Administration of Windows Server 2022

Analyze CPU, disk, memory, and network bottlenecks that affect Active Directory domain controllers, and apply multi-resource optimizations like SSD storage, increased RAM, and site-aware delivery to improve performance.

Demonstrates basic Windows Server performance monitoring tools, using Task Manager for real-time CPU, memory, disk, and network metrics, and Performance Monitor counters like processor time and average disk queue length.

Demonstrate practical server performance testing by running scripts to induce CPU, memory, and disk load while using Task Manager, Resource Monitor, Event Viewer, and Perfmon to observe metrics.

Explore Active Directory database structure, including NT file, entities folder with EDB log files, and EDB dot check file and EDB rez files for integrity, change management, and disk space.

Leverage NTDSUTIL, a powerful command-line tool for active directory maintenance, to perform snapshots, file relocation, offline defragmentation, and metadata cleanup. Reset the dsrm password with NTDSUTIL to manage controller security.

Create, mount, and verify active directory snapshots with NTDS util, then export or recover data from the snapshot, and inspect drive info and log paths for maintenance and auditing.

Run NTDSUTIL integrity verification to perform basic database checks, use compact to create a defragmented copy, then recover if needed, and back up before moving database and log files.

Understand restartable ads and its three states—ads started, ads stopped, and directory services restore mode—and manage them via MMC snap-ins or PowerShell to minimize downtime on domain controllers during maintenance.

Delete objects by moving them to the deleted objects container, losing attributes. Assess recovery on recycle bin status; tombstone lifetime is 180 days, linked attributes cannot be preserved, and garbage collection operates.

Explore Active Directory object deletion without Recycle Bin, recovery with the LDP tool, and why enabling the Active Directory Recycle Bin and using PowerShell or Active Directory Administrative Center matters.

Enable the Active Directory Recycle Bin through the Active Directory Administrative Center, delete test accounts, recover them with simple restore or restore to a specific location, and verify successful recovery.

Enable the Active Directory Recycle Bin with PowerShell, requiring forest functional level at least Windows Server 2008 R2 and domain admin privileges, to recover deleted objects within 180 days.

Demonstrates practical object recovery in Active Directory using the recycle bin and PowerShell, from creating a test user with New-ADUser to restoring with Restore-ADObject.

Manage object lifetime in Active Directory by configuring tombstone lifetime and deleted object lifetime with PowerShell or the LDP tool, then review Windows Server Backup components and recovery options.

Explore Azure Backup and Data Protection Manager (DPM) for enterprise systems, leveraging block-level incremental backups, encryption, and verification, with cloud storage, retention policies, and tape export options.

Trace the evolution of Active Directory backups from system state to full server backups, and explain non-authoritative and authoritative restores with DSM and Dsrm, including replication considerations.

Boot the domain controller into directory service restore mode and authenticate with administrator credentials and ds password, then mark objects as authoritative before restoring from Windows Server Backup.

Explore IPv4 fundamentals in server networks, plan and allocate IPv4 addresses, configure hosts, and troubleshoot connectivity while mastering subnets, address types, and CIDR notation.

Choose the optimal subnet mask to place two IPv4 addresses on the same network while minimizing wasted space. Show why a /22 subnet fits both devices without wasted space.

Learn how IPv4 addresses are represented in binary and dotted decimal notation, and how subnet masks define network boundaries for the 32-bit address across four octets.

Practice converting binary to dotted decimal notation for IP addresses by evaluating each octet from right to left and summing the bit values that are one.

Identify how ip addresses split into network id and host id using subnet masks and cidr notation. Explain how default gateways bridge local and external networks and use routing tables.

Explore binary conversion of an IP address and calculating the network ID with a 255.255.255.0 mask. Learn why CIDR notation offers greater flexibility in modern networking.

Learn cidr notation for flexible subnetting with variable length subnet masks, reducing waste versus classful addressing, easing routing, and supporting IPv4 exhaustion, cloud computing, and virtualization.

Explore IP address classes and subnet masks, including class A/B/C defaults and subnetting, and note how a misconfigured default gateway disrupts remote communication while local traffic remains unaffected.

Explore IPv4 classful addressing, covering class A, B, C networks and their default masks, plus class D multicast and class E experimental usage, and learn subnetting by borrowing host bits.

Borrow bits from the host portion to create subnets, calculate the new subnet mask such as 255.255.224.0 slash 19, determine the increment, and design networks for improved performance and security.

Explore simple versus complex IPv4 networks, including full-octet subnet masks and intermediate bits, and learn VLSM for allocating subnets of different sizes within a /24 to maximize efficiency.

Design eight subnets for a class c network 192.168.1.0/24 by borrowing three bits to /27. The increment is 32 and the first three subnets provide 192.168.1.1-192.168.1.30, 192.168.1.33-192.168.1.62, and 192.168.1.65-192.168.1.94.

Learn how public IPv4 addresses are allocated by IANA to regions and ISPs, how private IPv4 ranges use NAT to share a single public IP, and APIPA when DHCP fails.

Automatic private IP addressing (apipa) activates when a DHCP server is unreachable, enabling devices to self-assign 169.254.0.0/16 addresses with a 255.255.0.0 subnet for local connectivity, with no internet access.

Explore nat that lets 50 devices share a single public ip by translating private addresses via a translation table, and diagnose apipa and dhcp issues.

Design a subnet scheme for four buildings and a data center, ensuring five subnets with 714 usable addresses each, and choose a suitable mask like /22 for scalability.

Learn how supernetting merges adjacent networks into a larger /23, expanding address space without extra routers, by satisfying contiguity and equal-size requirements, as in 192.168.6.0/24 and 192.168.7.0/24 (192.168.6.0-192.168.7.255).

Explore the benefits of subnetting and how supernetting builds larger networks by aggregating contiguous address space, improving routing efficiency, conserving IPs, and enabling scalable, large-scale networks.

Identify Class A, B, and C IP address ranges and private addresses (10.x, 172.16.x.x, 192.168.x.x), and understand how private ranges conserve public IPv4 addresses.

Explore NAT translating private IPs to public addresses to access the internet, and examine loopback testing with 127.0.0.1 and subnetting for organized networks.

Learn to determine the minimum host bits for 714 hosts, calculate usable hosts and subnets, and derive the 255.255.248 subnet mask for class B ranges.

Explore IPv4 subnetting fundamentals in Windows Server 2022, including default masks for class A, B, and C, network versus host portions, and how borrowing bits increases subnets while reducing hosts.

Design an IPv4 addressing scheme for branch offices (Houston, Mexico City, Portland) with separate wired and wireless ranges and dedicated subnets. Allocate subnets from the Toronto 172.16.1.0/18 and document plan.

Plan a scalable IPv4 address scheme for the Houston, Mexico City, and Portland offices using separate /24 subnets, accounting for wired and wireless devices and two IPs per laptop.

Analyze device requirements and allocate contiguous /24 subnets for wired and wireless clients across branch offices, ensuring scalable, dedicated networks for each branch and straightforward routing.

Configure and troubleshoot IPv4 on Windows Server 2022 for mixed devices, using static or DHCP, and manage IP address, subnet mask, gateway, DNS with PowerShell and Command Prompt.

Explore manual versus automatic IPv4 configuration in Windows Server, compare static IPs for servers and printers with DHCP, and learn essential settings like subnet mask, gateway, and DNS.

Configure IPv4 on Windows Server by manually setting IP address, subnet mask, default gateway, and DNS, or enable automatic DHCP, while considering alternate configurations for outages.

Configure ipv4 addresses on Windows Server 2022 using manual and automatic methods, set IP, subnet mask, and gateway, and access network settings via NCP dot cpl, Server Manager, or ipconfig.

Configure ipv4 and dns via netsh and ipconfig, set static addresses, gateways, and dns servers, and troubleshoot dns errors when the dns service is absent.

Use Windows PowerShell to manage IPv4 configurations, assigning a static IP with New-NetIPAddress, specifying interface alias, IP address, prefix length, and default gateway while running as administrator.

