Configuring Windows Server Hybrid Advanced Services Exam Ref AZ-801 E-Book

Chris Gill

• Herausgeber: Packt Publishing
• Kategorie: Fachliteratur
• Sprache: Englisch

Seitenzahl: 582

Veröffentlichungsjahr: 2023

Beschreibung

Configuring Windows Server Hybrid Advanced Services Exam Ref AZ-801 helps you master various cloud and data center management concepts in detail, helping you grow your expertise in configuring and managing Windows Server in on-premises, hybrid, and cloud-based workloads. Throughout the book, you'll cover all the topics needed to pass the AZ-801 exam and use the skills you acquire to advance in your career.
With this book, you’ll learn how to secure your on-premises Windows Server resources and Azure IaaS workloads. First, you’ll explore the potential vulnerabilities of your resources and learn how to fix or mitigate them. Next, you'll implement high availability Windows Server virtual machine workloads with Hyper-V Replica, Windows Server Failover Clustering, and Windows File Server.
You’ll implement disaster recovery and server migration of Windows Server in on-premises and hybrid environments. You’ll also learn how to monitor and troubleshoot Windows Server environments.
By the end of this book, you'll have gained the knowledge and skills required to ace the AZ-801 exam, and you'll have a handy, on-the-job desktop reference guide.

Leseprobe

Configuring Windows Server Hybrid Advanced Services Exam Ref AZ-801

Configure advanced Windows Server services for on-premises, hybrid, and cloud environments

Chris Gill

BIRMINGHAM—MUMBAI

Configuring Windows Server Hybrid Advanced Services Exam Ref AZ-801

Copyright © 2023 Packt Publishing

All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except in the case of brief quotations embedded in critical articles or reviews.

Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the author, nor Packt Publishing or its dealers and distributors, will be held liable for any damages caused or alleged to have been caused directly or indirectly by this book.

Packt Publishing has endeavored to provide trademark information about all of the companies and products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot guarantee the accuracy of this information.

Associate Group Product Manager: Mohd Riyan Khan

Senior Editor: Nihar Kapadia, Divya Vijayan

Technical Editor: Shruthi Shetty

Copy Editor: Safis Editing

Project Coordinator: Ashwin Kharwa

Proofreader: Safis Editing

Indexer: Hemangini Bari

Production Designer: Ponraj Dhandapani

Marketing Coordinator: Marylou De Mello

First published: April 2023

Production reference: 1310323

Published by Packt Publishing Ltd.

Livery Place

35 Livery Street

Birmingham

B3 2PB, UK.

ISBN 978-1-80461-509-6

www.packtpub.com

To my wife, Jenn – thank you for being incredibly supportive of this hustle every step of the way through life’s rollercoaster ride. You are my North Star, my driving force, and my inspiration to keep going no matter what the challenge may be! To my children, Coleston and Kennady – you both give me the courage, the patience, and the inspiration to share knowledge and experiences with the community, no matter the generation (or the topic, for that matter). While I realize I borrowed time from our busy schedules to create this resource, know that you both were front of mind throughout! And to my extended family, coworkers, and community friends – your encouragement, support, and check-ins were appreciated and necessary to help ensure that I finished writing this book!

They say that legacy is a shared experience – I hope that you are not only left with valuable insights from this resource, but your own visions and experience that encompass the past, present, and future states of the cloud.

– Christopher “CG” Gill

Foreword

Reports of Windows Server’s death have been greatly over-exaggerated. I know companies of all sizes are hyper-focused on the cloud, but Windows Server skills are not the equivalent of knowing Latin (at least not yet anyway). I am excited to see Microsoft’s reaffirmed focus on Windows Server skills, especially given how much everyone invested in those skills over the last few decades (me included).

