
This guide will provide you with a reference to key PowerShell commands necessary for Azure administrators as well as required to pass the Azure Administrator and Expert certification exams (AZ-103 (AZ-104), AZ-300 (AZ-303), and AZ-301 (AZ-304) from Microsoft.
This guide is made up of several PowerShell commands which have been referenced from the Microsoft documentation and other sources. Before running any of these commands in production, please be sure to test them out in an Azure test account. Some commands are destructive in nature (e.g. removing resource groups, tags, etc.) and you need to make sure you fully understand the commands that you execute.
The guide is divided up into the following sections:
· Downloading PowerShell and Installing Azure ARM Modules for PowerShell
· Accounts and Subscriptions
· Resource Groups
· Governance
· Storage
· Virtual Machines
· Networking
· Azure Active Directory
We hope you enjoy this guide and keep it handy by your desk for all your day to day Azure Administrator needs.
Thank you,
Skylines Academy Team
Learn the Azure account hierarchy from enterprise enrollment to departments, accounts, and subscriptions; navigate enterprise and accounts portals, set up resource groups with RBAC, and understand management groups.
Learn to create an Azure virtual network in the portal, set the address space 10.0.0.0/23, and build subnets such as 10.0.0.0/24 and 10.0.1.0/24 with a default subnet.
PowerShell script for this demo:
#Resource Group and Location
$rg = "SL-Network"
$location = "EastUS"
#VNET Name and Address Space
$VNETName = "SL-VNET-PShell"
$VNETAddressSpace = "10.0.0.0/22"
#Subnet Configurations
$websubnet = New-AzVirtualNetworkSubnetConfig -Name "SL-Web" -AddressPrefix "10.0.0.0/24"
$appsubnet = New-AzVirtualNetworkSubnetConfig -Name "SL-App" -AddressPrefix "10.0.1.0/24"
$dbsubnet = New-AzVirtualNetworkSubnetConfig -Name "SL-Data" -AddressPrefix "10.0.2.0/24"
#Create Resource Group
New-AzResourceGroup -Name $rg -Location $location
#Create VNET and Subnets
$virtualNetwork = New-AzVirtualNetwork -Name $VNETName -ResourceGroupName $rg `
-Location $location -AddressPrefix $VNETAddressSpace -Subnet $websubnet,$appsubnet
#Add Additional Subnet
$subnetConfig = Add-AzVirtualNetworkSubnetConfig `
-Name "LastSubnet" `
-AddressPrefix "10.0.4.0/24" `
-VirtualNetwork $virtualNetwork
#Write the changes to the VNET
$virtualNetwork | Set-AzVirtualNetwork
Learn how to create and configure VNet peering between two virtual networks in the Azure portal, including resource group setup, IP ranges, and bidirectional connectivity settings.
Explore virtual machines in Azure, covering VM types from A and D series to specialty instances, compute units, and premium storage. Learn OS support, regional availability, and username restrictions.
PowerShell script for this demo:
#Create Resource Group
New-AzResourceGroup -Name SL-PowershellVM -Location EastUS
#Create Virtual Machine
New-AzVm `
-ResourceGroupName "SL-PowershellVM" `
-Name "vmpshell01" `
-Location "East US" `
-VirtualNetworkName "pshellVnet" `
-SubnetName "pshellSubnet" `
-SecurityGroupName "pshellNetworkSecurityGroup" `
-PublicIpAddressName "pshellPublicIpAddress" `
-OpenPorts 80,3389
Discover Azure marketplace images with publisher, offer, and skew, and learn how to create custom images; Windows uses Sysprep, Linux uses deprovision plus the user, then generalize and create image.
Configure Azure security center to manage a virtual machine, set up a log analytics workspace, install the monitoring agent, and connect data for endpoint protection and vulnerability awareness.
