Module 1: Deploy and manage Active Directory Domain Services
This learning path covers how to deploy and manage Active Directory Domain Services (AD DS) in on-premises and hybrid environments. You learn how to deploy domain controllers on-premises and in Azure, manage FSMO roles, create and manage users, groups, and organizational units, and extend your on-premises identity into Azure. You also configure Group Policy Objects to enforce security and desktop settings, and work with trusts, replication, and multi-site AD DS environments.
Module 2: Manage Windows Server instances and workloads in a hybrid environment
Learn how to configure remote management for Windows Servers using Windows Admin Center, PowerShell, SSH, and Remote Desktop, and manage Windows Server workloads using Azure Arc, Azure Update Manager, and Azure Automation.
Module 3: Manage virtual machines
This learning path covers how to manage virtual machines in on-premises and Azure environments. You learn how to configure Hyper-V hosts, virtual switches, and nested virtualization, manage VM settings including generations, virtual hard disks, and checkpoints, and secure workloads with the Host Guardian Service and shielded VMs. You also learn to implement VM high availability and live migration, run Windows containers, and plan, deploy, and scale Windows Server VMs on Azure including virtual network and IP address configuration, network security with NSGs and Azure Firewall, and secure remote access with Azure Bastion and JIT.
Module 4: Implement and manage an on-premises and hybrid networking infrastructure
This learning path covers how to implement and manage networking infrastructure in on-premises and hybrid environments. You learn how to deploy and configure Windows Server DNS, including zones, forwarding, conditional forwarders, DNS policies, and DNSSEC, and integrate DNS with Azure for hybrid name resolution. You also deploy and manage DHCP including scopes, options, and failover, and use IP Address Management (IPAM) to centrally manage your DNS and DHCP infrastructure.
Module 5: Manage storage and file services
This learning path covers how to manage storage and file services in on-premises and hybrid environments. You learn how to deploy Azure File Sync, migrate file servers using Storage Migration Services, and manage Windows Server file shares including DFS, FSRM, and SMB security. You also configure storage technologies including Storage Spaces, Storage Spaces Direct, Storage Replica, Data Deduplication, and iSCSI.
Module 6: Secure Windows Server infrastructure
This learning path covers how to secure Windows Server infrastructure and Active Directory Domain Services. You learn how to harden Windows Server using security baselines, LAPS, and Privileged Access Workstations, configure Microsoft Defender for Endpoint and built-in Windows client protections, and manage Group Policy security settings and audit policies. You also secure Active Directory by managing user rights, authentication policies, Protected Users, and service accounts including gMSA and dMSA, and monitor for threats with Microsoft Defender for Identity.
Module 7: Monitor and troubleshoot Windows Server environments
This learning path covers how to monitor and troubleshoot Windows Server environments. You learn how to use Performance Monitor, Event Viewer, and auditing tools to track server health and compliance, and extend monitoring into Azure with Azure Monitor and VM Insights. You also troubleshoot on-premises and hybrid networking issues including DHCP, DNS, and routing, manage server updates with WSUS and Azure Update Management, and troubleshoot Active Directory including replication failures, Group Policy processing, and hybrid authentication.