In my previous role, I worked on the Cloud Advocacy team, and I was involved with the initial promotion of the AZ-800 and AZ-801 during the Ignite 2021 timeframe (November 2021). I worked with teams to get content out to a broader audience of folks all across the globe who could benefit from taking the exam. The overwhelming response to having these certifications brought to life was such a positive experience for me to witness. These exams are meant to give more traditional on-premises administrators exposure to the world of Azure!

In thinking through my own journey as a former system administrator, I love that we’re getting back to the basics of what made most of us technical: Windows Server. I learned so much about how to configure Active Directory, DNS, file services, PowerShell, DHCP, and so on, just by installing a server operating system onto a random spare computer I was no longer using. In preparing for the exams myself, I re-remembered some of the more complex and complicated parts of Windows Server, which is a must-have if someone needs to validate skills for a job role. Additionally, learning about the Windows Server components that extend into Azure is one awesome way to keep skills current. I’ll say it again: infrastructure skills are NOT going away…they’re just evolving.

The one thing that has changed is the way in which Windows Server skills mix with cloud-based skills. The fundamentals are still very important and showcasing that knowledge to current and future employers is equally as important. A lot of this is best understood by going through appropriate how-tos, especially because the fundamentals are still the same.

Folks interested in sitting for this exam are usually those responsible for configuring and managing Windows Server on-premises. Additionally, these same folks are sometimes managing hybrid and Infrastructure as a Service (IaaS) platform workloads in Azure. The Windows Server hybrid administrator usually finds themselves integrating Windows Server environments on-premises with Azure services. The learner would also need to manage and maintain Windows Server IaaS workloads in Azure as well as knowing how to both migrate and deploy workloads in Azure.

Everything covered in this book will more than equip students to take and pass the AZ-801. The exam itself can be tricky in parts, so the best bet will be to read through everything, lab up, and dig in! I really like how the labs are outlined with hands-on activities, which is my favorite way of learning (or relearning) tech!

I have known Chris for a few years now and because of the pandemic, everything we have worked on together has been virtual. Hopefully, that will change soon. I was so ecstatic to be selected as a reviewer and the foreword writer!

I hope you find this book enjoyable, practical, and easy to follow! Best of luck if you’re going to schedule and take the exam!

Shannon Kuehn

Senior Product Manager – Digital Influence Team – Identity and Network Access, Microsoft

Contributors

About the author

Chris Gill is a director of Microsoft applications at Nixon Peabody LLP, a leading global law firm. He has been in IT, development, infrastructure, security, and architecture for over 20 years. His passion for tech has led to his becoming a Microsoft Certified Trainer (MCT) and a Microsoft Most Valuable Professional (MVP) in Microsoft Azure.

Chris has a Bachelor of Science degree in computer science from St Bonaventure University and holds over 20 Microsoft certifications including Azure Solutions Architect, Azure Security Engineer, Azure Administrator, and Microsoft 365 Enterprise Administrator. Chris can be found interacting with folks on social networks, mentoring tech and soft skills, speaking with and hosting user groups, and providing insights on his blog.

Originally from Northern Cambria, PA, Chris resides in Penfield, NY with his wife and two incredible children.

About the reviewers

Alex ter Neuzen has been a system engineer on Windows for over 20 years and has spent the last 12 years working on Microsoft 365 with a main focus on on-premises combined with Microsoft Azure services. On-premises services are a specialty that he has developed in those 20 years and are his expertise. Currently, he is working as an IT consultant for a major company that is using Microsoft Azure in a hybrid form. He is responsible for migrating services and devices.

I would like to thank my girlfriend and children for their patience during the review of this book. It took a lot of time that I was not able to give to them. Microsoft Azure and on-premises services are an interesting world and it was a lot of fun to be part of the technical review team for this book.

