Windows Infrastructure & Cloud Administration Bootcamp 2025

Build a single Azure VM lab environment with PowerShell automation and GitHub version control, deploying a VM and networking resources via scripts and Cloud Shell, with teardown scripts.

Master network security group configuration for rdp access and automate azure vm creation with PowerShell.

Explore automating Azure resource cleanup and multi-region VM deployment with PowerShell, creating and removing VMs, VNets, NSGs, and public IPs across UK West, East US, and Central India.

Explore vm size limitations across regions for azure vms and secure access methods, including private access and just-in-time access, while avoiding insecure public internet exposure.

Learn to securely access Azure virtual machines with Azure Bastion, eliminating public IPs, enabling centralized access via TLS over port 443, while setting up a domain controller with Active Directory.

Learn to manage Azure network interfaces, attach and detach NICs, configure static and public IPs, and deploy domain controllers in a Windows forest with PowerShell guidance.

Configure a static internal IP for an Azure VM using PowerShell, then promote disk two as a secondary domain controller for the learned lessons domain, adjusting DNS.

Learn to deploy a secondary domain controller, configure DNS, and manage DNS forwarders, delegations, replication, and site topology across root and child domains.

Configure Active Directory sites for a multi-region lab, creating UK, West Europe, and Central India sites, setting 15-minute replication, and assigning domain controllers via GUI and PowerShell.

Configure an Azure virtual desktop host pool by selecting breadth-first load balancing, choosing session host images, sizing VMs for per-user sessions, and provisioning the workspace with application groups.

Create an Azure virtual desktop workspace, name it, set its location, and add applications; troubleshoot authentication by configuring Microsoft Entra single sign-on for the RDP web client access.

Navigate Windows Server 2025 editions and licensing options to balance cost and virtualization, including essentials edition, standard edition, data center edition, and Azure edition, plus pay-as-you-go and per-VM licensing.

Explore Windows Server 2025 edition selection and licensing strategies through realistic scenarios, covering essentials, standard, datacenter, pay-as-you-go options, virtualization rights, and hybrid cloud and azure integration.

Plan Windows Server 2025 deployments by evaluating processor requirements, including sse 4.2 with popcnt, memory and storage needs, virtualization, and security hardware like tpm 2.0 and secure boot.

Explore Windows Server 2025 installation options, compare Server Core and Server with Desktop Experience, and learn how Nano Server evolved into container images for scalable deployments with minimal attack surface.

Learn to set up Hyper-V on physical and nested virtualization for Windows Server labs, enable nested virtualization, deploy VMs, configure virtual switches, and compare server core versus desktop experience.

Demonstrates Windows Server 2025 GUI updates, including a Windows 11 style desktop, redesigned start menu, modern Windows Terminal, improved task manager, and built-in file compression for efficient administrative workflows.

Explore Windows Server 2025 installation options—server core and server with desktop experience—and nano server evolution into container images with features on demand, plus remote management via RSAT and PowerShell remoting.

Explore Windows Admin Center as a free, browser-based hub for managing servers, VMs, and Azure resources. Master PowerShell remoting to run commands on remote servers and automate maintenance across infrastructure.

Demonstrates deploying Windows Admin Center on a Windows Server 2025 test VM, configuring certificates and browser access, and outlines deployment, firewall, and multi-tool management best practices.

Master PowerShell 7 administration on Windows Server 2025, importing modules, managing remote sessions with WinRM, using PowerShell direct for VMs, and implementing desired state configuration for consistency.

Master advanced PowerShell scripting with multi-line commands and backticks, and perform system monitoring using Get-ComputerInfo, Get-Counter, and Get-WinEvent. Explore remote sessions, PowerShell direct, and feature management on Hyper-V VMs.

Demonstrate desired state configuration (DSC) to ensure consistent server configurations, build and apply a basic DSC on localhost, and troubleshoot services with PowerShell techniques.

Learn scalable remote management on Windows Server 2025 by running commands across many systems with invoke-command, and enforce consistent configurations using PowerShell desired state configuration.

Explore Windows Server 2025 SMB security enhancements, including SMB over QUIC, default signing and auditing, plus Azure Arc powered hot patching and streamlined management with Windows Admin Center.

Explore Windows Server 2025 performance improvements, including nvme optimizations delivering up to 90% more iops, and secure file access via smb over quic, plus server core management basics.

Engage in a hands-on workshop using as config tool for Windows Server 2025 server core. Learn tasks like configuring network, updates, time, remote management, and PowerShell basics.

Explore Windows Server 2025 installation options—server core and desktop experience—covering management approaches, resource needs, planning, security implications, and application compatibility for informed deployment.

