IT System Engineer & Cloud System Administration

Explore virtual machines and how to configure your lab, analyze the advantages of using virtual machines, and review different kinds of virtual software available in the market.

Check Windows Server hardware prerequisites by verifying a 1.4 GHz 64‑bit processor with SSE4, 2 GB RAM for experience, 32 GB storage (50 GB recommended), and a gigabit network adapter.

Create a VMware Workstation virtual machine, install Windows Server 2019 from ISO, configure hardware, select data center desktop experience, and begin building a first domain controller with Active Directory.

Perform post installation tasks by checking for updates on Windows Server 2019 and 2022, installing updates via server manager, and starting the device as needed across all servers and clients.

Change Windows device hostname manually by navigating settings, system, about, and choosing rename this PC. Restart to apply the new name fs zero one on Windows server or Windows client.

Learn to change your device hostname with command prompt by launching cmd as administrator, applying a rename command to set the hostname to fs02, then restart and verify with hostname.

Change a Windows Server hostname using PowerShell by renaming the computer with a new name, apply the change after a restart, and verify with the host name command.

Learn to use Server Manager to provision and manage Windows servers from a desktop, including remote management, server groups, cloud connections, and tools like Active Directory, DHCP, DNS.

Master Windows Server hardening by applying access controls, password policies, antivirus, firewall configuration, patching, minimal roles, static IP address, restricted remote desktop, and comprehensive logging.

Import a Windows 11 virtual machine, power it on, update the device, then change the host name and prepare to join a domain server later.

Download Windows 10 Enterprise ISO, register for a free trial, select language and 64-bit option, then install it on a VM using VMware Workstation Professional.

Navigate to the start menu, settings, system and about, rename the device name using the rename option or the advanced system settings, and restart to apply the new host name.

Learn to diagnose and fix Windows update issues with the built-in troubleshooter, clear update caches, restart services, and reset update components, including SFC and DISM checks.

Understand domains, trees, and forests in active directory domain services. See how LDAP stores and authenticates data, providing a central repository for users and computer accounts, integrated with Azure.

Learn how domain trusts enable cross-domain authentication and resource access. Trust types include one-way, two-way, transitive, and non-transitive, plus forest and domain trusts.

Explore Active Directory domain services core components, including domains, domain controllers, and objects like users, groups, and computers. Understand how forests, sites, replication, and group policy govern administration and access.

Promote a second server to a writable domain controller in an existing domain, enable DNS and global catalog replication, and avoid a read-only domain controller to maintain full functionality.

Join a Windows 11 device to the global domain using system settings and domain administrator credentials, then manage the device from Active Directory users and computers on the domain server.

Explore how active directory domain services use organizational units and containers to group users and computers, enable delegated administration, and inherit domain GPO settings.

Manage Active Directory users and groups within organizational units, apply group policy, assign permissions via groups in bulk, and differentiate distribution and security groups for email and resource access.

Manage group policies for users and computers across domains using the Group Policy Management Console and Remote Server Administration Tools; apply administrative templates for domain-wide settings.

Create and link a group policy object to restrict the control panel for users in Amsterdam, Antwerp, and Brussels, then apply gpupdate /force to enforce the policy.

Learn how to force group policy updates on Windows 11 devices using gpupdate /force or PowerShell. Ensure computer and user policies apply immediately without requiring a restart.

Master group policy management in Windows Server by backing up and restoring group policy objects, including the default domain policy, and choosing safe backup locations.

Create a group policy object on the domain controller, enable Remote Desktop Session Host, and force policy updates with gpupdate to enable remote desktop across client devices.

Configure Azure Active Directory with Azure AD Connect, verify sync status in portal.azure.com, and begin populating users and devices in the Microsoft 365 admin center.

Install Azure AD Connect, configure password hash synchronization and single sign-on for hybrid Azure AD join, and trigger a manual sync to push on-premises changes to Azure AD.

Install WSUS on a dedicated Windows server using server manager to add roles, configure data storage on a separate drive, run post-install tasks, and start synchronization from Microsoft Update.

Install and configure wsus, select language, choose updates for Windows 10, Windows 11, and Windows Server 2019, and start initial synchronization while planning group policy deployment to devices.

Configure group policy to route updates through your server, schedule updates, and specify the update service location, then create Windows 10 and Windows 11 groups to approve and deploy updates.

Configure groups and approvals to deploy updates to Windows 10 and 11 devices, move machines from unassigned to proper groups, and apply approvals via group policy in enterprise deployments.

Enroll personal devices to Microsoft Intune via the company portal to enable corporate management. Register the device, sign in, and deploy company apps and policies.

Configure group policy to automatically enroll Windows 10/11 devices into Microsoft Intune MDM using Azure AD credentials, syncing users via Active Directory and licensing.

Learn how to configure and deploy updates using Microsoft Intune, creating update rings for Windows 10/11 with quality and future updates, scheduling settings, and group targeting.

Create a Windows ten or later configuration profile for endpoint protection. Configure Windows Defender firewall, file transfer protocol controls, and BitLocker encryption, then assign the profile to groups and deploy.

Deploy line-of-business MSI apps to Windows devices using Microsoft Endpoint Manager and Intune, by selecting add, choosing app type, uploading the MSI package, and configuring user or device installation.

Deploy a web link to all devices using Microsoft Intune by adding a web link, assigning it to enrolled devices, and syncing to reflect the Udemy link on each device.

Explore configuring Windows Hello for business with Microsoft Intune, enabling the policy, setting PIN and biometric options, and enforcing device compliance for enterprise security.

Troubleshoot Intune device registration by inspecting event viewer for MDM enrollment failures and license issues. Ensure the user has a valid Intune license and uses the correct, verified domain name.

Learn to troubleshoot common Microsoft Intune issues using the admin dashboard to identify policy errors, enrollment failures, non-compliant devices, and generate reports, then deploy fixes, sync devices, and review logs.