uCertify

Windows Server 2019

(WIN-SVR-2019.AP1)/ISBN:978-1-64459-273-1

This course includes
Lessons
TestPrep
Hand-on Lab
AI Tutor (Add-on)
Windows Server 2019

Gain hands-on expertise on the Windows Server with Windows Server 2019 course and lab. The lab is cloud-based, device-enabled, and can easily be integrated with an LMS. The course and lab provide hands-on learning on the Windows Server basics and impart skills required to protect servers, clients, VMs, assets, and users with advanced Windows Server 2019 security features, and many more. The study guide will help students optimize the full Windows Server 2019 lifecycle.

Lessons

24+ Lessons | 110+ Exercises | 149+ Quizzes | 171+ Flashcards | 171+ Glossary of terms

TestPrep

53+ Pre Assessment Questions | 52+ Post Assessment Questions |

Hand on lab

52+ LiveLab | 55+ Video tutorials | 02:07+ Hours

Need guidance and support? Click here to check our Instructor Led Course.

Here's what you will learn

Download Course Outline

Lessons 1: Introduction

  • Changes since Windows Server 2016 Inside Out
  • Acknowledgments
  • Figure Credits

Lessons 2: Administration tools

  • Remote not local
  • Privileged Access Workstations
  • Windows Admin Center
  • Remote Server Administration Tools
  • PowerShell
  • Remote Desktop
  • SSH

Lessons 3: Installation options

  • Windows Server 2019 editions
  • Windows Server servicing branches
  • Server Core
  • Server with Desktop Experience
  • Roles and features

Lessons 4: Deployment and configuration

  • Bare metal versus virtualized
  • Windows images
  • Answer files
  • Windows Deployment Services
  • Virtual Machine Manager
  • Infrastructure configuration as code
  • Desired State Configuration
  • Chef Infra Server
  • Puppet
  • Package-management utilities

Lessons 5: Active Directory

  • Managing Active Directory
  • Domain controllers
  • AD DS structure
  • Accounts
  • Group policy
  • Restoring deleted items
  • Managing AD DS with PowerShell

Lessons 6: DNS, DHCP, and IPAM

  • DNS
  • DHCP
  • IPAM

Lessons 7: Hyper-V

  • Dynamic memory
  • Smart paging
  • Resource metering
  • Guest integration services
  • Generation 2 VMs
  • Enhanced Session Mode
  • Discrete Device Assignment
  • Nested virtualization
  • PowerShell Direct
  • HVC for Linux
  • Virtual hard disks
  • Managing checkpoints
  • Virtual Fibre Channel adapters
  • Storage QoS
  • Hyper-V storage optimization
  • Hyper-V virtual switches
  • Virtual machine network adapters
  • Optimizing network performance
  • Virtual machine MAC addresses
  • Network isolation
  • Hyper-V replica
  • Hyper-V failover clusters
  • Hyper-V guest clusters
  • Live migration
  • Storage migration
  • Exporting, importing, and copying VMs
  • VM Network Health Detection
  • VM drain on shutdown
  • Domain controller cloning
  • Shielded virtual machines
  • Managing Hyper-V using PowerShell

Lessons 8: Storage

  • Storage spaces and storage pools
  • Storage Replica
  • SMB 3.1.1
  • iSCSI
  • iSNS server
  • Scale-Out File Servers
  • Server for NFS
  • Deduplication
  • Storage Quality of Service
  • ReFS
  • Storage-related PowerShell cmdlets

Lessons 9: File servers

  • Shared folder permissions
  • File Server Resource Manager
  • Distributed File System
  • BranchCache
  • PowerShell commands

Lessons 10: Internet Information Services

  • Managing sites
  • Application pools
  • IIS users and delegation
  • Managing FTP
  • Managing IIS using PowerShell

Lessons 11: Containers

  • Container concepts
  • Isolation modes
  • Managing containers with Docker
  • Managing containers
  • Applying updates
  • Container networking
  • Linux containers on Windows
  • Container orchestration

Lessons 12: Clustering and high availability

  • Failover clustering
  • Network Load Balancing

Lessons 13: Active Directory Certificate Services

  • CA types
  • Certificate revocation lists
  • Certificate Services role services
  • Certificate templates
  • Certificate autoenrollment and renewal
  • CA management

Lessons 14: Active Directory Federation Services

  • AD FS components
  • Claims, claim rules, and attribute stores
  • Claims provider
  • Relying party
  • Relying party trust
  • Claims provider trust
  • Configuring certificate relationship
  • Attribute stores
  • Claim rules
  • Configure Web Application Proxy
  • Workplace Join
  • Multifactor authentication
  • Managing AD FS with PowerShell
  • Managing Web Application Proxy with PowerShell

Lessons 15: Dynamic Access Control and Active Directory Rights Management Services