Apply a practical decision framework for Windows Server 2025 between server core and desktop experience. Assess application compatibility, management, security, and resources with remote management tools and a hybrid approach.

Master the Windows Server 2025 installation process, from pre-install preparation and hardware checks to core versus desktop experience, installation media, and post-install configuration.

Deploy Windows Server 2025 or Windows 11 VMs with Hyper-V, from obtaining official installation media to creating generation 2 VMs with TPM and secure boot, and configuring storage and networking.

Implement post-installation best practices for Windows Server 2025 and Hyper-V VMs, including integration services, updates, memory optimization, checkpoint strategies, network and security configurations, and a standardized post-installation checklist.

Choose generation two for Windows 11 on Hyper-V to enable UEFI, secure boot, and TPM 2.0, then enable these settings and use dynamic memory with startup 4 GB.

Explore enterprise virtualization platforms, focusing on Proxmox VE's KVM and LXC integration, clustering, and high availability. Evaluate open source and cloud lab options with nested virtualization and infrastructure as code.

Master post-installation tasks for Windows Server 2025, from network configuration and domain join to role deployment and security baselines, using OS Config, the config tool, Windows Admin Center, and PowerShell.

Learn secure remote management for Windows Server 2025, including RDP with network level authentication and custom ports, WinRM/PowerShell remoting, OpenSSH, Windows Admin Center, and monitoring tools for proactive maintenance.

Explore upgrade and migration strategies for Windows Server 2025, transferring roles, data, configurations with Windows Server migration tools. Follow a phased plan with assessment, environment preparation, migration execution, and decommissioning.

Assess Windows Server migration tools for cross-subnet moves from 2008 R2 to Windows Server 2025. Understand hardware limits on 32-bit systems and the hybrid upgrade-migration strategy.

Build a complete Windows Server 2025 Active Directory domain infrastructure in a hands-on Hyper-V lab, including DNS, domain controllers, joined client, and remote management via Windows Admin Center and PowerShell.

Explore how Active Directory domain services organize users, computers, and policies across domains, trees, and forests, with logical and physical components shaping authentication and replication.

Explore the Active Directory schema as the forest-wide blueprint, covering the schema partition's role, replication, and administration, plus Windows Server 2025 schema updates and best practices.

Explore Active Directory forests as the top-level boundary with domain trees and the forest root domain, and learn how security, replication boundaries, and the global catalog shape administration.

Explore Active Directory Domain Services domains, access rules, and dynamic access control, and learn Windows Server 2025 enhancements, including 32k pages, delegated managed service accounts, laps, and functional level upgrades.

Verify Active Directory domain and forest functional levels, global catalog, and organizational units using Server Manager and PowerShell, with hands-on steps toward upgrading to Windows Server 2025.

Learn how to raise domain and forest functional levels in a Windows Server AD environment, including verifying readiness, transferring FSMO roles, and resolving replication and DNS issues.

Organize and manage Active Directory with organizational units as the primary tool, differentiating OUs from containers, linking GPOs to OUs, planning delegation, and applying best practices for efficient administration.

Demonstrates creating and organizing organizational units and containers in Active Directory using graphical interface, PowerShell one-liners, and command-line tools, with hands-on tasks to move users and computers.

Learn about managing fisma roles, transferring or seizing them, and best practices for deploying and cloning domain controllers in virtualized environments.

Learn to create and manage user accounts in Active Directory using the four primary tools and implement a consistent naming strategy and unique logon identities.

Explore creating and managing Windows user accounts using Active Directory Administrative Center and PowerShell, with bulk creation workflows and attribute configuration across security, organization, and profiles.

This hands-on demo guides configuring user account attributes in Active Directory, covering expiration, logon hours, logon restrictions, smartcards, password policies, and attribute editor access via GUI, PowerShell, and ADAC.

Configure roaming profiles, folder redirection, and template users in Windows Server via Active Directory and Group Policy, leveraging percent username percent for scalable, secure profiles.

Practice user profiles and account management in Windows Server, covering account lifecycle, template management, roaming profiles, and PowerShell provisioning for bulk onboarding.

Explore Active Directory group types and scopes, learn when to use security versus distribution groups and how local, domain local, global, and universal scopes govern permissions and membership.

Master the IGLA framework to manage identities, global groups, domain local groups, and universal groups for cross-domain access, plus delegated management and restricted groups via group policy.

Explore default groups and special identities in Windows Server to manage access, permissions, and security roles within a modern Windows infrastructure bootcamp context.

Develop active directory computer account management skills by exploring the computers container, creating custom organizational units, delegating join permissions, pre-creating accounts, and validating secure channel with PowerShell and command-line tools.

Learn practical PowerShell techniques to automate Active Directory tasks, including managing users, groups, computers, and organizational units, plus bulk operations, filtering, and CSV processing.

