windows Server on-premises and Hybrid Environments (Disaster Recovery in Windows Server)
| Lessons | Notes |
|---|---|
| Implement Hyper-V Replica | Resilient File System (ReFS) overview |
| Protect your on-premises infrastructure from disasters with Azure Site Recovery | - - - |
Learning Path 5: Implement Disaster Recovery in Windows Server on-premises and Hybrid Environments (Implementing Disaster Recovery Services in Hybrid Scenarios)
| Lessons | Notes |
|---|---|
| Protect your Azure infrastructure with Azure Site Recovery | - About networking in Azure VM disaster recovery |
| Protect your virtual machines by using Azure Backup | - Tutorial: Cable and connect to your Azure Data Box - Tutorial: Cable and connect to your Azure Data Box Heavy |
| Protect your virtual machines by using Azure Backup | - Azure subscription and service limits, quotas, and constraints |
Learning Path 6: Migrate Servers and Workloads in on-premises and Hybrid Environments (Upgrade and migrate in Windows Server)
| Lessons | Notes |
|---|---|
| Active Directory Domain Services migration | - Windows Server 2019 EOF - Windows Server 2022 EOF - Overview of Windows Server upgrades - Install, upgrade, or migrate to Windows Server - Upgrade and conversion options for Windows Server - Upgrade domain controllers to a newer version of Windows Server - Active Directory Domain Services migration - Training - Support policy and known issues for Active Directory Migration Tool - Active Directory Migration Tool version 3.2 (has known problems and limited support) - Active Directory Migration Tool (ADMT) Guide: Migrating and Restructuring Active Directory Domains |
| Migrate file server workloads using Storage Migration Service | - Storage Migration Service overvie - Migrate file server workloads using Storage Migration Service - Training |
| Migrate Windows Server roles | - Server Migration PowerShell - Migrate Windows Server roles - Training |
Learning Path 7: Migrate Servers and Workloads in on-premises and Hybrid Environments (Implementing migration in hybrid scenarios)
| Lessons | Notes |
|---|---|
| Migrate on-premises Windows Server Instances to Azure IaaS Virtual Machines | - Azure Data Box - Tutorial: Cable and connect to your Azure Data Box - Tutorial: Cable and connect to your Azure Data Box Heavy |
Learning Path 8: Monitor and Troubleshoot Windows Server Environment (Server and performance monitoring in Windows Server)
| Lessons | Notes |
|---|---|
| Monitor Windows Server performance | - Snap-ins |
| Manage and monitor Windows Server event logs | - Review events and errors using Event Viewer - Server event logs |
| Implement Windows Server auditing and diagnostics | - AuditPol |
| Troubleshoot Active Directory | - How to reset the Directory Services Restore Mode administrator account password in Windows Server |
Learning Path 9: Monitor and troubleshoot Windows Server environment (Implementing operational monitoring in hybrid scenarios)
| Lessons | Notes |
|---|---|
| Monitor Windows Server Virtual Machines and hybrid instances | Azure Monitor overview |
| Monitor your Azure virtual machines with Azure Monitor | - Kusto Query Language (KQL) overview - SQL to Kusto Query Language cheat sheet - Azure Data Explorer Samples |
| Troubleshoot Windows Server Virtual Machines in Azure | |
| Troubleshoot on-premises and hybrid networking | - Dnscmd utility - DNSLint utility |