Learn to use PowerShell to remove and reconfigure a default gateway, update IP settings, and configure DNS servers via interface index and destination prefix 0.0.0/0.

Learn to manage Windows Server 2022 networking with PowerShell: view and configure IPv4/IPv6, set, modify, or remove IP addresses, and configure DNS and default gateways.

Explore ipv4 routing in windows server 2022 and how data travels between networks. Modify routes in the routing table and use tracert, netstat, and Microsoft Message Analyzer to troubleshoot connectivity.

Explore how IPv4 routing directs traffic between networks and how routing tables use destination, netmask, gateway, interface, and metric to choose the path; configure Windows Server as a router.

Configure Windows Server as a router to manage traffic between a local network and a DMZ, using the remote access role, routing settings, and advanced firewall rules with least privilege.

Configure static routes across three subnets in a Windows Server 2022 lab, enabling IP addressing, routing, and inter-subnet communication through a central Elite Router.

Learn to use PowerShell direct to configure VM network settings from the host, including IP, gateway, and DNS for SVR1 and Lit Router, and verify with ipconfig.

Configure a multi-interface router VM by switching SVR to SVR two, assign 10.0.0.1/24 with gateway 10.0.0.1 and DNS, and verify with ipconfig; add adapters for external, 10.0.0, and 192.168.2 networks.

Configure hyper-v switches for multi-network environments by creating external, internal, and private virtual switches, then assign IP addresses to three adapters using PowerShell for the lit router virtual machine.

Configure Windows Server 2022 routing by setting default gateways on the WAN interface and LAN interfaces, renaming adapters, assigning IP addresses, and enabling IP forwarding via PowerShell.

Learn how switches operate at the data link layer, forwarding frames via MAC addresses to enable VM communication in a Hyper-V lab with external, internal, and private switches.

Configure virtual switches for virtual machines by changing switch types to internal or external, and identify switch details with PowerShell direct using Get-VMNetworkAdapter and Get-VMSwitch.

Administer Windows Server 2022 by configuring three servers across two subnets, setting IPs, gateways, and temporary DNS, and establishing a three-interface router for inter-subnet access.

Install the routing role through server manager, configure NAT with the remote access GUI, set public and private interfaces, start the service, and verify connectivity across subnets.

Automate Windows router configuration with PowerShell and Netsh to enable IP forwarding, install remote access, and configure internal and external networks, validating connectivity across hosts.

Master Windows Server 2022 network adapter management with PowerShell and Netsh. View, rename, restart, and configure adapters using Get-NetAdapter and IP config, including MAC addresses and link speed.

Configure and verify IPv4 and IPv6 addresses on Windows Server 2022 using PowerShell and Netsh, including interface alias, address family, prefix length, and DHCP settings.

Explore configuring static routes between two windows server 2022 test servers on different subnets using powershell, netsh, and route commands, then test and troubleshoot connectivity.

Configure multiple IP addresses on Windows Server 2022, add static routes with PowerShell, Netsh, and route commands, and verify inter-subnet connectivity between test servers.

Master advanced routing with the route command and persistent routes, learn to add, delete, and troubleshoot IPv4 routes and IP addresses using PowerShell, Netsh, and routing tables to interconnect subnets.

Explore best practices for planning, implementing, and troubleshooting IPv4 networks on Windows Server 2022, including subnet growth, private addresses, NAT, supernetting, and essential diagnostic tools.

Learn how the DHCP server role automates IP address assignment and core network settings on Windows Server 2022, and how to deploy, configure, and troubleshoot DHCP for seamless networks.

Discover how DHCP automates IP address assignment and reduces administrative complexity, enabling scalable, centralized network management for devices from laptops to mobile users, with lease-based IP reuse.

Ensure dhcp server setup to avoid misconfigurations, overlapping scopes, and exhausted pools, compare ipv4 and ipv6 addressing, and learn that microsoft dhcp supports ipv4 and ipv6 stateful and stateless.

Explore how DHCP assigns and renews IP addresses, including discover/offer/request/ack exchange, lease renewal at 50%, and cross-subnet communication using relay agents or RFC 1542 routers.

Explore how DHCP dynamically allocates IP addresses, manages lease durations, uses MAC-based reservations, and contrasts static versus dynamic configurations across subnets with relay agents.

Explore the dhcp four-step process—discover, offer, request, and acknowledge—that assigns ip addresses and network details (subnet mask, default gateway, dns server) to clients.

Explore how DHCP lease renewal maintains uninterrupted IP addresses by renewing at 50% and 87.5% of the lease, during startup, or after network changes, using unicast and broadcast methods.

Install, configure, and manage the DHCP server role in Windows Server 2022, create scopes, configure options, and understand authorization and relay agents in multi subnet environments.

Configure dhcp in a domain environment through a simulated multi-VM lab, installing and managing the dhcp server role on a domain controller, and validating scope creation, authorization, and troubleshooting.

Install the DHCP server role on Windows Server 2022 using GUI or PowerShell; use a general-purpose server with a static IP and verify IP allocation via the DHCP console.

Install and configure the DHCP server role in a non domain environment using GUI and PowerShell, test client connectivity, and verify automatic IP address assignment.

Create and activate a test dhcp scope in the IPv4 section with 10.0.0.121–10.0.0.125 and 255.255.255.0, then renew to obtain 10.0.0.122 and revert or install the role with PowerShell.

Install the dhcp server role using add-windowsfeature with management tools, restart service, and configure an ipv4 scope named main scope from 10.0.0.130 to 10.0.0.135 with 255.255.255.0 using netsh or add-dhcpserversecuritygroup.

Install and configure the DHCP server on Windows Server 2022, test client IP assignment with ipconfig, and troubleshoot by validating service status, scope, connectivity, relay agents, and firewall rules.

Authorize DHCP servers through Active Directory to prevent rogue DHCP servers from leasing IP addresses and causing misconfigurations, duplicate addresses, or redirecting traffic to malicious DNS servers or gateways.

Authorize DHCP servers within Active Directory to prevent rogue distributed servers; detect unauthorized servers with ipconfig /all, audit networks, and restart DHCP service after post-install configuration using GUI or PowerShell.

Authorizes the DHCP server in Active Directory after installation to prevent unauthorized servers from leasing IPs, using PowerShell or Server Manager, verify status, and restart the DHCP service.

Explore how to create and manage IPv4 dhcp scopes, including address ranges, subnet masks, exclusions, reservations, and lease durations. Leverage PowerShell: Get-DhcpServerv4Scope and Set-DhcpServerv4Scope.

Learn how to use DHCP allocations with scopes, exclusions, and reservations to ensure devices like printers and servers keep fixed IPs, while optimizing lease durations and security.

Configure dhcp scopes on windows server 2022 using gui and PowerShell to create main office scope, exclude 192.168.2.62–64, set a 3-day lease, define a /24, create reservations, and activate.

Use PowerShell to manage dhcpv4 scopes on Windows Server, creating or modifying scopes, setting start and end ranges, and applying an eight-day lease. Verify scopes and exclusions to troubleshoot.

Configure DHCP scopes and options to deliver IP addresses and essential network settings, including DNS servers, default gateways, DNS suffix, and boot options for Windows deployment services.

Configure pixie boot options in DHCP, enable pixie support, set option 66 and 67, and learn the DHCP options hierarchy from server to reserved client levels.

Learn how dhcp relay agents enable cross-subnet communication by forwarding client broadcasts as unicast to a server, then broadcasting replies back to clients; configure RFC 1542 on routers.

Configure a Windows Server 2022 DHCP scope with PowerShell, adding router, DNS servers, and domain name options, and create reservations using the DHCP server v4 commands.

Explore advanced GCP security options, high availability, database maintenance, and troubleshooting techniques to protect your network from unauthorized access and maintain service continuity.

Implement DHCP security options to prevent unauthorized access and ensure only valid clients receive IP configuration, safeguard DNS name registrations with DHCP name protection and 802.1x authenticated connections.

Enable DHCP name protection to prevent DNS record conflicts and name squatting across mixed environments, configuring it at server and scope levels and following best practices.