Understand organizational unit design in active directory domain services, including five OU strategies, inheritance, protection from accidental deletion, and delegation methods to streamline administration and security.

Explore how the domain partition creates replication boundaries and how objects replicate across domain controllers. Use repadmin and AD sites to verify replication and learn troubleshooting steps.

Watch a demonstration of Active Directory partitions and replication management within Windows infrastructure, empowering learners to manage AD topology and replication strategies in a cloud-ready environment.

Explore Active Directory sites and replication management within Windows infrastructure and cloud administration. Learn strategies for configuring site topology and ensuring efficient, reliable Active Directory replication across environments.

Develop expertise in Active Directory site links and replication management within Windows infrastructure and cloud administration, enabling reliable domain synchronization across environments.

Learn how GPO inheritance is processed on the client side and how updates are applied in Windows infrastructure and cloud administration.

Demonstrate the benefits of group policy and the use of policy refresh tools to streamline Windows infrastructure and cloud administration.

Explore the fundamentals of Windows PowerShell, including its purpose, hosting options, and versioning; learn to configure the console and ISE for efficient administration.

Configure the Windows PowerShell console and ISE in lab one, adjusting appearance, layout, fonts, colors, and transcripts; run as administrator, pin to the taskbar, and customize single-pane ISE view.

Explore PowerShell command discovery and syntax, using verbs, nouns, wildcards, and help to locate commands for tasks like configuring IP addresses, reading event logs, and managing remote systems.

Learn how to use and update PowerShell help system, including Get-Help, Update-Help, and Save-Help, and configure a network-share source and group policy to maintain offline access and multilingual help.

Explore PowerShell help and command execution basics, including update-help and save-help usage, about topics, and syntax, tab completion, and proper parameter dashes.

Explore parameter techniques and command syntax shortcuts in PowerShell, including handling multiple values with comma lists, Get-content usage to read computers dot txt, and using variables and parentheses.

Explore discovering and using Windows PowerShell commands with what-if and confirm prompts, and learn to modify the confirm preference while practicing basic commands and pipeline concepts.

Learn to work with PowerShell objects by inspecting properties, methods, and events. Use Get-member and pipeline techniques to sort, measure, and select data, including calculated properties.

Learn how to convert and export data with Windows PowerShell, including CSV, HTML, XML formats, and import from external storage to build practical management reports.

Master object filtering and performance optimization in Windows PowerShell by converting management information into HTML, CSV, XML, and pipe-delimited formats, while applying basic and advanced filtering syntax and filter-left strategies.

Learn to enumerate objects in PowerShell pipelines and bind input by value or by property name, using foreach, basic and advanced syntax, and pipeline binding.

Explore how explicit parameter binding disrupts pipeline input in Windows PowerShell and how pericentral commands, by value, by property name, and property expansion shape command pipelines.

Practice PowerShell pipeline input methods and PS providers in a lab, verifying how computer name, string, and object inputs flow between cmdlets and exploring provider capabilities.

Explore managing PS drives, creating new drives, folders, and registry keys, and configuring run lists and remoting settings, plus how PowerShell formats pipeline output with format list, table, and wide.

Master advanced formatting commands in Windows PowerShell, apply calculated properties with format table and format list, group by and sort, and redirect formatted output to files and grid view.

Learn to craft formatted PowerShell reports for management using Get- commands and format controls, including computer system details, process tables, and route data, with WMI and CIM context.

Learn to navigate the WMI and CIM repository by exploring namespaces and classes, listing and querying instances with PowerShell, using PS drives, and locating online class documentation.

Query remote computers with WMI and CIM using computername and credentials, create persistent SIM sessions, and invoke methods such as reboot or terminate.

Query management information from local and test computers using WMI and CIM commands; query ip addresses, operating system version, hardware, and services, and invoke reboot and start mode changes.

Master creating, managing, and using PowerShell variables with scope rules, built-in vars, and arrays, and practice host commands such as set variable, getvariable, clear variable, and write-host.

Master Windows PowerShell operators (arithmetic, assignment, comparison, logical, and unary), learn operator precedence, basic script parameters, and led binding for robust tooling. Use param block and led binding.

Master parameterizing Windows PowerShell scripts, test and run them in the Windows PowerShell ISE, enable verbose output, and organize code with command based help and script modules.

Learn PowerShell debugging with write debug and verbose, pausing scripts to inspect state, and convert scripts to functions and modules while mastering error handling via try catch and error actions.

Learn to implement robust error handling in Windows PowerShell scripts using try/catch and verbose logging; explore if, switch, and foreach constructs, and configure networks with Get-NetAdapter and New-NetIPAddress.

