microsoftlearning/az-800-administering-windows-server-hybrid-core-infrastructure

AZ-800

AZ-800T00: Administering Windows Server Hybrid Core Infrastructure

• Download Latest Student Handbook and AllFiles Content
• Are you a MCT? - Have a look at our GitHub User Guide for MCTs
• Need to manually build the lab instructions? - Instructions are available in the MicrosoftLearning/Docker-Build repository
• To preview this course in a self-paced format, see our interactive lab simulations. You may find slight differences between the interactive simulations and the hosted labs, but the core concepts and ideas being demonstrated are the same.

What are we doing?

• To support this course, we will need to make frequent updates to the course content to keep it current with the Azure services used in the course. We are publishing the lab instructions and lab files on GitHub to allow for open contributions between the course authors and MCTs to keep the content current with changes in the Azure platform.

• We hope that this brings a sense of collaboration to the labs like we've never had before - when Azure changes and you find it first during a live delivery, go ahead and make an enhancement right in the lab source. Help your fellow MCTs.

How should I use these files relative to the released MOC files?

• The instructor handbook and PowerPoints are still going to be your primary source for teaching the course content.

• These files on GitHub are designed to be used in conjunction with the student handbook, but are in GitHub as a central repository so MCTs and course authors can have a shared source for the latest lab files.

• It will be recommended that for every delivery, trainers check GitHub for any changes that may have been made to support the latest Azure services, and get the latest files for their delivery.

What about changes to the student handbook?

• We will review the student handbook on a quarterly basis and update through the normal MOC release channels as needed.

How do I contribute?

• Any MCT can submit a pull request to the code or content in the GitHub repro, Microsoft and the course author will triage and include content and lab code changes as needed.

• You can submit bugs, changes, improvement and ideas. Find a new Azure feature before we have? Submit a new demo!

Notes

Classroom Materials

It is strongly recommended that MCTs and Partners access these materials and in turn, provide them separately to students. Pointing students directly to GitHub to access Lab steps as part of an ongoing class will require them to access yet another UI as part of the course, contributing to a confusing experience for the student. An explanation to the student regarding why they are receiving separate Lab instructions can highlight the nature of an always-changing cloud-based interface and platform. Microsoft Learning support for accessing files on GitHub and support for navigation of the GitHub site is limited to MCTs teaching this course only.

az-800-administering-windows-server-hybrid-core-infrastructure's Issues

An error occurred when trying to retrieve the user session. Please login manually by navigating to the account page in the settings page

Module: 04

Lab/Demo: 02

Task: 01

Step: 17

Description of issue

Errata: In Exercise 2, Task 1, Step 17, if you receive the error Sorry, but we're having trouble signing you in, browse to: https://SEA-ADM1.contoso.com/settings/account, in the User/Account section select Sign in and then Accept. Continue to Task 2.

The errata does not work.

Lab 4 error deploying VPN Gateway

Module/Lab: 04

Exercise: 02

Task: 02

Step: 03

Description of issue
Receive error when I click the Create button to deploy an Azure Virtual Network Gateway. The error states that Basic IP configuration for VPN Virtual Network Gateway is not supported.

Repro steps:
Just follow the exactl lab steps

Relevant screenshots

Lab 1 - Task title font size inconsistency

Module: 00

Lab/Demo: 01

Task: Global

Step: Task Title Font size

Description of issue

Repro steps:

1.Lab 1 instructions have inconsistency in the font size of the task titles.
Lab 1-high level instructions-issue 1.docx

AZ-800 Lab 06 Exercise 3, Task 1

Module/Lab: 06

Exercise: 03

Task: 01

Step: 00

Due to Cloud Slice Restrictions, when the ARM Template is deployed, it fails to depoly due to VM naming errors and it is impossible to change it to anything that would pass.

I have also found, that even on my own subscription, Virtual Machine Templates generated from a VM that has already been deployed (export template) fails, with an error related to the OS Disk. Others have reported this latter error. In the past, this has never been a problem.

Repro steps:

Relevant screenshots

where can I find the base images for these labs?