Explore advanced DHCP configuration options with user classes and vendor classes to tailor IP address allocation and options by device type or user group, using policy based assignments.

Policy-based assignments enable granular DHCP control by delivering targeted IP addresses. Apply at server or scope level and define user and vendor classes with MAC, FQDN, or relay agent information.

Group multiple logical subnets into super scopes to create a single administrative unit for scalable IP address management and enable multicast scopes for simultaneous client communication.

Define multicast scopes to allocate class D addresses for efficient multicast to multiple clients, enabling video conferencing, live streaming, and Windows deployment services.

Explore high availability options for DHCP in Windows Server 2022, including DHCP clustering, split scopes, and failover, with failover favored for seamless IP address allocation and minimal downtime.

Dhcp failover provides seamless redundancy with real-time synchronization and no shared storage, the gold standard for high availability.

Two DHCP servers share lease information to provide seamless redundancy and IP address allocation, coordinated by a failover relationship with time synchronization and port 647 firewall rules for IPv4 scopes.

Explore DHCP failover modes: load sharing and hot standby, configure parameters like maximum client lead time, auto state switchover interval, and message authentication to ensure high-availability DHCP services.

Explore how to maintain the DHCP database in Windows Server 2022 by performing automatic backups every 60 minutes, manual backups, restoration, and reconciliation to ensure data integrity and reliability.

Move the DHCP database during server migration to preserve leases and configuration, then back up, copy files, install the role on the new server, restore, and test.

Migrate the DHCP server from old to new, preserving configurations, scopes, leases, and reservations, using Netsh or PowerShell to export, import, and verify.

Export the DHCP database with PowerShell or Netsh, import it to the new server, and verify scopes, leases, and client connectivity.

Explore troubleshooting of ip address conflicts and dhcp issues on windows server 2022, including pinning addresses, preventing overlapping scopes, and correcting relay and vlan configurations for reliable connectivity.

Troubleshoot DHCP issues by repairing or restoring a corrupted DHCP database and backing up regularly; prevent exhaustion by reducing lease durations and redesigning IP pools.

Explore why IPv6 was developed, how it differs from IPv4, and the 128-bit address space, with types and stateless address autoconfiguration and DHCPv6.

Explore how IPv6 expands address space and auto configuration, simplifies headers, enables native multicast and flow labeling, eliminates NAT, and adds built-in IPsec plus quality of service enhancements for networks.

Explore how IPv6 addresses are structured as 128-bit hex values, expressed in eight 16-bit blocks separated by colons, and learn zero suppression, zero compression, and binary-to-hex conversion.

Explore the structure of IPv6 addresses, with 128 bits split into a 64-bit prefix and 64-bit interface identifier, and distinguish global unicast, unique local, link-local, anycast, and multicast addresses.

Explore IPv6 auto configuration, including stateless and stateful methods, router advertisements, DHCPv6, and a hybrid approach, plus the life cycle of IPv6 addresses.

Explore the fundamentals of IPv6 addressing and autoconfiguration, including stateless address autoconfiguration, link-local and loopback addresses, router advertisements, DHCPv6, and zero-compression rules.

Configure IPv6 addresses using manual, stateful DHCPv6, and stateless autoconfiguration, then manage DNS, link-local addresses, multiple gateways, and advanced TCP/IP settings.

Explore tools for configuring IPv6 on Windows Server 2022 using GUI, PowerShell, and Netsh to assign IPv6 addresses, default gateways, and DNS, and verify with get IP address.

Configure IPv6 settings on Windows Server 2022 by using manual, stateful, or stateless auto configuration through graphical and command-line tools, with emphasis on zero compression and DNS configuration.

Configure IPv6 on Windows Server 2022 with PowerShell using new-netipaddress to set address, interface Ethernet, prefix 64, and gateway; verify with get-netipaddress and nslookup.

Configure ipv6 addresses, default gateways, dns servers, and suffixes using gui, powershell, and netsh, then verify with ipconfig and test connectivity.

Explore how DHCPv6 operates in Windows Server environments, configuring IPv6 scopes, exclusions, and leases, and integrating DNS with quad A records, reverse lookup zones, and stateless address autoconfiguration.

Configure an IPv6 scope in a DHCP server, create quad A records in DNS, and verify IPv6 name resolution for hosts in the lab environment.

Enable ipv6 forwarding on the domain controller and configure dhcpv6 stateful options for clients. The demo explains router advertisements and the separation of dhcp and routing roles in the lab.

Create and activate an IPv6 scope for a Windows Server 2022 lab, configure a ULA prefix, assign static IPv6 addresses, and setup DNS forward lookup zones with quad A records.

Classify nodes by IP capabilities to define roles and enable IPv4 and IPv6 coexistence, covering IPv4 only, IPv6 only, and dual stack nodes, and noting DNS and prefix policy implications.

Plan a native IPv6 environment by assessing operating system support, router and firewall readiness, device and application compatibility, and IPv6 tunneling strategies for migration.

Learn how Isatap tunnels IPv6 over IPv4 in private networks, enabling unicast IPv6 connectivity between IPv4 and IPv6 hosts, with router roles, address formats, and DNS or PowerShell based configuration.

Enable ipv6 communication over the ipv4 internet with 6to4 by using a public ipv4 external interface and an internal ipv6 site, while noting nat incompatibility and overhead.

Explore how Teredo enables IPv6 over IPv4 behind NAT using a Teredo server and relays. Know the 128-bit Teredo address with 2002 prefix and obscured port/IP, and configure it.

Learn how port proxy bridges IPv4 and IPv6 traffic, its TCP-only limits, and configure it with netsh, then plan IPv6 transition with dual-stack upgrades to apps, routing, devices, and DNS.

Explore dns name resolution and how the domain name system translates human-readable names into ip addresses, detailing the evolution from a centralized file to a distributed, scalable system.

Explore DNS fundamentals and the evolution from centralized to distributed systems, tracing name resolution from local resolver to recursive and authoritative servers, and cover caching and public DNS options.

Explore the domain name system's hierarchical structure from root to subdomains and how local servers query root and authoritative servers to resolve hostnames to ip addresses.

Explore the DNS hierarchy from root to subdomains, and see how local cache and root servers shape resolution, demonstrated through PowerShell Resolve-DnsName and an NXDOMAIN example in a private lab.

Explore DNS optimization strategies such as caching and forwarding to reduce resolution times and traffic, and examine advanced DNS functions like service location, reverse lookups, and Active Directory discovery.

Explore dns optimization techniques and advanced functions, including caching and ttl values, forwarding, and service discovery with srv records, txt records, and ptr records, using nslookup and powershell.

Discover how DNS translates human readable names into IP addresses, traverses the root-to-authoritative hierarchy, and uses caching, forwarding, and record types to enable enterprise name resolution.

Explore how DNS name resolution works in a hierarchical, cached system and how resource records and SRV data locate domain controllers. Apply PowerShell tools and TTL concepts to optimize queries.

Explore the building blocks of DNS infrastructure, including servers, zones, and resource records, and how hierarchical namespaces enable scalable, reliable name resolution across private and public namespaces.

Explore how public DNS namespaces are categorized into functional, geographical, and reverse domains, and how DNS servers manage authoritative data, caching, forwarding, load balancing, security filtering, and zone-based delegation.

Explore dns zones types and delegation strategies for administration, including forward lookup zones for hostname-to-ip resolution, reverse lookup zones for ip-to-hostname mapping, and the roles of forwarders and delegation.

Explore DNS resource records, including name, type, and data, enabling IPv4 and IPv6 resolution with CNAME, SRV, and PTR records. Automate DNS management with PowerShell commandlets.

Explore a hands-on DNS lab with the learned lessons.com domain, configuring a domain controller as the primary DNS server and setting up reverse lookup zones, nslookup, and DNS manager.

Demonstrates creating reverse lookup zones and configuring PTR records with PowerShell, verifying DNS zone setup, and resolving records while troubleshooting IPv6 and IPv4 DNS server issues.