Configure DNS for a new forest by setting DNS client addresses, renaming the server, installing AD DS, deploying the forest, and creating Active Directory integrated primary DNS zones.

Create and manage forward and reverse DNS zones, including Active Directory integrated zones, with dynamic updates and replication, and configure conditional forwarders to keep internal traffic within the network.

Master zone delegation and DNS resource records in Windows DNS, including A and quad A, CNAME, MX, NS, PTR, TXT, and SRV records, plus DNS scavenging and PowerShell cmdlets.

Master creating and managing active directory groups and organizational units using PowerShell cmdlets, adding members, setting group scopes, and moving objects between OUs, then automate domain controller deployment.

Learn the five FSMO roles—schema master, domain naming master, RID master, PDC emulator, and infrastructure master—plus transferring or seizing them with PowerShell and basic AD object management.

Create bulk Active Directory users using a foreach loop and a CSV file, auto-generating lab users with passwords, then modify properties in bulk—description and phone numbers—via PowerShell.

Execute bulk Active Directory operations on user and computer accounts with PowerShell, using Get-ADUser and Get-ADComputer, and piping to enable, disable, move, or remove objects.

Automate Active Directory group and computer account management with PowerShell. Create security groups of different scopes, search and modify groups, and manage memberships with Get-ADGroup, Set-ADGroup, and Get-ADComputer.

Manage Active Directory security groups by adding users and computers with PowerShell, including bulk operations, nested groups, and exporting group membership for reporting.

Learn PowerShell group policy management with Gpmc, including creating, linking, backing up, and restoring GPOs, plus IIS installation via Server Manager or PowerShell.

Manage IIS with PowerShell and IIS manager, inspect event logs, and create dynamic test pages using ASP or ASP.NET, while testing the default website with server variables and default documents.

Explore managing IIS via IIS manager and PowerShell, monitor events, export logs, and test default pages; create dynamic pages with ASP/ASP.NET using server variables in the default site.

Create and configure websites in IIS with appcmd and PowerShell, set up application pools and bindings, and enable HTTP 2.0 on IIS 10 with SSL.

Learn how to manage nano server and IIS remotely with PowerShell, including creating sessions, importing the IIS administration module, listing and configuring sites, and starting and stopping sites.

Explore installing and managing a DHCP server via GUI and PowerShell, including checking installation with Get-WindowsFeature and Install-WindowsFeature, and configuring scopes, options, and authorization.

Explore configuring DHCP scopes and managing super scopes with PowerShell commands. Learn to view, set, and remove scope options, create and modify superscopes, and automate with DHCP server v4 commands.

Learn the evolution of PowerShell from 1.0 to 5.0, explore console and ISE hosts, verify versions with $PSVersionTable, and practice using transcripts, history, and aliases to discover commands.

Discover how to locate and use Windows PowerShell commands with Get-Help and Get-Command, explore module discovery, and understand wildcard and parameter syntax for clear, example-based learning.

Master the PowerShell pipeline by piping objects between commands and exploring their properties and methods. Learn aliases, tab completion, show command, and what-if and confirm to write readable, safe pipelines.

Master PowerShell object manipulation with sort-object, select-object, measure-object, and calculated properties, and convert and export data to CSV, HTML, or XML.

Master PowerShell data import and advanced object filtering by converting external data into objects, using import csv, convert from csv, and where-object to filter efficiently.

Learn PowerShell fundamentals and the integrated scripting environment, including cmdlets, pipelines, aliases, and Get-Command/Get-Help for exploring tools.

Learn to manage Windows infrastructure with PowerShell for local and remote administration, using Get-Help, Update-Help, and remoting techniques to run commands across machines.

Analyze Windows server configurations using the Best Practice Analyzer (BPA) and review BPA results with recommended fixes. Manage firewall and server features via PowerShell, including set-netfirewallprofile, get-netfirewallprofile, new-netfirewallrule, and Get-WindowsFeature.

Explore how to map and manage PowerShell drives, access registry and file system items, and leverage pipelines to sort, select, and control services with start and stop operations.

Explore PowerShell pipes and object manipulation, exporting services to CSV, importing CSV to work with objects, and using select, where, sort, and calculated properties to analyze services and processes.

Understand DNS architecture and name resolution in Windows Server, distinguishing recursive and iterative queries, forwarders, and zone types, with common records and basic troubleshooting tools.

Learn to install, remove, and manage DNS server roles with PowerShell and DNS Manager, create forward and secondary zones, and configure zone transfers.

Learn to manage DNS roles and zones on Windows servers using PowerShell, including installing and removing DNS features, and creating primary and secondary forward lookup zones.