Shannon Kuehn is a not-so-typical technologist. Her roots are grounded in public speaking and writing. She gravitated toward technology through music, by way of being a DJ and recording demos for club promoters. After taking time to develop initial skills in troubleshooting, she quickly found herself in jobs that graduated her toward deeper levels of technical skill. After receiving training and on-the-job experience, her career arc evolved into building comprehensive technical solutions in Azure. She is currently a senior product manager on the identity and network access team at Microsoft. She focuses on community outreach and content creation for Microsoft’s identity platform to get developers and IT pros comfortable with life in the cloud.

Windows Server is STILL widely used in the technical world we live in. The two AZ-8XX exams were something I worked very closely with the Cloud Advocacy team on back in 2021. A year plus into seeing those exams come online and the number of folks taking these exams continues to grow. That alone is quite a testament to Windows being here for the long haul. Thanks to Chris and the Packt team for letting me review the final product!

Steve Miles, aka SMiles, is an MCT, Microsoft Azure, and Hybrid MVP with over 20 years of experience in on-prem security, networking, data center infrastructure, managed hosting, and hybrid cloud solutions. Steve is the author of the Packt book AZ-800 Exam Guide Administering Windows Server Hybrid Core Infrastructure, as well as being the author of the Packt book AZ-900 Exam Guide Azure Fundamentals and Azure Security Cookbook.

His first Microsoft certification was on Windows NT; he is an MCITP, MCSA, and MCSE for Windows Server and many other Microsoft products. He also holds multiple Microsoft Fundamentals, Associate, Expert, and Specialty certifications in Azure Security, Identity, Network as well as M365, and D365.

This is my contribution to the worldwide technical learning community, and I would like to thank all of you who are investing your valuable time in committing to reading this book and learning these skills.

Jimmy Bandell is an experienced IT professional with a wealth of knowledge and skills honed over 15 years in the industry. Throughout his career, he has developed a deep understanding of the technical complexities involved in managing IT systems and networks, as well as the importance of effective communication and collaboration in ensuring successful outcomes for clients and stakeholders.

Known for his strong work ethic and commitment to excellence, he is a trusted advisor to his clients and colleagues. Whether he is troubleshooting issues or mentoring team members, he approaches each task with a can-do attitude and a focus on achieving results.

Outside of work, he enjoys spending time with his family and his hobbies, such as cooking and building Lego.

Table of Contents

Preface

Part 1: Exam Overview and the Current State of On-Premises, Hybrid, and Cloud Workflows

1

Exam Overview and the Current State of Cloud Workloads

Technical requirements and lab setup

Preparing for a Microsoft exam

Step 1 – Reviewing the exam skills outline

Step 2 – Review the skills measured and practice to improve your skills

Step 3 – Identify additional learning materials

Exam format and exam demo experience

Resources available and utilizing Microsoft Learn for supplemental experience

Where and when to take the exam

Creating a Microsoft 365 trial subscription and free Azure account

Setting up a lab environment using Hyper-V

Exam objectives

Who should take the AZ-801 exam?

The current state of on-premises, hybrid, and cloud workflows (and how they can work together to deliver for you and your business needs)

Identifying current hybrid cloud trends

Defining on-premises infrastructure

Defining hybrid infrastructure

Defining cloud-native infrastructure

On-premises versus hybrid versus cloud-native – is there a one size fits all?

Summary

Part 2: Secure Windows Server On-Premises and Hybrid Infrastructures

2

Securing the Windows Server Operating System

Technical requirements and lab setup

Installing a new Windows Server 2022 domain controller

Installing a new Windows Server 2022 file server

Configuring and managing exploit protection

What is exploit protection?

How does exploit protection work?