  • Dynamic Access Control
  • Configuring Group Policy to support DAC
  • Configuring User and Device Claims
  • Configuring Resource Properties
  • Central access rules
  • Central access policies
  • Staging
  • Access Denied Assistance
  • Installing AD RMS
  • AD RMS certificates and licenses
  • AD RMS Templates
  • AD RMS Administrators and Super Users
  • Trusted User and Publishing Domains
  • Exclusion policies
  • Managing AD RMS with Windows PowerShell

Lessons 16: Routing and Remote Access

  • Remote Desktop Gateway
  • Virtual private networks
  • LAN routing
  • Network Address Translation (NAT)
  • DirectAccess
  • Managing Remote Access using PowerShell

Lessons 17: Remote Desktop Services

  • Deployment
  • Remote Desktop Connection Broker
  • Deployment properties
  • Remote Desktop Session Host
  • Remote Desktop Virtualization Host
  • Remote Desktop Web Access
  • Remote Desktop licensing
  • Managing Remote Desktop Services using PowerShell

Lessons 18: Azure IaaS and hybrid services

  • Windows Server IaaS VMs
  • Azure Active Directory
  • Azure hybrid cloud services

Lessons 19: Windows Subsystem for Linux

  • Linux on Windows Server
  • Installing WSL
  • WSL 2.0

Lessons 20: Hardening Windows Server and Active Directory

  • Hardening Active Directory
  • Hardening Windows Server
  • Shielded VMs

Lessons 21: Security systems and services

  • Security Compliance Toolkit
  • Attack Surface Analyzer
  • Credential Guard
  • Windows Defender Application Control
  • Virtualization-based security
  • Controlled Folder Access
  • Exploit Protection
  • Windows Defender
  • Windows Defender SmartScreen

Lessons 22: Maintenance and monitoring

  • Data collector sets
  • Alerts
  • Event Viewer
  • Network monitoring
  • Azure Monitor
  • Windows Server Backup
  • Azure Backup
  • Vssadmin
  • Windows Server Update Services
  • Azure Update Management
  • Monitoring and maintenance related PowerShell cmdlets
  • WSUS related PowerShell cmdlets

Lessons 23: Upgrade and migration

  • Supported upgrade and migration paths
  • Active Directory
  • Active Directory Certificate Services
  • DNS
  • DHCP
  • File and storage servers

Lessons 24: Troubleshooting

  • Troubleshooting methodology
  • Command-line tools
  • Sysinternals tools

Hands-on LAB Activities

Deployment and configuration

  • Importing an Image into WDS

Active Directory

  • Performing an Authoritative Restore
  • Changing the Default Tombstone Lifetime

DNS, DHCP, and IPAM

  • Installing the DHCP Server
  • Installing the IPAM Feature

Hyper-V

  • Creating a VM with an Existing Virtual Hard Disk
  • Creating and Disabling Checkpoints
  • Creating a Virtual Machine

Storage

  • Configuring the iSCSI Target Server
  • Installing the iSNS Feature
  • Configuring the NFS Data Store
  • Enabling Data Deduplication

File servers

  • Configuring a Classification Property
  • Running a Storage Report
  • Adding a Folder Target to an Existing Folder
  • Creating a New Folder to Replicate
  • Creating a DFS Namespace
  • Installing the BranchCache Feature

Internet Information Services

  • Creating an Authorization Rule
  • Configuring an IP Address and Domain Name Restriction
  • Modifying Custom Error Message Settings
  • Creating a Web Application
  • Adding a Virtual Directory Using the IIS Manager Console
  • Creating a New Application Pool
  • Delegating Administrative Permissions

Containers

  • Installing Docker
  • Creating a gMSA Account

Clustering and high availability

  • Installing and Configuring NLB

Active Directory Certificate Services

  • Revoking a Certificate
  • Configuring CA to Issue a Specific Certificate Template
  • Creating CA Backup and Recovery

Dynamic Access Control and Active Directory Rights Management Services

  • Enabling Dynamic Access Control Resources
  • Configuring Access-Denied Remediation
  • Installing Active Directory Rights Management Services (ADRMS)

Routing and Remote Access

  • Creating RD CAP and RD RAP
  • Creating a New Network Policy

Remote Desktop Services

  • Deploying Your Remote Desktop Environment

Azure IaaS and hybrid services

  • Creating a Virtual Network
  • Creating an Azure IaaS VM

Windows Subsystem for Linux

  • Installing WSL on Windows Server 2019

Hardening Windows Server and Active Directory

  • Resetting the KRBTGT Account Password
  • Creating an Isolation Rule
  • Creating a Server-To-Server Rule
  • Creating a Tunnel Rule
  • Enabling a Virtual Machine to Secure Boot and Shielding

Security systems and services

  • Configuring Windows Defender with GPOs
  • Enabling Device Guard
  • Enabling a Virtual Machine Secure Boot and TPM

Maintenance and monitoring

  • Creating a Data Collector Set
  • Creating an Event Log View
  • Installing a WSUS Server

Upgrade and migration

  • Upgrading SYSVOL Replication to DFS from FRS