Master PowerShell comparison operators, including eq, gt, like, and case-insensitive variants, and apply DNS zone creation and conditional forwarders; explore PowerShell formatting with format wide and alternate views.

Format PowerShell output as the last step in the pipeline, then use Outfile or redirection to save results, while deciding between objects and strings for downstream use.

Explore how out-null suppresses the PowerShell success stream, and learn alternatives like dollar null, redirection, and [void], plus using out grid view for interactive results.

Master PowerShell pipeline operations by chaining Get-Process, Sort-Object, Measure-Object, and Group-Object for concise reports. Explore domain controller fundamentals, including the global catalog, DNS, sign-in, and operations masters.

Explore Nano Server installation and configuration with PowerShell, including mounting installation media, creating the Nano Server image, deploying a Hyper-V VM, enabling remote management, and joining a domain.

Discover Nano Server deployment methods for Windows Server 2016 using PowerShell to create VHDs, bootable drives, or VIM images, and explore the Nano Server Image Generator steps and supported roles.

Explore PowerShell aliases and how to discover them, use the PSReadLine history with Ctrl+R, and leverage formatting rules and pipeline basics to build reliable, auditable scripts.

Explore PowerShell format-table and format-list to format command output, group, sort, and customize properties, and master Exchange mailbox management with new, enable, set, disable, and remove mailbox cmdlets.

Learn to manage contacts, mail enabled users, and distribution groups in exchange management shell, including creating, updating, removing, bulk provisioning with csv imports, and configuring resource mailboxes with calendar processing.

Learn to enable mail tips organization-wide and adjust large-audience thresholds, then master recipient filters, server-side filtering, dynamic distribution groups, and email address management in Exchange.

Learn mailbox migration and data import-export in Exchange with the Exchange Management Shell, including move requests, status tracking, and PST export reports.

Learn to manage mailbox content with search mailbox to delete items, configure quotas, restore deleted items using single item recovery, and generate deletion reports.

Bulk add distribution group members from text or csv files using Get-Content, Import-Csv, and the Add-DistributionGroupMember cmdlet in the Exchange Management Shell.

Learn to configure distribution group self-management with set distribution group, controlling member join and depart restrictions (open or closed), and create address lists with recipient filters and exports.

Use the Exchange Management shell to create, mount, rename, move, and remove mailbox databases. Enable automatic mailbox distribution and configure quotas, retention, and bulk updates via csv.

Verify mailbox database sizes using Get-MailboxDatabaseStatus in the Exchange Management Shell and export a report, then learn to create and manage a database availability group with a witness server.

Learn to manage a database availability group by adding mailbox servers with the Exchange Management Shell, configure dock networks, and create mailbox database copies for failover.

Move active mailbox database copies between servers with the Move Active Mailbox Database cmdlet in Exchange Management Shell, using mount dial overrides and health checks to ensure safe switchover.

Explore six essential areas of cloud administration, from prerequisites and identity governance to storage, compute, networking, and monitoring, using the Azure Portal, Cloud Shell, and automation.

Explore the Azure portal to create resource groups, manage subscriptions and regions, attach storage via Cloud Shell, and automate tasks with PowerShell while handling resource dependencies.

Deploy a Windows Server 2022 Azure VM in a resource group, configure networking and disks, and compare Azure subscription types: free, pay-as-you-go, enterprise, and cloud service provider.

Learn how to organize Azure resources with resource groups, design regions and availability zones for high availability, disaster recovery, and cost control, including naming, tagging, and life cycle best practices.

Explore Azure's all services catalog to find, configure, and manage hundreds of compute, storage, database, and network services, with cost management tools like budgets and cost analysis.

Explore GitHub integration with Azure, clone the Azure Learned Lessons repository, run ps1 scripts to manage VMs, and learn cloud computing fundamentals.

Explore cloud computing basics, the shared responsibility model, and cloud models (public, private, hybrid, multi-cloud) along with scalability, reliability, security, governance, and cost management.

Explore cloud resource management and scaling approaches, including template-based provisioning, automated scaling, continuous monitoring, and web portals, CLI, APIs, PowerShell, plus IaaS, PaaS, SaaS with shared responsibility.

Explore software as a service, the most complete cloud model that delivers ready-to-use applications via the internet, with the provider handling maintenance, security, updates, and minimal technical overhead.

Explore how Azure organizes resources through resource groups, subscriptions, and management groups to enable governance, cost management, and region pairs for disaster recovery.

Explore Azure cost management and pricing strategies that transform capex to opex, cover pay-as-you-go and reserved capacity, region and subscription pricing, marketplace options, and the pricing and TCO calculators.

Explore Azure cost management with cost analysis, budgets and alerts, and learn how resource tagging (app name, cost center, owner, environment, impact) supports cost allocation and governance via Azure Policy.