Exploit protection mitigations

Using exploit protection Audit mode

Enabling exploit protection using the Windows Security app

Enabling exploit protection using Microsoft Endpoint Manager

Enabling exploit protection using Group Policy

Enabling exploit protection using PowerShell

Configuring and managing WDAC

Enabling WDAC using Microsoft Endpoint Manager

Configuring and managing Microsoft Defender for Endpoint

Licensing, software, and hardware requirements for Microsoft Defender for Endpoint

Onboarding devices to Microsoft Defender for Endpoint

Offboarding devices from Microsoft Defender for Endpoint

Configuring and managing Windows Defender Credential Guard

Requirements for enabling Windows Defender Credential Guard

Enabling Windows Defender Credential Guard using the hardware readiness tool

Enabling Windows Defender Credential Guard using Group Policy

Configuring Microsoft Defender SmartScreen

Configuring Microsoft Defender SmartScreen on an individual device

Configuring Microsoft Defender SmartScreen using Intune

Additional notes on Microsoft Defender SmartScreen

Implementing operating system security by using Group Policy

Summary

3

Securing a Hybrid Active Directory (AD) Infrastructure

Technical requirements and lab setup

Establishing a custom domain name

Synchronizing on-premises AD with Azure AD

Configuring self-service password reset (SSPR)

Configuring and managing password policies

Enabling password block lists

Configuring and managing account and user security

Managing protected users

Configuring account security

Managing account security on a Read-Only Domain Controller (RODC)

Securing domain controllers

Hardening domain controllers

Restricting access to domain controllers

Configuring authentication policies silos

Managing AD built-in groups and delegation

Managing AD built-in administrative groups

Managing AD delegation of privileges

Implementing and managing Microsoft Defender for Identity

Microsoft Defender for Identity prerequisites

Installation and management process overview

Summary

4

Identifying and Remediating Windows Server Security Issues Using Azure Services

Technical requirements and lab setup

Introduction to hybrid security using Microsoft Sentinel and Microsoft Defender for Cloud

Establishing a Data Collection Rule for Azure Monitor Agent

Installing the Azure Arc Connected Machine Agent

Monitoring on-premises servers and Azure IaaS VMs using Microsoft Sentinel

Identifying and remediating security issues for on-premises servers and Azure-hosted VMs with MDC

Summary

5

Secure Windows Server Networking

Technical requirements and lab setup

Introduction to Windows Defender Firewall

Managing Windows Defender Firewall

Implementing domain isolation

Implementing connection security rules

Summary

6

Secure Windows Server Storage

Introduction to NSGs

Introduction to ASGs

Overview of Azure service tags

Overview of the Azure Storage firewall

Technical requirements and lab setup

Managing BitLocker

BitLocker general system requirements

BitLocker basic setup

Managing and recovering encrypted volumes

Enabling storage encryption by using ADE

Managing Disk Encryption keys for IaaS VMs

Summary

Part 3: Implement and Manage Windows Server High Availability

7

Implementing a Windows Server Failover Cluster

Overview of Windows Server Failover Clustering

What is WSFC?

What workloads can WSFC be used for?

What is the difference between a Failover Cluster and a hyper-converged cluster?

Technical requirements and lab setup

Introduction to Windows Admin Center

Creating and managing a Windows Server Failover Cluster

Configuring network settings for Failover Clustering

Configuring Windows Server Failover Cluster storage options

Configuring cluster workload options

Configuring Stretch Clusters

Configuring Scale-Out File Server

Configuring Cluster Sets

Summary

8

Managing Failover Clustering

Technical requirements and lab setup

Managing failover clusters using Windows Admin Center

Implementing cluster-aware updating

Introduction to cluster-aware updating for Windows Server failover clusters

Installing Windows updates on cluster nodes

Recovering a failed cluster node

Upgrading a node to Windows Server 2022

Failing over workloads between nodes

Summary

9

Implementing and Managing Storage Spaces Direct

Technical requirements and lab setup

Introduction to Storage Spaces Direct (S2D)

Uses for S2D

Prerequisites for S2D

Deployment modes for S2D

Managing S2D

Implementing networking for S2D

Deploying S2D on Windows Server

Upgrading an S2D cluster node

S2D upgrade options

Prerequisites and general limitations

Summary

Part 4: Implement Disaster Recovery

10

Managing Backup and Recovery for Windows Server

Technical requirements and lab setup

Cost management review

Using Azure Backup Server to manage, back up, and recover files

Installing and managing Azure Backup Server

Backing up and recovering files and folders using Azure Backup Server

Using Azure Recovery Services vault to manage, back up, and restore files and folders

