Implement and operate an on-premises and hybrid networking infrastructure

Learn to implement and manage networking services in Windows Server. Learn to deploy and manage DHCP, secure DNS, and implement IP Address Management (IPAM) and Web Application Proxy. You'll also learn about Azure IaaS networking.

Prerequisites

  • Experience with managing Windows Server operating system and Windows Server workloads in on-premises scenarios, including AD DS, DNS, DFS, Hyper-V, and File and Storage Services
  • Basic experience with implementing and managing IaaS services in Microsoft Azure
  • Basic knowledge of Microsoft Entra ID
  • Basic understanding security-related technologies (firewalls, encryption, multi-factor authentication, SIEM/SOAR)
  • Basic knowledge of PowerShell scripting

Get started with Azure

Choose the Azure account that's right for you. Pay as you go or try Azure free for up to 30 days. Sign up.

Modules in this learning path

This module covers how to implement DNS for Windows Server IaaS virtual machines in Azure. You learn how to describe Azure DNS including its anycast network, RBAC integration, and current limitations such as the lack of DNSSEC support, configure Azure public DNS zones with delegation and record sets, implement Azure private DNS zones with VNet linking and autoregistration for VM host records, deploy Windows Server DNS in Azure IaaS VMs for AD DS-integrated scenarios, implement split-horizon DNS to serve different records for internal and external clients, and troubleshoot DNS issues in Azure environments.

This module covers how to deploy and manage Dynamic Host Configuration Protocol (DHCP) in Windows Server. You learn how DHCP automates IP configuration using the four-step lease process (DISCOVER, OFFER, REQUEST, ACK) and lease renewal, install and configure the DHCP Server role including server authorization in AD DS, configure DHCP options at the server, scope, and reservation levels for DNS servers, default gateways, and other settings, create and manage DHCP scopes with address ranges, exclusions, and reservations, select high availability options including DHCP Failover with hot standby and load balance modes, and implement DHCP Failover for fault tolerance across multiple DHCP servers.

This module covers how to deploy and configure the DNS Server role in Windows Server. You learn how DNS name resolution works, create and manage forward and reverse lookup zones using standard file-based or Active Directory-integrated storage, configure zone replication scopes and zone transfers between primary and secondary servers, and implement forwarding strategies including forwarders, conditional forwarders, and stub zones for resolving names across domain boundaries.

This module covers how to deploy and use IP Address Management (IPAM) in Windows Server. You learn how to install IPAM on a dedicated member server with WID or SQL Server storage, configure GPO-based provisioning for DHCP, DNS, and domain controller discovery, manage DNS zones and records, DHCP scopes and failover, and IP address blocks and ranges from a single console, and control access using built-in RBAC roles and access scopes.

Learn to enable remote access within your organization, and to publish your organization’s applications and websites by using Windows Server Web Application Proxy (WAP).

You learn to connect your on-premises environment to Azure, implement subnets and routing between your on-premises and cloud environments, and ensure that workloads in the cloud and on-premises perform DNS resolution to locate each other.

This module covers how to implement IP addressing and routing for Windows Server IaaS virtual machines in Azure. You learn how to implement Azure virtual networks (VNets) with subnets and private IP address spaces, configure private and public IP addresses using dynamic and static allocation methods, manage network interfaces and assign IP configurations during VM creation, understand system routes and implement user-defined routes for custom traffic flow between subnets and networks, and implement IPv6 for Azure VNet to support dual-stack networking.