Harness Microsoft Purview for automated data discovery, classification, and lineage, and use Azure Policy, resource logs, and resource locks with the Service Trust Portal to enforce governance across clouds.

Access the Service Trust Portal with a Microsoft Cloud Service account and Entra Organization account, then learn Azure governance and resource management using policy, Purview, Resource Logs, and ARM templates.

Explore ARM templates and Bicep for declarative, modular, and idempotent Azure deployments with automated orchestration. Preview Azure Monitor tools such as Azure Advisor, Service Health, Log Analytics, and alerts.

Explore Azure Cloud Shell, a browser-based command line interface with persistent cloud storage, pre-configured tools, and bash or PowerShell support for managing resources.

Learn bash fundamentals: command syntax, options, arguments, and help systems, with practical examples using ls, pwd, and mkdir. Master wildcards, escaping, and file searches in Azure shell.

Master bash commands for Linux file navigation and operations, including ls, cd, and pwd. Learn cp and mv for copying and moving, with -R -p -v -i options and mkdir.

Master Linux file operations and directory management. Use rm with -r -i -f for safe recursive deletion, mkdir -p for nested structures, and cat, more, less, head, tail for file content; manage privileges with sudo and su.

Master process management and real-time monitoring with ps, top, and uname in the Azure shell, covering Linux and Mac OS. Learn bash input-output operations, including redirection, pipes, and appending.

Master cloud shell navigation and process control with bash basics, including directories, hidden files, command history, and background Python tasks in Azure.

Master Bash fundamentals for file operations, process management, I/O redirection, piping, and grep, then explore PowerShell as a cross-platform automation tool with cmdlets and pipelines for cloud resources.

Discover how to locate PowerShell commands for Azure resources with Get-Command, Get-Help, and Get-Member, using verb-noun naming and filters by noun or verb.

Harness PowerShell to explore and manage Azure resources, querying properties and deleting resources. Deploy infrastructure with JSON ARM templates in Visual Studio Code and validate deployments with Azure Resource Manager.

Explore how Azure Resource Manager templates deploy multi-component web apps by coordinating a virtual machine, database, and storage account with dependencies and modular reusable templates.

Learn to parameterize arm templates, replacing hard-coded values with environment-specific inputs, using parameter types, defaults, and secure strings, and deploy storage account names via Azure CLI.

Learn to build an Azure ARM template by defining parameter blocks (location, storage account), configuring types, defaults, metadata, and allowed values, and constructing the resources section.

Learn to debug and deploy an Azure Resource Manager template by editing parameters, validating the template, and running idempotent deployments with parameter files.

Automate Azure VM creation and resource management with PowerShell, defining a resource group, networking components, credentials, and a Windows Server VM. Output VM details and connection information for quick access.

Leverage PowerShell automation to create a multi-VM Azure lab, enforcing 15-character names, deploying VM, NIC, IP, NSG, VNet and disk, and clean up all resources with a removal script.

Deploy multi-region Azure VMs with PowerShell scripts across UK, West, East US, and Central India, creating resource groups, VNet, public IPs, NSGs, and Windows Server 2022 Azure Edition.

Learn Azure VM security access methods, including private access, site-to-site VPN, just-in-time access, and Azure Bastion, to securely access VMs via TLS without public IP exposure.

Configure static IP addresses on Windows Server VMs. Promote the server to a domain controller using Active Directory Domain Services and DNS for learned lessons.com.

Manage Azure network interfaces and promote a second domain controller for learned lessons, using PowerShell to set static IPs, attach NICs, configure DNS, and complete Active Directory domain services promotion.

Configure a multi-region active directory with a child domain and inter-site vnet peering, plus dns delegation and forwarders to ensure cross-region name resolution.

Configure DNS delegation and forwarders, then create active directory sites UK West, West Europe, Central India, and assign domain controllers with 15-minute replication.

Describe Azure Virtual Desktop setup in West US, including resource group naming, VNet and host pool creation, load balancer and session host basics, and Windows 10 Enterprise multi-session image.

Deploy and configure an Azure Virtual Desktop workspace, verify host pools and application groups, and implement Microsoft Entra ID authentication with single sign-on for secure remote access.

Explore Microsoft Entra ID core capabilities for cloud apps, including application access, single sign-on, federation, MFA, and conditional access, with hybrid identity integration.

Learn how Microsoft Entra tenants relate to Azure subscriptions in a multi-tenant architecture, and how to register a custom domain and verify ownership.

Verify a custom domain with Microsoft Entra ID, configure Azure Entra Connect to sync on-prem AD, and compare Entra ID with AD DS for cloud identity and single sign-on.