PowerShell script for this demo:
#Create Resource Group
New-AzResourceGroup -Name SL-PowershellVM -Location EastUS
#Create Virtual Machine
New-AzVm `
-ResourceGroupName "SL-PowershellVM" `
-Name "vmpshell01" `
-Location "East US" `
-VirtualNetworkName "pshellVnet" `
-SubnetName "pshellSubnet" `
-SecurityGroupName "pshellNetworkSecurityGroup" `
-PublicIpAddressName "pshellPublicIpAddress" `
-OpenPorts 80,3389
Az Copy Reference:
azcopy login --tenant-id "<YOUR TENANT ID>"
azcopy make "https://<YOUR STORAGE ACCOUNT NAME>.blob.core.windows.net/testcontainer"
azcopy copy "C:\Images\*" "https://<YOUR STORAGE ACCOUNT NAME>.core.windows.net/testcontainer/"
Append the --recursive flag to upload files in all sub-directories.
COPY CONTAINER FROM ONE STORAGE ACCOUNT TO ANOTHER
azcopy copy "https://<YOUR STORAGE ACCOUNT NAME>.blob.core.windows.net/?<SAS-token>" "https://<YOUR TARGET STORAGE ACCOUNT NAME>.blob.core.windows.net/" --recursive"
Learn to create and manage shared access signatures in the Azure portal, assign blob permissions, set start and expiry times, restrict by IP addresses, and sign with key1 or key2.
Explore how to create an Azure storage account and file share, configure replication and tier settings, and connect to the file share using a PowerShell drive.
Understand how Azure Resource Manager constructs work, including resources, resource groups, and resource providers. See how Microsoft Compute serves virtual machines and how rest-based endpoints support ARM templates.
Script for this demo:
Configuration SkylinesIIS
{
Node 'localhost'
{
#Install IIS - Enabled via Windows feature
WindowsFeature IIS
{
Ensure = "Present"
Name = "Web-Server"
}
#Install ASP.NET 4.5
WindowsFeature ASP
{
Ensure = "Present"
Name = "Web-Asp-Net45"
}
}
}
Explore how Azure AD centralizes identity across on-premises and cloud apps, enabling single sign-on, multi-factor authentication, and self-service password reset.
Examine design decisions for hybrid identity and cloud authentication in Azure AD, comparing password hash sync with seamless SSO, pass-through authentication, and federated options.
The AZ-303 exam is now available for students to take. This course has been updated and upgraded from the former AZ-300 course to meet the expectations fo the AZ-303 Skills Measured by Microsoft.
Targeted at experienced IT experts, the exam covers a variety of subjects and services, all of which are covered in Skylines Academy’s latest course. In order to understand core architect technologies, Skylines Academy will lead you through a series of sections, modules, and demos to prepare you for taking, and ultimately passing, the Microsoft Azure AZ-300 or 303 exams.
This course includes both AZ-300 and 303 content.
The AZ-303 course curriculum is as follows:
Understand Azure Active Directory (AD) and Subscriptions
Implement Virtual Networking
Implement Virtual Machines for Windows and Linux
Create and Manage Storage Accounts
Deploy Automation and Configure Resources
Implement Azure AD
Implement and Manage Hybrid Identities
Configure Cloud Infrastructure Monitoring
Implement and Manage Governance Solutions
Implement Load Balancing and Network Security
Manage Security for Applications
Implement an Application Infrastructure
Deploy Container-based Applications
Implement and Manage Data Platforms
The AZ-300 course curriculum is as follows:
Azure Fundamentals
Analyze Resource Utilization and Consumption
Create and Configure Storage Accounts
Create and Configure Virtual Machines
Azure Virtual Networking
Managing and Securing Identities
Governance and RBAC Controls
Create and Deploy Apps
Serverless Computing
Design and Develop Apps that Run in Containers
Server Migrations
Automation
Lectures will educate you on the fundamental terms and principles of the Azure platform and demos will enable you with a hands-on experience using scenarios to empower you in the real world.
Welcome to the Skylines Academy AZ-303 & 300 courses! We’re happy you’re joining us!