Book Image

Administering Windows Server Hybrid Core Infrastructure AZ-800 Exam Guide

By : Steve Miles
Book Image

Administering Windows Server Hybrid Core Infrastructure AZ-800 Exam Guide

By: Steve Miles

Overview of this book

Written by an Azure MVP and Microsoft Certified Trainer with 20 years of experience in data center infrastructure, this AZ-800 study guide is an essential preparation tool for administrators who want to take the exam and acquire key skills that will help them thrive in their careers. This book will guide you through all the ways Windows Server can be used to manage hybrid solutions on-premises and in the cloud, starting with deploying and managing Active Directory Domain Services (AD DS) in on-premises and cloud environments. You’ll then dive into managing virtual machines and containers and progress to implementing and managing an on-premises and hybrid networking infrastructure. The later parts of the book focus on managing storage and file services, concluding with a detailed overview of all the knowledge needed to pass the AZ-800 exam with practical examples throughout the chapters. In the final chapter, you’ll be able to test your understanding of the topics covered with the help of practice exams to make sure that you’re completely prepared for the contents and structure of the exam. By the end of the book, you’ll have gained the knowledge, both practical and conceptual, that's required to administer Windows Server hybrid core infrastructure confidently.
Table of Contents (22 chapters)
1
Part 1: Hybrid Identity
6
Part 2: Hybrid Networking
9
Part 3: Hybrid Storage
12
Part 4: Hybrid Compute
18
Part 5: Exam Prep
19
Chapter 14: Exam Preparation Practice Tests

GPOs in Azure AD DS

Azure AD DS manages Group Policy in much the same way as AD to manage settings for the user and computer objects, but with restrictions on what settings can be accessed and configured in the managed domain.

When Azure AD DS is implemented in an Azure AD tenant, two built-in GPOs are created for managing the configuration of users and computers. These are as follows:

  • AADDC Users GPO
  • AADDC Computers GPO

These are shown in the following screenshot:

Figure 3.9 – Default Azure AD DS GPOs

You can create custom GPOs if you need additional settings not available in these GPOs. These can only be linked to OUs, and you can create additional custom OUs as required to meet your needs. For Group Policy administration privileges in the managed domain, you need to be a member of the AAD DC administrators group.

In a hybrid identity environment where both AD DS and Azure AD DS are utilized, group policies from the AD DS DCs...