Explore how Microsoft Entra Domain Services provides cloud-based domain services, including policy management, domain joining, and Kerberos authentication, and how it synchronizes with on-premises Active Directory for hybrid deployments.

Configure hybrid identity by deploying Azure Entra ID, syncing on-premises AD with Azure AD Connect, and enabling seamless single sign-on across Azure resources and on-prem VMs.

Learn to govern Azure resources by implementing tagging policies and remediation to enforce required tags across resource groups and storage accounts. Enforce tagging with Azure Policy.

Deploy a WordPress site with Azure App Service from the Marketplace, manage resources via the portal or CLI, and scale and monitor using Cloud Shell and pricing tiers.

Master designing and deploying Azure virtual networks, configuring subnets, IP addressing, DNS, security policies, and provisioning Windows Server 2016 Data Center VMs with managed disks and availability sets.

Explore advanced Azure networking and backup recovery with virtual networks, subnets, NSGs, load balancers, VPN gateways, and Recovery Services Vaults, detailing Azure Backup, Site Recovery, RPO, RTO, and BCDR planning.

Explore Windows Server 2022 installation, core vs desktop options, and digital sovereignty concepts, including NSGs, Azure virtual networks, ExpressRoute encryption, and hyperscale cloud considerations.

Discover how hyperscale cloud enables digital sovereignty for public sector needs. Explore Microsoft Cloud for sovereignty, guardrails, and sovereign landing zones for secure, compliant scalability.

Implement sovereign controls and compliance frameworks with Microsoft Cloud for sovereignty, using encryption, key management, and Azure Confidential Computing to protect data at rest, in use, and in transit.

Explore the Microsoft Cloud Security Benchmark domains: data protection, login and threat detection, and network security, and implement encryption in transit, centralized logging, and zero trust architecture for compliance.

Encrypt data in transit and enforce secure protocols across Azure, AWS, and GCP, and implement network segmentation with Vnets, VPCs, subnets, NSGs, firewall rules, and threat detection.

Learn to secure cloud native services across Azure, AWS, and GCP by establishing private access points, restricting public access, and using gateways or load balancers for secure, private communication.

Deploy and configure web application firewalls across Azure, AWS, and GCP to protect apps from application layer attacks, detect insecure protocols, and establish private on-premises to cloud connections.

Explore Azure administration fundamentals, from managing subscriptions, resources, and costs to deploying virtual machines, virtual networks, storage, and identity with Azure Active Directory, under a shared responsibility model.

Explore private, public, and hybrid cloud models, their control, security, and cost trade-offs, and how consumption-based pricing drives pay-as-you-go scalability and OpEx alignment.

Discover how cloud benefits, such as high availability, scalability, reliability, and predictability, transform IT infrastructure with IaaS, PaaS, and SaaS, plus shared responsibility and lift-and-shift use cases.

Explore Azure physical infrastructure, including data centers, regions, availability zones, region pairs, sovereign regions, and data residency, plus the Azure account hierarchy from account to subscriptions.

Learn to organize Azure resources with resource groups, manage environments with subscriptions and management groups, and apply governance, policy, and cost management across the organization.

Learn Azure virtual machines as infrastructure as a service with full OS control, pre-configured images, scale sets, availability sets, and lift-and-shift migration.

Create a Linux VM in Azure using the Azure CLI and a custom script extension to install nginx, then explore Azure containers, serverless functions, and Azure Virtual Desktop.

Explore Azure App Service as a versatile PaaS for web apps, API apps, web jobs, and mobile backends, with language-agnostic support, cross-platform hosting, CI/CD, auto-scaling, and robust security.

Learn to design Azure VPN gateway and ExpressRoute connectivity, linking on-premises networks to Azure with IPsec or SSP, site-to-site and point-to-site, and BGP routing.

Explore Azure dns as a global, highly available domain hosting service with private dns domains, and learn storage accounts, endpoints, redundancy options, and alias records.

Compare Azure storage redundancy options—LRS and ZRS in the primary region, and GRS and GZRS for geo replication—plus RA-GRS read access, failover, and an RPO under 15 minutes.

Explore Azure storage foundations, including blobs, files, queues, disks, and tables, with blob tiers hot, cool, cold, and archive to optimize costs, durability, and availability.

Explore Azure storage solutions for virtual machines and data, including managed disks, Azure Table Storage, and Azure Data Box, plus migration tools like Azure Migrate and Data Migration Assistant.

Learn how Microsoft Entra ID bridges on-prem and cloud identities, enables single sign-on across Microsoft and custom apps, and supports MFA and passwordless options for secure hybrid access.

Learn how Azure external identities enable secure cross-organization collaboration through B2B and B2C, using Entra ID with bring your own identity, access reviews, conditional access, and RBAC.