Configure DNS interface settings and forward external queries by toggling IPv6, setting static IPv4 DNS, testing with nslookup, and observing authoritative and recursive resolution along with traceroute to external servers.

demonstrates authoritative control of the learned lessons.com dns zone by configuring zone boundaries, testing zone authority from a member server, and installing dns server management tools.

Demonstrate creating a subdomain and a primary zone via PowerShell, and test forward and reverse DNS resolution. Configure a forwarder to 8.8.8.8 and verify external resolution.

Demonstrates DNS zone delegation and hosts file override methods using PowerShell on a Windows Server 2022 lab, with practical verification steps.

Master the essential DNS components and administration in Windows Server 2022, covering hierarchical namespaces, forwarders, forward and reverse lookup zones, resource records, and PowerShell management for practical configuration and troubleshooting.

Explore how DNS components—servers, zones, resource records, and PowerShell management tools—enable scalable, cross-subnet name resolution and administrative delegation in Windows Server 2022.

Learn how dns zones organize and store mapping information for network communication, and how forward lookup zones use resource records like A, CNAME, SRV, MX, and NS for name resolution.

Explore how reverse lookup zones enable dns reverse resolution of ip addresses to hostnames, manage ptr records, and enhance troubleshooting, security, and services like email and active directory.

Explore how Active Directory automates dns record management, including srv records and dynamic updates. Understand dnssec security, encryption key management, and reliable dns data integrity.

Explore configuring DNS zones and forward lookup records in a simulated network, creating A and CNAME records, testing with nslookup and Resolve-DnsName, and validating reverse lookup setup.

Demonstrates creating and testing reverse lookup zones and PTR records in Windows Server 2022, using nslookup and PowerShell to verify forward and reverse IP resolution, troubleshooting subnet misconfigurations.

Identify domain name system zones and resource records as the core of name resolution, covering forward and reverse zones, and A, CNAME, MX, NS, and PTR records.

Master DNS zones and resource records, including A records, CNAME and SRV records, and reverse lookups, with Active Directory automation, dynamic updating mechanisms, and cryptographic signatures for DNS data security.

Configure DNS clients on Windows for optimal name resolution by balancing manual and automated deployment, understanding DNS query ordering and PowerShell management for reliable performance across IPv4 and IPv6 networks.

Configure manual dns server addresses and advanced tcp/ip settings on the Windows Server network adapter, including dns suffix configuration and dynamic dns registration for topology-driven, policy-aligned hostname resolution.

Explore dhcp-based dns configuration for automated, centralized dns settings in enterprise networks. Understand the dns client's stepwise query order and escalating timeouts that ensure reliable name resolution when servers fail.

Explore how multi-homed clients manage adaptive priority and adapter-based DNS queries to optimize name resolution for laptops, servers, and virtual machines, with timeout strategies from 1 to 8 seconds.

Leverage PowerShell DNS management to configure DNS client servers via the Set-DnsClientServerAddress cmdlet, supporting interactive and automated deployment with interface index and ordered server addresses.

Engage in a hands-on dns client configuration lab on an enterprise network with domain controllers and domain-joined servers, verifying cross-subnet resolution using nslookup and resolve-dnsname, and practicing manual dns changes.

Configure and verify DHCP integration with DNS for Windows Server 2022 by setting up a DHCP scope, assigning router and DNS settings, and troubleshooting with ipconfig and nslookup.

Demonstrates DNS failover by temporarily misconfiguring the primary DNS to an unreachable IP and observing cross-segment resolution and dynamic DNS registration with the secondary DNS, including noticeable delay.

Configure DNS clients through manual settings and DHCP-based automation for reliable name resolution and centralized enterprise management. Apply PowerShell to verify cross-segment resolution and test failover with escalating timeouts.

Explore essential DNS client configuration in Windows, including preferred server role, DHCP-based management, query timeouts, multi-homed setups, PowerShell commands, and APIPA troubleshooting.

Diagnose DNS issues with enhanced PowerShell statistics, including zone query, zone transfer, and zone update metrics.

Master DNS troubleshooting with nslookup, ipconfig, and DNS commands, and apply a systematic, multi-vantage approach to diagnose name resolution using command line tools and PowerShell cmdlets.

Explore dns troubleshooting in Windows Server 2022 by simulating dns cache issues, editing the hosts file, testing hostname resolution, and clearing the dns resolver cache to restore correct ip addresses.

Simulate DNS server connectivity issues by pointing to an invalid DNS server, verify network connectivity and DNS resolution, and fix settings using PowerShell and nslookup.

Simulate dns zone transfer problems between dns servers, configure a secondary dns server on svr1, intentionally restrict transfers on the primary, and troubleshoot using powershell and dns manager.

Explore how to troubleshoot name resolution with enhanced PowerShell statistics, zone level diagnostics, and essential tools like nslookup and ipconfig, plus a systematic 4-step debugging process.

Explore DNS troubleshooting tools and techniques using PowerShell and command line diagnostics. Apply a systematic approach to real-world name resolution scenarios, including zone transfers, client caches, and port 53 testing.

Delegate DNS administration, configure DNS login for troubleshooting, manage aging and scavenging, and back up the DNS database to ensure business continuity, with event viewer and optional debug logging.

Enable aging and scavenging to remove stale dynamic DNS records, using a 7-day no-refresh and 7-day refresh window for a 14-day total life, with static records protected.

Explore DNS backup strategies for Active Directory integrated zones and primary file-based zones, using DNS command zone export or PowerShell, and align backups with zone updates for reliable administration.

Delegate DNS management with a DNS admins group for least privilege, and configure standard and debug DNS login with event viewer monitoring for troubleshooting on a Windows DNS server.

Enable agent and scavenging for the com zone to purge stale dynamic records, then back up AD‑integrated zones with PowerShell export or the classic DNS command tool to backups folder.

Delegate dns management with the dns admins group in a domain local security group to enforce least privilege; enable login, debugging when needed, and implement aging, scavenging, and zone backups.

Test your DNS administration skills in delegation, login practices, agent and scavenging, and backup strategies, including using the DNS admins group, temporary debug logging, and 14 days for dynamic records.

Explore backup strategies for Active Directory integrated DNS, including AD backups covering DNS data, zone exports for flexibility, safe scavenging, and prudent debug logging management.

Build a single VM Windows Server 2022 lab on Azure with PowerShell automation, Azure resources, and GitHub version control, including deployment and removal scripts.

Use PowerShell and Cloud Shell to manage Azure resource groups, remove groups with what-if, then install Az and connect to Azure to script a lab with virtual machines.

Create an Azure VM with PowerShell by declaring resource group, VM, and location variables, converting the password to a secure string, and provisioning public IP, VNet, and NIC.

Apply a PowerShell script to configure an Azure vm operating system by creating a network security group rule for rdp, setting inbound tcp 1000, and provisioning Windows vm with credentials.

Create and customize an Azure VM with a PowerShell script, configuring image, network interface, boot diagnostics, resource group, and outputting the VM details and public IP.

Automate Azure VM lab provisioning with a PowerShell script, ensuring 15-character names, and manage resources for a Windows Server 2022 VM, including IP, RDP access, and cleanup.

Demonstrates creating a resource removal script in GitHub Codespaces to delete Azure resources (VM, NIC, Public IP, NSG, VNet, resource group) for Windows Server 2022, using PowerShell variables.

Learn to execute a resource removal script in Azure portal: update repositories, clone or pull, verify and delete a resource group and its virtual machine resources using PowerShell.

Deploy multi-region Azure lab using PowerShell to create resource groups, VNets, and six Windows Server 2022 virtual machines with RDP access, NSG, and automated scripting.

Remove a multi-region Windows Server 2022 lab on Azure with a cleanup script that deletes VMs, NICs, public IPs, NSGs, VNets, and resource groups across regions, honoring dependencies and force.

Secure vm access with private access and private networking, restricting RDP to internal networks and using point-to-site or site-to-site VPN for development and production.

Azure Bastion provides a platform-as-a-service for secure, browser-based access to Windows VMs via TLS over 443, eliminating public IPs and centralizing access to avoid direct RDP exposure.