Creating a backup policy for an Azure Recovery Services vault

Managing backups in an Azure Recovery Services vault

Configuring backups for Azure Virtual Machines using the built-in backup agent

Recovering a VM using temporary snapshots

Restoring or recovering VMs to existing or new Azure Virtual Machines

Summary

11

Implementing Disaster Recovery Using Azure Site Recovery

Technical requirements and lab setup

Introduction to Azure Site Recovery

Configuring Azure Site Recovery networking

Configuring Azure Site Recovery for on-premises VMs

Configuring a recovery plan

Configuring Azure Site Recovery policies

Configuring Azure Site Recovery for Azure Virtual Machines

Implementing VM replication to a secondary data center or Azure region

Summary

12

Protecting Virtual Machines by Using Hyper-V Replicas

Technical requirements and lab setup

Introduction to Hyper-V Replica

Configuring Hyper-V hosts for replication

Configuring VM replication

Managing Hyper-V replica servers

Performing a VM failover

Summary

Part 5: Migrate Servers and Workloads

13

Migrating On-Premises Storage to On-Premises Servers or Azure

Technical requirements and lab setup

Introduction to Storage Migration Service

Transferring data and sharing configuration

Cutting over to a new server by using Storage Migration Service

Using Storage Migration Service to migrate to Azure Virtual Machines

Migrating to Azure File shares

Summary

14

Migrating On-Premises Servers to Azure

Technical requirements and lab setup

Introduction to Azure Migrate

Migrating using Azure Migrate tools

Deploying and configure the Azure Migrate appliance

Migrating VM workloads to Azure IaaS

Migrating physical workloads to Azure IaaS

Summary

15

Migrating Workloads from Previous Versions to Windows Server 2022

Technical requirements and lab setup

General recommendations for migrating Windows Server workloads

Migrate Internet Information Services (IIS)

Migrating Hyper-V hosts

Migrating RDS host servers

Migrating DHCP servers

Migrating print servers

Summary

16

Migrating IIS Workloads to Azure

Technical requirements and lab setup

Migrating IIS workloads to Azure Web Apps

Migrating IIS workloads to containers

Summary

17

Migrating an Active Directory Domain Services (AD DS) Infrastructure to Windows Server 2022 AD DS

Technical requirements and lab setup

Upgrading an existing forest

Migrating AD DS objects, users, groups, and Group Policy objects using the Active Directory Migration Tool

