Manage Windows Servers and workloads in a hybrid environment
At a glance
-
Level
-
Skill
-
Product
-
Role
-
Subject
This learning path covers how to manage Windows Servers and workloads across on-premises and hybrid environments. You learn how to select and use the right administration tools, including Windows Admin Center, Server Manager, and PowerShell remoting, and apply secure administration principles such as least privilege and Privileged Access Workstations. You also remotely manage Azure VMs using Azure Bastion and Just-In-Time (JIT) VM access, configure post-installation settings, restrict administrative access with Just Enough Administration (JEA), and manage hybrid workloads using Azure Arc.
This learning path helps you prepare for Exam AZ-802: Administering Windows Server.
Prerequisites
- Experience administering Windows Server operating systems
- Familiarity with remote management tools including PowerShell remoting and Windows Admin Center
- Basic experience with implementing and managing IaaS services in Microsoft Azure
Achievement Code
Would you like to request an achievement code?
Modules in this learning path
This module covers the tools available for administering Windows Server in on-premises and remote scenarios. You learn how to install and use Windows Admin Center for web-based server management, use Server Manager for role and feature management, install and configure Remote Server Administration Tools (RSAT) on Windows client operating systems, and use Windows PowerShell remoting with WinRM to run commands and scripts against remote servers.
This module covers how to apply secure administration practices in Windows Server environments. You learn how to implement the principle of least privilege by identifying and restricting membership in built-in privileged groups such as Enterprise Admins and Domain Admins, delegate administrative control using the Delegation of Control Wizard and Restricted Groups, deploy Privileged Access Workstations (PAWs) with Windows Defender Application Control, Credential Guard, and Device Guard, and configure jump servers for controlled remote access to sensitive infrastructure.
This module covers how to remotely administer and manage Windows Server IaaS VMs in Azure. You learn how to select the appropriate remote administration tool from the Azure portal, Windows Admin Center, Azure PowerShell, Azure CLI, and Azure Cloud Shell, connect to Azure VMs securely using Azure Bastion without exposing public IP addresses, and configure Just-In-Time (JIT) VM access through Microsoft Defender for Cloud to lock down inbound management ports and reduce attack surface.
This module covers how to configure and use Just Enough Administration (JEA) to restrict administrative access in Windows Server. You learn how JEA uses PowerShell remoting with virtual accounts to limit users to specific cmdlets, parameters, and values, define role capabilities and session configuration files to control what actions are available in a JEA session, and create and connect to JEA endpoints for constrained administrative tasks such as restarting services or deploying containers.
This module covers how to perform post-installation configuration of Windows Server using multiple tools and approaches. You learn how to use Sconfig to configure Server Core installations including network settings, domain join, remote management, and Windows Update, apply Desired State Configuration (DSC) to declaratively define and enforce server settings using the Local Configuration Manager (LCM) in push or pull mode, use Windows Admin Center for web-based post-install tasks, and automate configuration with answer files.
This module covers how to manage hybrid workloads using Azure Arc. You learn how to describe Azure Arc capabilities for managing Windows Server, Linux, Kubernetes clusters, and SQL Server across hybrid and multicloud environments, onboard on-premises server instances to Azure Arc using the Azure Connected Machine agent, connect hybrid machines to Azure from the Azure portal using interactive scripts or at-scale service principal deployments, manage extensions and monitor Arc-enabled servers through Azure Resource Manager, and restrict access to Arc-enabled resources using role-based access control (RBAC).