I have looked in MCT LDC and also looked for MSlabs scripts but see none.
where do I get the files and instructions to build the correct environment for the lab steps?

Thanks

Lab 04 Ex 3: `Deploy-WACAzVM.ps1` fails "no supported WSMan client library was found"

• Module 4: Facilitating hybrid management
• Lab: Using Windows Admin Center in hybrid scenarios
• Lab answer key: Using Windows Admin Center in hybrid scenarios
• Exercise 3: Deploying Windows Admin Center gateway in Azure
• Task 1: Install Windows Admin Center gateway in Azure

When running the Deploy-WACAzVM.ps1 script in Cloud Shell per the above-referenced task, the below error message is encountered, and the WAC install script is not run on the VM.

Invoke-Command: This parameter set requires WSMan, and no supported WSMan client library was found. WSMan is either not installed or unavailable for this system.
Write-Error: Ending installation of WAC on virtual machine az800l04-vmwac.

The error message appears to originate from the below script lines:

AZ-800-Administering-Windows-Server-Hybrid-Core-Infrastructure/Allfiles/Labfiles/Lab04/Deploy-WACAzVM.ps1

Lines 373 to 381 in 7640a53

	# Convert the script literal to ScriptBlock, then invoke it.
	$msiScriptBlock = [ScriptBlock]::Create($msiScriptLiteral)
	$taskHasStarted = Invoke-AzVMCommand -ResourceGroupName $ResourceGroupName -Name $Name -ScriptBlock $msiScriptBlock -Credential $Credential
	# If the scheduled task failed to start, then end the installation process.
	if (-not $taskHasStarted) {
	Write-Error "Ending installation of WAC on virtual machine $Name."
	return
	}

The Invoke-Command error line can also be replicated by running a simpler Invoke-AzVMCommand command (example below), with the az800l04-vmwac VM already running.

$cred = Get-Credential # Student
Invoke-AzVMCommand -ResourceGroupName 'AZ800-L0401-RG' -Name 'az800l04-vmwac' -ScriptBlock { Get-Process } -Credential $cred

Per PSWSMan install instructions, a sudo pwsh -Command 'Install-WSMan' command is required after installing the module with Install-Module. Testing this command in Cloud Shell is not possible as sudo privileges are not available. If this command is required to make WSMan available, that raises the question of why no errors were previously observed in its absence.

https://www.powershellgallery.com/packages/PSWSMan/2.3.1
https://github.com/jborean93/omi#installing

No specific workaround has been determined at this time. This issue prevents completion of Lab 04.

Repro steps:

1. Perform prerequisite activities for Ex 3 (Exercise 1?)
2. Follow steps for the above-referenced Ex 3 Task 1.
3. Run additional Invoke-AzVMCommand if desired.

Instructions permalink:
https://github.com/MicrosoftLearning/AZ-800-Administering-Windows-Server-Hybrid-Core-Infrastructure/blob/7640a5332295a1b560af626d5c31dc9d32b8b12f/Instructions/Labs/LAB_AK_04_Using_Windows_Admin_Center_in_hybrid_scenarios.md

Relevant screenshots

AZ-800 Lab 6, Exercise 1

Module/Lab: 06

Exercise: 01

Task: 01

Step: 02

Description of issue
Cannot activate Defender for Cloud by clicking "Upgrade"
Repro steps:

2. From the Microsoft Defender for Cloud | Getting started page, enable enhanced security of Microsoft Defender for Cloud and enable automatic Microsoft Defender for Cloud agent installation

Reason: Microsoft seem to have changed all trials (this would be a 30 day trial) to demand billing details before allowing the trial - this means in a Cloud Slice lab, that no student (or instructor) is going to be able to do that, or want to do that.

This also spoils later parts of the lab

Relevant screenshots

Lab 05, Exercise 2, Task 2, Step 4 - Typo

Case-sensitivity typo.