Explore the zero trust security model and defense in depth within modern cloud and hybrid environments, emphasizing identity-centric access, least privilege, micro-segmentation, and continuous monitoring using Azure security tools.

Microsoft Defender for cloud protects cloud, on-prem, and hybrid environments with continuous assessment, threat protection, and resource hardening. It extends to multi-cloud via Azure Arc and CSPM.

Use the Azure pricing calculator to estimate resource costs and build solution-wide cost scenarios. Compare with the TCO calculator and monitor spending using cost management, budgets, and alerts.

Unify data governance with Microsoft Purview across on-prem, multi-cloud, and SaaS, featuring automated discovery, sensitive data classification, and end-to-end lineage, plus Azure Policy for scalable compliance.

Apply Azure resource locks to protect critical resources from accidental deletion or modification, using delete and read-only locks with inheritance across resources, resource groups, or subscriptions, complemented by RBAC.

Explore Azure Portal, Azure PowerShell, and Azure CLI with Azure Arc for hybrid cloud administration. Apply governance and security with Azure Policy, Azure Security Center, and Azure Sentinel across environments.

Explore Azure Resource Manager as the central layer for deploying and managing resources through resource groups, declarative JSON templates, and RBAC, with consistent deployments, tagging, and secure, scalable organization.

Master Azure resource lifecycle management, including safe resource group deletion with dependency checks, and use Azure Monitor, Advisor, and Log Analytics to optimize cost, reliability, and performance.

Access Azure Cloud Shell to manage Azure resources through a browser-based command line interface, with persistent cloud drive storage, a built-in editor, and a toolkit of Azure and Linux tools.

Explore Linux system administration commands, including sudo for secure privilege elevation, directory and file management, process monitoring, and introduce PowerShell's object-based pipeline and cross-platform tools.

Explore PowerShell cmdlet discovery using Get-Command, Get-Help, and Get-Member, with verb-noun naming and wildcards, and examine Microsoft Entra ID as cloud-based identity with SSO, MFA, and hybrid identity.

Explore how Microsoft Entra ID enables cloud-based identity and single sign-on across Microsoft and third-party apps, with domain services, premium tiers, and hybrid deployment options.

Explore how Microsoft Entra ID uses security and Microsoft 365 groups, and administrative units to control access and delegate management, with dynamic and assigned access rights.

Explore how Azure regions and subscriptions enable low latency, data residency, and reliable disaster recovery, while Cost Management offers analysis, budgeting, recommendations, and data export.

Explore Azure resource tagging with name-value pairs to organize resources, enable cost allocation, and apply tags at both resource and resource group levels, noting that group tags are not inherited.

Master Azure policy initiatives to group and enforce multiple policy definitions, manage scoping across subscriptions, and monitor compliance, while also administering Microsoft Entra ID users and roles.

Master Microsoft Entra group management and B2B collaboration for secure external access. Implement dynamic group membership, guest users, and Azure RBAC with least privilege across subscriptions.

Discover how Azure RBAC uses security principals, role definitions, and scope to grant least-privilege, granular access through role assignments and inheritance, plus self-service password reset in Microsoft Entra ID.

Implement self-service password reset with directory branding and rollout, covering test accounts, authentication methods, and registration settings, while outlining Azure storage types such as blob, files, queue, and table.

Explore Azure storage replication strategies, from locally redundant storage to zone and geo redundant options, including read-access variants, balancing durability, availability, and cost for global data protection.

Understand how Azure storage endpoints form a unique namespace per storage account and how to access blob, table, queue, and file endpoints, plus domain mapping and access patterns.

Explore Azure blob storage access tiers including hot, cool, cold, and archive to optimize costs, and master lifecycle management, object replication, versioning, security, and authorization strategies.

Master Azure storage security with shared access signatures, their parameters, and AES-256 encryption at rest, plus Microsoft managed keys or customer managed keys via Azure Key Vault.

Explore Azure Files protocol support with SMB and NFS, Rest API access, and the distinction between standard and premium shares, including snapshots, soft delete, protocol isolation, and cloud tiering.

Configure Azure storage accounts with standard v2, lrs vs grs, hot and cool tiers, and security, then connect and manage data using Storage Explorer across multiple storage accounts.

Create and manage Azure storage accounts with Storage Explorer, enabling Data Lake Storage Gen2 via hierarchical namespace and organizing blobs, file shares, queues, and tables.

Explore Azure virtual machines configuration and availability, focusing on os, temporary, and data disks and persistence. Learn how availability sets, update domains, fault domains, and managed disks enable reliable deployments.

Explore Azure availability zones, zonal and zone-redundant services, and best practices for vertical and horizontal scaling with VM scale sets to boost cloud resilience and performance.