Implement Windows Server IaaS VM Identity

  • Learning Path
  • 2 Modules

At a glance

After completing this learning path, you’ll know how to implement identity in Azure. You’ll be able to extend an existing on-premises Active Directory identity service into Azure.

Prerequisites

  • Experience with managing Windows Server operating system and Windows Server workloads in on-premises scenarios, including AD DS, DNS, DFS, Hyper-V, and File and Storage Services.
  • Experience with common Windows Server management tools (implied by the first prerequisite).
  • Basic knowledge of core Microsoft compute, storage, networking, and virtualization technologies (implied by the first prerequisite).
  • Basic knowledge of on-premises resiliency Windows Server-based compute and storage technologies (Failover Clustering, Storage Spaces).
  • Basic experience with implementing and managing IaaS services in Microsoft Azure.
  • Basic knowledge of Microsoft Entra ID.
  • Basic understanding security-related technologies (firewalls, encryption, multi-factor authentication, SIEM/SOAR).
  • Basic knowledge of PowerShell scripting.
  • An understanding of the following concepts as related to Windows Server technologies:
    • High Availability and Disaster Recovery
    • Automation
    • Monitoring

Get started with Azure

Choose the Azure account that's right for you. Pay as you go or try Azure free for up to 30 days. Sign up.

Modules in this learning path

Implement hybrid identity with Windows Server

This module covers how to implement hybrid identity by integrating on-premises AD DS with Microsoft Entra ID. You learn how to select from Microsoft Entra integration models including extending AD DS to Azure, directory synchronization, password hash sync, and federation with AD FS, plan and prepare on-premises AD DS for synchronization with Microsoft Entra Connect, configure seamless single sign-on (SSO) and pass-through authentication, enable Microsoft Entra ID login for Azure VMs, and implement Microsoft Entra Domain Services for Kerberos authentication, LDAP, and Group Policy in the cloud without deploying domain controllers.

Deploy and manage Azure IaaS Active Directory domain controllers in Azure

This module covers how to implement Active Directory Domain Services (AD DS) domain controllers on Azure virtual machines. You learn how to choose between deploying a standalone Azure forest or extending an on-premises environment into Azure, configure cross-premises connectivity using site-to-site VPN or ExpressRoute, and plan for AD DS sites, trust relationships, read-only domain controllers (RODCs), FSMO role placement, and global catalog servers. You also walk through the steps to install a replica domain controller and create a new AD DS forest in Azure.

Start