Set up six azure ad ds lab VMs across regions, assign IPs, install and promote a forest root domain controller via GUI, and configure domain options, NetBIOS, and data paths.

Configure a static IPv4 address on the server VM. Promote the server to a root domain controller in a new forest named learned lessons.com and install Active Directory Domain Services.

Diagnose and resolve Azure VM network connectivity by configuring IP configurations, public IP addresses, and network interfaces, including attaching and detaching network interface cards and adjusting network security settings.

Configure a static IP on the domain controller with PowerShell using New-NetIPAddress, setting 10.0.0.5/24 and gateway 10.0.0.1, then configure DNS to 10.0.0.5 and 10.0.0.4.

Remove the existing IP, set a static IPv4 address on the Ethernet interface to 10.0.0.5/24, configure DNS to 127.0.0.1 and 10.0.0.4, and verify with ipconfig and Get-NetIPConfiguration.

Set the virtual network interface to a static private IP (10.0.0.5) using Azure PowerShell, verify configurations, apply changes, and restart the domain controller VM.

Add a second domain controller to learned lessons.com using the GUI, covering prerequisites, installing AD DS on disk two, and promoting it with proper DNS settings.

Configures VNet peering across Central India, UK West, and West Europe to support subordinate domain controllers, deploys DNS and promotes DCs for learned lessons.com in a forest.

Promote a secondary domain controller for a subdomain in Windows Server 2022, configure DNS and Active Directory replication across the root domain and two subdomains.

Verify and configure DNS settings across multi-region Active Directory, including DNS zones, forwarders, and delegation objects for AMS and mom subdomains, and test resolution with PowerShell.

Master configuring multi-region Active Directory replication by creating and linking site links, setting replication frequency to 15 minutes, and assigning domain controllers to sites with GUI and PowerShell.

Configure Active Directory sites for a multi-region lab by creating UK West, West Europe, and Central India sites, aligning subnets and site links, and enabling 15-minute replication across domain controllers.

Implement ad sites and subnets for a multi-region environment by configuring dns delegation for ams.com, adding ams dc one and ams dc two, and verifying forwarders and zone transfers.

Configure a West US resource group with a standardized naming convention, create a matching virtual network, and deploy a pooled host pool with a load balancer and a two-user limit.

Explore configuring Azure Virtual Desktop with host pools, choosing load balancing algorithms (breadth first, depth first, resource-based), selecting session host images, sizing VMs, and monitoring performance for cost efficiency.

Learn how to configure Azure Virtual Desktop application groups to deliver desktop experiences, assign users or security groups, and enforce least- privilege access through scalable access control and review processes.

Create and configure the Azure Virtual Desktop workspace, linking host pools and application groups, implement role-based access control for power manage VMs, and assign users to finalize deployment.

Configure Azure Virtual Desktop resources by creating a resource group and workspace, add applications, and enable Microsoft Entra single sign-on to streamline authentication for remote desktop access.

Navigate Windows Server 2025 editions, including Essentials, Standard, Datacenter, and Azure edition, and learn pay-as-you-go licensing to optimize virtualization and hybrid cloud deployments.

Explore Windows Server 2025 datacenter edition with unlimited virtualization, software defined storage, shielded VMs, and software defined networking, plus Azure Data Center Asia edition’s cloud-first, pay-as-you-go licensing via Azure Arc.

Master core-based licensing and cost optimization for Windows Server deployments, balancing eight-core minimums, per-VM licensing options, and edition choices—from essentials to data center and Azure edition.

Test your Windows Server 2025 edition choices through practical scenarios. Examine advanced features like storage spaces direct, shielded VMs, and volumes larger than two terabytes.

Assess pay-as-you-go licensing for the four additional Windows Server VMs, enabled by Azure Arc and the data center Azure Edition to support a cloud-first hybrid architecture.

Explore Windows Server 2025 hardware requirements, including processor, memory, storage, networking, and virtualization considerations; plan deployments with testing, ensure minimums, and optimize performance with ECC memory.

Assess storage and network requirements for Windows Server 2022, from 32 gb to 64 gb, and ensure PCI Express storage controllers, secure boot, TPM 2.0, and 1 Gbps networking.

Assess and master Windows Server 2025 hardware requirements through practical questions on processor instruction sets, memory for virtual machine installations, and storage planning for desktop experiences.

Assess Windows Server 2025 hardware readiness with knowledge checks on sse 4.2 with popcnt, virtual machine memory, 64 gb storage planning, and security hardware considerations.

Explore Windows Server 2025 installation options, including server core and server with desktop experience, plus nano server's container-based shift for minimal footprint and features on demand.

Default to server core for efficiency and remote management, using PowerShell remoting and Windows Admin Center, while desktop experience supports GUI and legacy app needs, with nano server images evaluated.

Demonstrates enabling Hyper-V on Windows 10–11 clients via BIOS virtualization, Windows features, or PowerShell, then creating a Windows Server 2025 virtual machine with server roles and basic networking.

Explore creating virtual machines with Hyper-V Manager, compare physical versus virtual Hyper-V deployments—including live migration, failover, clustering, and SR-IOV—and enable nested virtualization for lab testing.

Create a new hyper-v virtual machine with generation two, 4096 startup memory plus dynamic memory, default switch, 60 GB disk, and install Windows Server 2025 from ISO.

Compare Windows Server 2025 core and desktop experience installation options. Use PowerShell, Server Manager, and feature installation to configure core vs GUI and plan deployment with snapshots.

Install Docker on a Windows Server 2025 VM, clone the repo, run the install script, and pull Nano Server and Windows Server Core images to compare sizes.

Explore Windows Server 25 with a Windows 11 style interface, redesigned desktop and start menu, modern task manager, and improved file compression to boost administrative efficiency.

Explore windows terminal on servers, featuring a tabbed multi-shell interface, improved readability, and profile and theme customization, plus winget for installing notepad++ and git.

Discover the new task manager and built-in compression in Windows Server, featuring a modern interface, clearer tabs, enhanced file management, and direct zip/7z/tar creation for streamlined administration.

Understand Windows Server 2025 installation choices, including two primary options—server core and server with desktop experience—and the nano server evolution into container images with features on demand.

Guard installation permanence by choosing server core as default and evaluating gui needs; understand nano server versus server core container sizes to optimize deployment, storage, and performance.

Master remote server administration with RSAT and Server Manager, using PowerShell remoting to manage multiple servers from a single interface, and apply firewall configurations and security practices.

Explore Windows Admin Center as the cornerstone of modern server administration via a web browser. Master PowerShell remoting to manage remote servers, run cross-server scripts, and extend your session.

Explore Windows Admin Center as the browser-based hub for real-time server health, VM management with live migration, storage, networking, and WinRS remote command execution.

Master secure remote management for Windows servers with remote desktop, Windows Admin Center, and Group Policy, while configuring firewall rules and choosing between Venarum and Dicom based tools.

Install Windows 11 on a Hyper-V VM, deploy Windows Admin Center, and install RSAT tools to remotely manage domain infrastructure with DNS and Active Directory.

Demonstrate deploying Windows Admin Center on a test VM, install with express setup, configure a self-signed certificate, and connect to domain controllers and extension updates via Windows Admin Center.

Master modern remote management for Windows Server 2025 by evaluating Windows Admin Center, PowerShell remoting, and security-focused firewall practices in real-world deployment scenarios.

Deploy Windows Admin Center on a Windows Server 2025 system with failover clustering for high availability and centralized access in a 50-server enterprise. Integrate with existing security infrastructure.

Master PowerShell 7 on Windows Server 2025 by importing modules, enabling remoting, and managing remote servers, using desired state configuration for scalable headless deployments.

Explore PowerShell direct for host-to-VM management with Hyper-V, enabling remote cmdlets without network setup, and apply DSC to declare and enforce consistent server configurations via push or pull.

Master PowerShell 7 fundamentals for Windows Server 2025, including remote management, module imports, desired state configuration, and cross-platform capabilities for headless servers.