Migrating to a new Active Directory forest

Summary

Part 6: Monitor and Troubleshoot Windows Server Environments

18

Monitoring Windows Server Using Windows Server Tools and Azure Services

Technical requirements and lab setup

Configuring monitoring and alerting for Windows Server

Monitoring Windows Server using Performance Monitor

Creating and configuring Data Collector Sets

Monitoring servers and configuring alerts using Windows Admin Center

Monitoring servers using System Insights

Managing Windows Server event logs

Deploying Azure Monitor Agents

Collecting performance counters for Azure

Creating Azure Monitor alerts

Monitoring Azure Virtual Machines using the Azure Diagnostics extension

Monitoring Azure Virtual Machines performance using VM Insights

Summary

19

Troubleshooting Windows Server On-Premises and Hybrid Networking

Technical requirements and lab setup

Troubleshooting hybrid network connectivity

Network health and metrics

Network Watcher

Troubleshooting on-premises connectivity

Summary

20

Troubleshooting Windows Server Virtual Machines in Azure

Technical requirements and lab setup

Troubleshooting deployment failures

Troubleshooting booting failures

Reviewing Boot diagnostics

Working with Azure Serial Console

Troubleshooting VM performance issues

Troubleshooting VM extension issues

Troubleshooting disk encryption issues

Troubleshooting storage

Troubleshooting VM connection issues

Summary

21

Troubleshooting Active Directory

Technical requirements and lab setup

Restoring objects from AD Recycle Bin

Recovering an AD database using DSRM

Recovering SYSVOL

Troubleshooting AD replication

Troubleshooting hybrid authentication issues

Troubleshooting on-premises AD

Summary

22

Final Assessment and Mock Exam/Questions

Mock exam practice questions

Mock exam practice answers

Lab environment housekeeping

To completely remove all local Hyper-V virtual machines

To completely remove all Azure resources for your AZ801 exam tenant

Summary

Index

Other Books You May Enjoy

Preface

With this book, you’ll learn everything you need to know to administer core and advanced Windows Server and Infrastructure-as-a-Service workloads utilizing available on-premises, hybrid, and cloud technologies to meet your needs in your private and public cloud-native management and transformation efforts while preparing you to pass the AZ-801: Configuring Windows Server Hybrid Advanced Services exam.

Who this book is for

This book is intended for cloud and data center management administrators and engineers, enterprise architects, Microsoft 365 administrators, network engineers, and anyone seeking to gain additional working knowledge with Windows Server operating systems and managing on-premises, hybrid, and cloud workloads with administrative tools.

What this book covers

Chapter 1, Exam Overview and the Current State of Cloud Workloads, sets you up for success by helping you prepare for a Microsoft exam, helping you to identify additional community resources for training, and establishing a lab and trial Microsoft 365 subscription to reinforce skills with hands-on learning.

Chapter 2, Securing the Windows Server Operating System, covers how to configure and manage settings such as Exploit Protection and SmartScreen, Windows Defender Application Control and Credential Guard, and firewall and antimalware features such as Microsoft Defender for Endpoint. We will also learn how to implement additional system security configurations using Group Policies and configuration baselines.

Chapter 3, Securing a Hybrid Active Directory (AD) Infrastructure, helps you learn how to apply appropriate layers of security to protect Active Directory domain controllers against attack while allowing for continued productivity and secure workloads. You will also learn how to manage protected users, about the delegation of privileges and administrators, how to secure administrative workflows, about the authentication of and to domain controllers, and how to successfully implement and manage Microsoft Defender for Identity.

Chapter 4, Identifying and Remediating Windows Server Security Issues Using Azure Services, helps you learn how to successfully monitor virtual machines running both on-premises and in Azure using Azure Arc, Azure Monitor, and Microsoft Sentinel, allowing for telemetry and metrics insights, analysis, and response. We will also cover how to onboard devices into Microsoft Defender for Cloud so that we can proactively identify and remediate security issues wherever the virtual machine may be running within the infrastructure.

Chapter 5, Secure Windows Server Networking, covers how to configure and manage Windows Defender Firewall, how to successfully plan for and configure domain isolation, and how to implement connection security and authentication request rules for your Windows servers.

Chapter 6, Secure Windows Server Storage, helps you discover how to properly secure Windows Server storage to help protect against data theft, exposure, and ransomware.

Chapter 7, Implementing a Windows Server Failover Cluster, covers how to successfully establish the building blocks for a Windows Server failover cluster, where you will learn how to configure various storage options, and successfully design and configure appropriate network settings for the failover cluster.

Chapter 8, Managing Failover Clustering, covers how to configure components such as cluster-aware updating, how to recover failed cluster nodes, and how to upgrade existing cluster nodes to a newer Windows Server version.

Chapter 9, Implementing and Managing Storage Spaces Direct, covers how to configure Storage Spaces Direct (S2D) and then manage S2D within a failover cluster. We will also discuss how to upgrade the S2D node, as well as implementing proper security and networking configurations for S2D, discovering topics such as converged and hyper-converged deployments.