Configure PowerShell execution policy and enable remoting, then examine modules, import server manager, and test remote sessions to retrieve computer info.

Demonstrates multi-line PowerShell scripting in a script block, using backticks for line continuation, variables, and pipelines to show running services, OS info, top five CPU processes, and troubleshooting errors.

Demonstrates interactive remote management with PowerShell direct and interactive sessions, enabling you to connect to Hyper-V virtual machines, run commands, manage credentials, and install features across remote hosts.

Explore PowerShell-based Windows Server administration, including listing and installing features and remoting for multi-server management. Monitor performance, gather system info, review event logs, and verify services.

Demonstrates basic desired state configuration to ensure telnet client is present on the local server. Create a simple configuration with node localhost, Windows feature telnet client, then compile and apply.

Demonstrate a systematic PowerShell troubleshooting approach for Windows Server 2025 services using Get-Service, Get-WinEvent, and dependency checks. Highlight daily PowerShell management tasks like environment verification, module management, and remote administration.

Explore practical PowerShell management for Windows Server 2025, from using PowerShell 7 for headless servers to importing modules, enabling remoting, and using PowerShell direct for VM administration.

Master scalable remote management with multi-system PowerShell by using Invoke-Command to run commands on many servers and applying PowerShell desired state configuration for automatic drift prevention.

Trace the evolution of Windows Server 2025, uncovering breakthrough features, security enhancements, and hybrid cloud improvements, with practical admin tools like work folders and dhcp failover.

Discover zero trust security enhancements in Windows Server 2025, including automatic credential guard, labs for local admin passwords, enhanced Active Directory security, and hot patching for in-memory updates.

Discover deep Azure Arc integration and hybrid cloud management for Windows Server 2025, with centralized policy, compliance, monitoring via Azure Monitor, and update management across on premises and multi-cloud environments.

Enhance file sharing with SMB over Quic and hardened security, offering brute-force protection, mandatory SMB signing, rate limiting, enhanced auditing, and flexible port options for secure hybrid and cloud deployments.

Boost administrative efficiency with Windows Admin Center version two, integrated security baselines, DTrace performance monitoring, a redesigned task manager, and Azure Arc integration.

Discover Windows Server 2025 enterprise features, including built-in compression, wireless lan, and passwordless authentication. Plan hardware upgrades, five level paging, Defender protection, and deprecated features like WordPad and IIS 6.

Explore Windows Server 2025 updates, including zero trust security with Credential Guard, hot patching via Azure Arc, and unified hybrid cloud management for centralized policy, faster maintenance, and enhanced performance.

Discover Windows Server 2025 security features, including automatic Credential Guard, hot patching with four quarterly reboots, and Azure Arc integration for hybrid cloud management.

Demonstrate performance optimization and SMB security in Windows Server 2025, including NVMe storage gains and Quic-based remote file access, plus automated security baseline enforcement via Windows Admin Center version 2.

Explore server core fundamentals, compare its advantages and trade-offs, and master local tools—PowerShell, cmd, config, registry editor, task manager, and system information—to deploy and manage server roles efficiently.

Explore how Windows Server 2025 Server Core supports server roles from Active Directory to Hyper-V and web services, while enabling remote management via Windows Admin Center, PowerShell remoting, and more.

Perform hands-on server core administration with the as config tool to configure network settings, updates, domain join, remote management, and PowerShell tasks on Windows Server 2025 core.

Explore Windows Server 2025 server core's core characteristics, including full server role support, no graphical user interface, and the primary S config interface with Xconfig relaunch for admin tasks.

Explore the practical limitations of Windows Server Core, highlighting why GUI-dependent applications fail and how to plan installation, remote management, and desktop experience migration.

Compare Windows Server 2025 installation options, focusing on server core versus desktop experience, to guide decisions on management approaches, resource needs, security, and application compatibility and support scenarios.

Evaluate application compatibility between server core and desktop experience, testing critical apps in server core. Develop a remote management framework with PowerShell and Windows Admin Center, considering a hybrid deployment.

Explore Windows Server 2025 installation types—server core, desktop experience, and mixed approaches—covering resource efficiency, security, management, and application compatibility.

Master Windows Server 2025 installation with hardware prep, memory and storage guidance, and data protection for deployment; explore installation media options (ISO, VHD, USB, PXE) for efficient test labs.

Master the Windows Server 2025 installation process from boot to initial configuration, including language setup, edition selection, disk planning, administrator password, and post-install tasks like network configuration and Credential Guard.

Explore Windows Server 2025 post-installation tasks and new features, including a modern Task Manager, Azure Arc integration, built-in DTrace, and enhanced file compression, with licensing tiers and best-practice deployment tips.

Deploy Windows Server 2025 in virtual environments with Hyper-V or VMware, using pre-built images, integration services, and best practices for resource planning and rapid, reliable deployment.

Obtain Windows Server 2025 installation media from Microsoft, enable Hyper-V, and configure VM settings (TPM, Secure Boot) to deploy secure Windows Server 2025 or Windows 11 VMs and optimize performance.

Explore Hyper-V, Windows built-in virtualization, including hardware requirements (64-bit with SLAT, VT-x, virtualization enabled in BIOS/UEFI, 4GB+ RAM) and how to enable, verify, and configure global settings and virtual switches.

Create a Windows 11 or Windows Server 2025 virtual machine with the Hyper-V wizard, selecting generation two, memory, boot order, network, and a minimum 64GB virtual hard disk.

Tackle post-installation tasks for Windows Server 2022 in Hyper-V, optimizing performance, security, and usability through integration services, updates, dynamic memory, network and firewall configurations, and checkpoints.

Evaluate Windows Server 2025 installation and Hyper-V planning by examining hardware requirements and memory planning, including four gigabytes minimum ram for desktop experience and host and VM considerations.

Assess flexible installation media strategies for multi-site Windows Server 2025 deployments, favoring USB flash drives with ISO files, and install Hyper-V via PowerShell with include management tools and restart.

Choose generation two for Windows 11 to enable UEFI firmware, secure boot, and TPM2, ensuring modern OS compatibility and improved performance with synthetic devices.

Enable secure boot and TPM in Hyper-V VMs to ensure Windows 11 security, and configure startup memory at 4 GB with dynamic memory up to 8 GB for VM efficiency.

Explore desktop virtualization options for building professional lab environments, comparing type-2 hypervisors like VirtualBox and VMware Workstation with bare-metal hypervisors, cloud labs, nested and container virtualization, and licensing considerations.

Discover Proxmox VE, an open source hypervisor combining KVM and LXC for VMs and containers, with software defined storage, networking, and clustering for high availability; XCP-ng provides a VMware alternative.

Explore cloud-based labs with AWS and Azure virtualization, featuring nested virtualization, elastic scaling, regional deployment, and cost-conscious lab management for development, testing, and training.

Compare containers and virtual machines, and apply Docker and Kubernetes to build efficient, scalable lab environments. Use infrastructure as code tools like Terraform, Ansible, and Vagrant for repeatable deployments.

Explore specialized virtualization platforms and niche solutions, such as Unraid, SmartOS, OmniOS, Camel, and OpenStack, highlighting flexible storage, ZFS, DTrace, Zones, beehive, and KVM capabilities.

Assess hypervisor performance and resource optimization across type one and type two platforms—Hyper-V, Proxmox, VMware Workstation, and VirtualBox—using data. Apply rightsizing, dynamic memory and CPU, storage optimization, and VLANs.

Evaluate total cost of ownership and licensing, comparing free open source options like VirtualBox, Proxmox, and Xpeng with paid platforms, and plan a hybrid cloud and training budget.

Configure post-install tasks for Windows Server 2025, including IP address, computer name, AD domain join, time zone, updates, roles, firewall, remote desktop, and management via Windows Admin Center and PowerShell.

Learn to use sconfig and the config tool for guided server core setup, including remote management and 2025 enhancements like Windows Terminal, WinGet, and OpenSSH.

Explore Windows Server 2025 security baselines with OS Config and drift-controlled monitoring. Use Windows Admin Center for browser-based management, and automate deployments with Unattended XML, MDT, Configuration Manager, and DSC.

Learn to join Windows Server 2025 to an Active Directory domain, verify DNS and time synchronization, and deploy roles and features using Server Manager, PowerShell, and Windows Admin Center.

Configure Windows Server 2025 security baselines with the OS config tool and Group Policy to enforce password complexity, account lockout, Windows Defender protection, and firewall rules, while managing updates.

Enable secure remote management for Windows Server 2025 with RDP and network level authentication, optional custom ports; deploy WinRM, PowerShell remoting, OpenSSH, and Windows Admin Center for Perfmon monitoring.

Diagnose Windows server issues, including DNS and firewall problems, domain join failures, and update or roll installation challenges. Use SFC, DISM, Server Manager, and Windows Admin Center for post-installation configuration.

Reinforce Windows Server 2025 post-installation tasks through a knowledge check that covers streamlined setup, sconfig tool usage, security baselines, remote management with OpenSSH, DNS domain joining, and automatic updates.

Explore Windows Server 2025 deployment options, comparing in-place upgrades and migrations, and plan with expanded upgrade paths from 2012 R2, 2016, 2019, and 2022 using migration tools and best practices.

Migration to Windows Server 2025 builds new servers and transfers roles, applications, and data using cross-subnet tools in a four-phase process.

Evaluate upgrade and migration options with a decision framework that balances administrative efficiency and infrastructure optimization, choosing in-place upgrades for stable systems or migrations for legacy deployments.

Explore legacy system upgrade limitations by applying upgrade path migration strategies to real-world Windows Server deployments, balancing in-place upgrades, migrations, and architecture constraints.

Master Windows Server migration tools to move services across subnets from 2003 and later, enabling cross-subnet migrations and flexible deployment to Windows Server 2025.

Build a Windows Server 2025 Active Directory domain using Hyper-V, promote W25 lead Dc1 to domain controller, configure DNS for learned lessons.com, and verify with AD tools and nslookup.

Learn to integrate server core via PowerShell by joining the computer to the domain, enabling remote management, and installing the DNS server role remotely on the domain controller.

Join domain member servers and Windows 11 clients, verify DNS points to the domain controller, and enable RSAT tools and Windows Admin Center for remote management.

Deploy Windows Admin Center on a member server, sign in with domain credentials, configure a self-signed certificate, and add core, DC, and gateway servers for centralized management.

Create lab users, organizational units, and a Demo Lab remote users group in an Active Directory domain, then configure remote access via Remote Desktop on Windows 11.

Explore how ADDS uses domains, domain trees, and forests to manage users, computers, and security policies, with sites and subnets optimizing authentication and replication.

Explore organizational units in Active Directory domain services, learn how to delegate administrative rights, apply group policy objects, and design OU structures by geographic, functional, or hybrid strategies.

Explore the physical components of Active Directory, including domain controllers, data stores, and global catalog servers, and learn to monitor health, plan capacity, implement redundancy, and manage backups and recovery.

Explore the logical and physical components of Active Directory Domain Services, including schema, configuration, and domain partitions, and learn how they shape administration, replication, and policy in Windows Server 2022.

Explore global catalog servers and read-only domain controllers in Active Directory, focusing on placement, replication, exchange address book lookups, and planning for scalable, secure infrastructure.

Reinforce AD DS fundamentals by tackling a knowledge-check on logical components like organizational units for policy and delegation, and physical components such as read-only domain controllers for branch offices.

Assess Active Directory partitions, focusing on the schema partition and its forest-wide replication, global catalog servers, and compare separate forests versus a single forest for security boundaries.

Understand how the Active Directory schema acts as the directory blueprint, defining objects, attributes, and classes to govern data structure, validation, and replication across domain controllers.

Understand schema modifications in Windows Server 2025, including version 91 and the 32kB page size, and learn safe additive extensions to Active Directory using Add Prep and Forest Prep.

Reinforce schema fundamentals, object structure, and mandatory attributes (common name and objectSid) for users; explore schema modification permissions, schema admins, enterprise admins, and practical best practices for Active Directory management.

Explore Windows Server 2025 schema updates, including version 91 and the Windows Server 2016 functional level, plus the 32 kB page size requiring fresh forest-wide installations and lab testing.

Explore Active Directory forests, including forest root domain, domain trees, and unique forest objects. Discover how the forest as a security boundary, replication boundaries, and the global catalog guide administration.

Explore how the forest defines replication and security boundaries, governs configuration and schema replication, and enables global catalog operations for efficient administration and deployment planning.

Examine forest architecture and security in active directory. A forest is the top-level container sharing a schema and global catalog, with schema master and enterprise admins, enforcing a security boundary.

Learn how forest trusts auto-establish bidirectional connections, how replication boundaries govern configuration, schema, and the global catalog, and how Windows Server 2025 expands multi-value attributes with 32k pages.

Explore how Active Directory domains function as logical containers for users, computers, and groups, how multi-master replication propagates changes, and how the administrative structure, authentication, and authorization secure Windows Server.

Apply central access rules with dynamic access control to standardize permissions. Explore Windows Server 2025 new enhancements such as multivalue attributes, replication priorities, and delegated managed service accounts with LAPS.

Master Active Directory Domain Services fundamentals, including domain object capacity and multi-master replication. Learn about domain admins, Kerberos authentication, Windows Server 2025 database page size features, functional level requirements.

Explore Active Directory domain services schema concepts in a hands-on lab, learning to view and verify schema information, and identify the schema master while checking the schema version.

Demonstrates configuring the schema snap-in on Windows Server 2022, verifying fsmo role holders with command line and GUI, registering the schema management DLL, and creating a custom MMC console.

Demonstrates exploring AD DS partitions, including the schema partition in ntds.dit, and using PowerShell, dsquery, LDP, ADSI Edit, and Active Directory Administrative Center to inspect domain structure.

Explore an Active Directory forest, domains, organizational units, and trusts. Use Get-ADForest and Get-ADOrganizationalUnit to reveal domain naming master, global catalog, and functional levels up to Windows Server 2025.

Demonstrates promoting a Windows Server 2025 domain controller in a legacy environment by upgrading from 2012 R2 to 2016, raising domain and forest functional levels, and troubleshooting blocking errors.

Demonstrates verifying current functional levels and raising forest and domain functional levels to support promoting Windows Server 2025 domain controllers in a lab using Windows Server 2012 R2.

Demonstrates adding a Windows Server 2016 DC to a Windows Server 2012 R2 legacy forest, verifying functional levels, and addressing prerequisites for a 2025 domain controller.

Shows in-place upgrade from Windows Server 2012 R2 to 2016 on a domain controller, and highlights risks with PDC emulator, functional levels, and FSMO transfer best practices.

Demonstrates troubleshooting post-upgrade issues in Windows Server 2022 by verifying AD prep and schema versions, resolving DNS, and promoting a server to a 2016 domain controller.

Demonstrates the build and migrate method for upgrading Active Directory by creating a new domain controller, transferring Fisma rules, and decommissioning the legacy DC with minimal risk.

Transfer fsmo roles to a newly installed Windows Server 2016 and demote the old Windows Server 2012 R2, validating with netdom query fsmo, to modernize a legacy domain.

Promote a Windows Server 2025 to an Active Directory domain controller for an existing domain, raise forest and domain functional levels, and clean up metadata after demoting the previous DC.

Explore Windows Server 2025 Active Directory enhancements, including the 32k database page size on a fresh installation, and verify functional levels while enabling the 32k pages feature.

Enable the database 32K pages feature across the forest using PowerShell. Accept the irreversible change, verify replication, and plan recovery via authoritative forest recovery if needed.

Explore how organizational units and containers organize Active Directory objects for targeted group policy objects (GPOs) and delegated administration, and learn OU versus container design principles.

Manage Active Directory by optimizing organizational units, separating objects by type, and delegating control, while preventing orphaned objects through coordinated replication and clear naming.