Chapter 10, Managing Backup and Recovery for Windows Server, discusses managing backup and recovery options for Windows Server. We will cover how to install and use Azure Backup Server for general backup and recovery of files and folders. We will then discuss how to configure and use an Azure Recovery Services vault to manage the backup of files and folders using backup policies.

Chapter 11, Implementing Disaster Recovery Using Azure Site Recovery, covers how to configure Azure Site Recovery, how to create and implement a recovery plan, and how to configure recovery policies to ensure your workload remains online in the event of a planned or unplanned outage/failure.

Chapter 12, Protecting Virtual Machines by Using Hyper-V Replicas, covers how to configure Hyper-V hosts for replication, including the management of the replica servers. We will then discuss how to configure VM replication between replica hosts and ultimately perform a failover to learn about the failover orchestration process.

Chapter 13, Migrating On-Premises Storage to On-Premises Servers or Azure, identifies how to successfully transfer data and share configurations from on-premises Windows servers to other available Windows servers running on-premises or in Microsoft Azure. We will learn how to use Windows Admin Center and Storage Migration Service to migrate services from one server to another.

Chapter 14, Migrating On-Premises Servers to Azure, covers how to deploy and configure the Azure Migrate appliance. Working with the Azure Migrate appliance, we will then migrate VM workloads to Microsoft Azure IaaS, migrate physical workloads to Azure IaaS, and finally, identify additional tools that can be used within Azure Migrate to achieve your migration objectives.

Chapter 15, Migrating Workloads from Previous Versions to Windows Server 2022, covers the available tools for migrating various legacy Windows Server workloads to Windows Server 2022. We will dive into how to migrate Internet Information Services (IIS) workloads, Hyper-V hosts, Remote Desktop Services (RDS) host servers, Dynamic Host Configuration Protocol (DHCP), and print servers from an older Windows Server version to Windows Server 2022.

Chapter 16, Migrating IIS Workloads to Azure, covers the available tools for migrating IIS workloads to Microsoft Azure. We will dive into how to migrate IIS workloads to Azure App Service and Azure Web Apps, and how to migrate IIS workloads to Windows containers by using Dockerfile technology.

Chapter 17, Migrating an Active Directory Domain Services (AD DS) Infrastructure to Windows Server 2022 AD DS, helps you learn how to determine the various approaches for moving domain controllers to Windows Server 2022. You will learn how to use the Active Directory Migration Tool to migrate Active Directory objects such as users, groups, and Group Policy objects. You will also learn how to migrate Active Directory objects to a new Active Directory forest.

Chapter 18, Monitoring Windows Server Using Windows Server Tools and Azure Services, covers how to use performance monitoring and data collector sets, how to monitor servers and event logs using Windows Admin Center, and how to monitor overall server health using System Insights.

Chapter 19, Troubleshooting Windows Server On-Premises and Hybrid Networking, covers how to effectively troubleshoot network connectivity for both on-premises and hybrid networking.

Chapter 20, Troubleshooting Windows Server Virtual Machines in Azure, covers how to effectively troubleshoot Windows Server virtual machine workloads in Microsoft Azure. This includes learning how to troubleshoot deployment and booting failures, VM performance and extension issues, disk encryption, storage, and overall VM connection issues.

Chapter 21, Troubleshooting Active Directory, covers how to enable and use the Active Directory Recycle Bin to restore deleted objects, how to use Directory Services Restore Mode to recover a corrupt Active Directory database and/or corrupted objects, and how to recover the SYSVOL folder and files necessary for running Active Directory services.

Chapter 22, Final Assessment and Mock Exam/Questions, is intended for use as additional reinforcement for the objectives reviewed in this guide, giving you a question-and-answer approach to test and validate your knowledge prior to scheduling your exam. There is also a section for lab environment housekeeping to keep your device and Microsoft Azure costs low.

To get the most out of this book

You should have a basic understanding of how to configure advanced Windows Server services utilizing existing on-premises technology in combination with hybrid and cloud technologies. This should include expertise in the management and implementation of on-premises and hybrid solutions, backup and high availability, security, networking, monitoring, the migration of workloads, and overall troubleshooting. This should also include a basic understanding of technologies such as PowerShell, Windows Admin Center, Azure Security Center, Azure Monitor, and Azure Arc.

If you are using the digital version of this book, we advise you to type the code yourself or access the code via the GitHub repository (link available in the next section). Doing so will help you avoid any potential errors related to the copying and pasting of code.

Before you start, be sure to check Chapter 1, Exam Overview and the Current State of Cloud Workflows, to review the technical requirements and ensure you complete the lab setup.

Download the color images

We also provide a PDF file that has color images of the screenshots/diagrams used in this book. You can download it here: https://packt.link/oG707.

Conventions used

There are a number of text conventions used throughout this book.

Code in text: Indicates code words in text, database table names, folder names, filenames, file extensions, pathnames, dummy URLs, user input, and Twitter handles. Here is an example: “Mount the downloaded WebStorm-10*.dmg disk image file as another disk in your system.”

A block of code is set as follows:

html, body, #map { height: 100%; margin: 0; padding: 0 }

When we wish to draw your attention to a particular part of a code block, the relevant lines or items are set in bold:

[default] exten => s,1,Dial(Zap/1|30) exten => s,2,Voicemail(u100) exten => s,102,Voicemail(b100) exten => i,1,Voicemail(s0)

Any command-line input or output is written as follows:

$ mkdir css $ cd css

Bold: Indicates a new term, an important word, or words that you see onscreen. For example, words in menus or dialog boxes appear in the text like this. Here is an example: “Select System info from the Administration panel.”

Tips or important notes

Appear like this.

Get in touch

Feedback from our readers is always welcome.

General feedback: If you have questions about any aspect of this book, mention the book title in the subject of your message and email us at [email protected].

Errata: Although we have taken every care to ensure the accuracy of our content, mistakes do happen. If you have found a mistake in this book, we would be grateful if you would report this to us. Please visit www.packtpub.com/support/errata, selecting your book, clicking on the Errata Submission Form link, and entering the details.

Piracy: If you come across any illegal copies of our works in any form on the Internet, we would be grateful if you would provide us with the location address or website name. Please contact us at [email protected] with a link to the material.

If you are interested in becoming an author: If there is a topic that you have expertise in and you are interested in either writing or contributing to a book, please visit authors.packtpub.com.

Share Your Thoughts

Once you’ve read Configuring Windows Server Hybrid Advanced Services Exam Ref AZ-801, we’d love to hear your thoughts! Please click here to go straight to the Amazon review page for this book and share your feedback.

Your review is important to us and the tech community and will help us make sure we’re delivering excellent quality content.

Download a free PDF copy of this book

Thanks for purchasing this book!

Do you like to read on the go but are unable to carry your print books everywhere?

Is your eBook purchase not compatible with the device of your choice?

Don’t worry, now with every Packt book you get a DRM-free PDF version of that book at no cost.

Read anywhere, any place, on any device. Search, copy, and paste code from your favorite technical books directly into your application.

The perks don’t stop there, you can get exclusive access to discounts, newsletters, and great free content in your inbox daily

Follow these simple steps to get the benefits:

Scan the QR code or visit the link below

https://packt.link/free-ebook/9781804615096

Submit your proof of purchaseThat’s it! We’ll send your free PDF and other benefits to your email directly

Part 1: Exam Overview and the Current State of On-Premises, Hybrid, and Cloud Workflows

This section will focus on the overall exam objectives, including what to expect on exam day, as well as a high-level overview of the current state of the technology stacks encountered on on-premises, hybrid, and cloud platforms and how these services can work collectively together to help you and your business succeed.

This part of the book comprises the following chapter:

Chapter 1, Exam Overview and the Current State of Cloud Workloads