Explore the differences between organizational units (OUs) and containers, and apply group policy through OU design. Cover OU hierarchy, default Active Directory objects, and best practices for OU management.

Explore how to use the delegation of control wizard to grant password reset permissions for a sales OU with least privilege, and organize objects by type for efficient policy application.

Create and manage organizational units in Active Directory using graphical, PowerShell, and command-line tools. Build a practical OU structure with company, departments, servers, and service accounts to enable tailored policies.

Use PowerShell to create and manage Active Directory organizational units, including a workstations OU, verify with Get-ADOrganizationalUnit, enable protected from accidental deletion, and export structure with ldifde for documentation.

Move objects from default containers into a new OU structure to apply department policies, using drag-and-drop in Active Directory and PowerShell with new-aduser and move-adobject to relocate users and computers.

Demonstrates moving users and computers from default containers into organizational units using the Active Directory Users and Computers snap-in and PowerShell commands, enabling department-specific policies.

Understand Microsoft Android as a cloud based identity management and federation service that syncs on premises Active Directory with the cloud and supports external identity providers.

Explore how Microsoft Android provides cloud-based identity and access management for cloud applications, complements on-premises Active Directory, and enables single sign-on for Microsoft 365 and other services.

Explore essential Active Directory Domain Services tools, including the Administrative Center, the classic Active Directory Users and Computers, Sites and Services, and the PowerShell module for efficient multi-domain management.

Identify when to use core AD DS tools—Active Directory Administrative Center, Active Directory Users and Computers, and Active Directory Sites and Services—and practice PowerShell equivalents and replication management.

Demonstrate creating Active Directory objects using GUI, PowerShell, and dsadd across the Active Directory Administrative Center, DSAC, and the command line with scripting and one-liners.

Enable advanced features in Active Directory users and computers, explore the attribute editor and distinguished name, and use PowerShell history to automate daily AD tasks with essential command-line tools.

Navigate the Active Directory Administrative Center to create objects, view all object attributes, reset passwords, and use the PowerShell History Viewer for AD management.

Explore domain controllers hosting active directory, storing the ntds database and sysvol, and enabling kerberos authentication with multi-master replication for high availability and branch office options.

Learn how read-only domain controllers enable secure local authentication for branch offices, with containment, BitLocker, selective password caching, and Windows Server features like Numa support and replication controls.

Test your mastery of domain controllers on Windows Server 2022 with practical questions on replication, high availability, security, and Active Directory fundamentals.

Demonstrate domain controller configuration with hands-on labs, examining core components, verifying replication, configuring high availability, and managing Active Directory using GUI tools, PowerShell, and command-line utilities.

Examine replication health and inbound partners using repadmin and nltest, then promote a second domain controller to ensure high availability and verify both DCs.

Learn how to monitor and verify domain controller load balancing, diagnose replication health, and use PowerShell and command-line tools to validate global catalog connectivity and replication across multiple domain controllers.

Explore deploying a read-only domain controller for a branch office with limited security. Create a branch offices organizational unit and security group, then install and promote AD DS.

Demonstrates promoting a server to a read-only domain controller, configuring DNS, Global Catalog, and DSRM credentials, and verifies read-only behavior with GUI and PowerShell tests.

Demonstrate how to check an RODC's status and global catalog flags with PowerShell, explore password replication policy, and pre-populate and validate cached passwords for branch office users.

Master the global catalog service in Active Directory to speed cross-domain searches. Understand the partial attribute set and best practices for deploying global catalogs across your forest for authentication.

Master global catalog placement to optimize cross-domain searches, authentication, and roaming user access across single and multi-domain forests, with site-wide global catalogs and strategic exceptions.

Verify and configure global catalog servers across the forest using GUI, Active Directory sites and services, PowerShell, and command-line tools, ensuring replication and DNS registration.

Explore how global catalog servers enable forest-wide searches in a multi-domain Active Directory by using a partial attribute set. Learn best placement in single-domain forests and effects on replication.

Learn why Exchange Server queries the global catalog to locate the recipient's account and determine routing across a multi-domain forest, and how universal groups rely on GC data for authentication.

Learn how domain controllers advertise services in DNS via SRV records, enabling client discovery for LDAP and Kerberos across Active Directory sites, and troubleshoot with Netlogon and ipconfig /registerdns.

Master advanced srv record management in Windows Server 2022 with Netlogon, automatic site coverage, and manual reregistration controls for reliable domain controller discovery.

Practice test on srv records configuration concepts helps you validate domain controller discovery, Kerberos service queries, and Netlogon behavior for reliable Active Directory authentication.

Master advanced SRV records troubleshooting in Windows Server 2022. Learn to use NLTest to trigger Netlogon reregistration without service restart, minimizing authentication disruption in production environments.

Demonstrate verifying SRV records for domain controllers using DNS Manager and Nslookup, examining _ldap and _kerberos records, and distinguishing site specific versus domain wide records.

Explore how to use PowerShell to query and analyze SRV records, LDAP and Kerberos data, and Netlogon registrations for domain controllers, enabling automation, documentation, and health monitoring.

Explore the two-phase authentication flow in Windows Server 2022 ADDS, from DNS lookups and LSA validation to access token creation and Kerberos tickets.

Explore resource access and service ticket authorization, detailing the TGT flow, domain controller interactions, logon events, and Windows Server 2025 security enhancements for auditing and troubleshooting.

Validate two-phase authentication in Active Directory, and reinforce security identifiers, access tokens, and the Kerberos flow with ticket granting and service tickets for practical troubleshooting.

Explore how domain joined computers authenticate at startup with computer account credentials and how randomly generated computer account passwords enhance Windows Server 2025 security, including Kerberos PKI cryptographic agility improvements.

Demonstrate the two-phase authentication in a real Active Directory domain, monitor Kerberos ticket operations via Event Viewer, and verify authentication events on domain controllers using PowerShell and command-line tools.

Examine security identifiers (SIDs) that uniquely identify users, groups, and computers in a Windows domain; verify SID consistency across PowerShell tools, then trace authentication with Event Viewer and Kerberos.

Demonstrate authentication event monitoring in Windows Server 2022 by tracing Kerberos ticket requests (4768/4769), logon/logoff events, and TGT and service tickets cached on clients via klist.

Demonstrates how computer accounts authenticate automatically at startup, enabling machine-level security operations, service authentication, and group policy application; learn to verify secure channel status and troubleshoot startup issues.

Identify the five fsmo roles and how they partition forest-wide versus domain-specific operations across schema master, domain naming master, infrastructure master, read master, and PDC emulator.

Identify and monitor the five FSMO roles, with a focus on the PDC emulator as the time source, urgent password changes, and GPO edit conflict prevention for reliable daily operations.

Analyze FSMO role distribution across an Active Directory forest with three domains, confirm 11 roles, identify the PDC emulator for authentication, and use PowerShell to locate schema and domain masters.

Understand how operations master roles govern FSMO availability, read pools, and cross-domain references, and learn when to seize roles with force to maintain domain health.

Learn the five FSMO roles: schema master, domain naming master, RID master, PDC emulator, and infrastructure master, and how to transfer or seize them across domain controllers using PowerShell.

Deploy a domain controller using GUI, server core, or media snapshot, with cloning for rapid Hyper-V deployments; discuss Azure considerations, VM generation ID, rollback, and adapter limits.

Install the domain controller role with server manager, then use the AD DS Configuration Wizard to add a domain to an existing forest or create a new forest.

Learn to install a domain controller from media for remote sites by creating an ads snapshot, transferring it locally, and promoting the server with server manager using install from media.

Discover how to clone domain controllers for rapid provisioning and private cloud deployments using Hyper-V, PDC emulator considerations, and virtual machine cloning.

Demonstrate preparing a source domain controller for cloning, exporting the VM, and importing a cloned domain controller with a new ID, including Active Directory Administrative Center steps and XML config.

Virtualization boosts hardware independence, efficiency, and scalability. Deploy at two virtual domain controllers per domain on different hosts, synchronize time, use generation identifiers, and limit cloning to batches of ten.