Replace

docker search Microsoft

With

docker search microsoft

AZ-800 Lab 10 issue

Module/Lab: 10

Exercise: 03

Task: 01

Step: 04

Description of issue
Lab steps instruct me to run a powershell script Install-FileSyncServerCore.ps1. The script fails during authentication phase with error shown in attachment. Me and my students are unable to proceed with the lab steps. Raised a ticket with Lab host which confirmed the issue. The issue seems to be with specific version of Powershell modules as manually installing the executable works.

Please note that I have delivered this course multiple times and this is the first time I faced this specific issue, which further corroborates my theory about specific PS or PS Module version compatibility.

Repro steps:

Just follow the lab steps

Relevant screenshots

Lab 8: Typo in VNET name?

Module: 00

Lab/Demo: 08

Exercise: 01

Task: 02

Step: 03/05

Description of issue

If we try and use 'az800l08-vnet1' as specified in Step 3, we get an error in Step 5 'a virtual network cannot be peered with itself'. This must be a typo? (if we change step 3 to be 'az800l08-vnet0', it works as expected.

AZ-800 Lab1 Exercise 5: Task 1

Module/Lab: 01

Exercise: 05

Task: 01

Step: 01

Cannot activate 30 day Entra P1 Trial

Repro steps:

1.When you try to activate Entra ID P2 30 License Trial, it asks for a billing address; as this is a cloud slice lab, it is impossible to do this step. You can skipp assigning a P2 License (as the trial is not activated) and carry on setting up POassword Writeback in Entra ID Connect, but anything that relies on demonstraing a password reset in the cloud will not writeback to AD as there is no P2 license to assign!.

Microsoft have obviously changed the Trial signup from simply activating for 30 days into as full blown, "give us your details"
1.
1.

Relevant screenshots

Lab 9: Two issues, likely typo + recommended addition

Lab/Demo: 09

Description of issue

Exercise 1, Task 2, Step 10: says 'On the sea-svr1.contoso.com page' but in context of the steps so far it seems like this must be a typo and should actually be 'On the sea-svr3.contoso.com page'.

Exercise 2, Task 2, Step 7: This may be an idiosyncrasy of the VM speeds at the time I tested, but it might make sense to elaborate slightly on this step to indicate 'It may take some time before the Tasks/New iSCSI Virtual disk option becomes selectable'. It may be the first time the 'refresh' is run in this lab, it takes a lot longer then refreshes take later in the labs. Later refreshes completed promptly.

All instructions should mention Entra or Entra ID instead of Azure AD

Module: 00

Lab/Demo: 00

Task: 00

Step: 00

Description of issue
Naming was changed, but not updated in labs.

Repro steps:

1. Search the lab content for 'Entra', no results.

Docker search microsoft returns 500 error

Module: 05

Lab/Demo: 02

Task: 02

Step: 04

Description of issue

the command "docker search microsoft" returns a 500 error.

Repro steps:

Complete lab up to this step to repro issue

If you do "docker search nanoserver" you get some results but I don't think that is the intention of the step.

Has there been a back end change made to the microsoft repository on docker site?

Lab 3: Three minor issues

Lab/Demo: 03

Lab 3, Exercise 1, Task 2, Step 1: In most all cases, immediately after the install of the .msi, we rec'v error 'ERR_Connection_Refused' and waiting does not rectify this. There may be a more technical solution but if one reboots SEA-ADM1, it always corrects for this issue. May wish to include this in instructions for any all labs (besides this one) that also have student installing the latest msi.

Lab 3, Exercise 1, Task 2, Step 7: instructions reference sea-svr1.contoso.com but per the manifest this VM is not supposed to be in this lab. Given context of later instructs, this is probably meant to be sea-dc1.contoso.com instead.

Lab 3, Exercise 1, Task 4, Step 8: Instruction says 'Do not ask again me again for connections to this computer', but phrasing is actually 'Automatically connect with the certificate presented by this machine'

AZ 800

Remote Domain Controller Installation/Promotion Fails

Module: 01

Exercise: 01

Task: 02

Step: 22

When executing the command in Task 2 Step 22, the remote Install-ADDSDomainController command fails with an error. Removing the "-Force:$true" parameter allows the command to execute successfully.

Repro steps:

1. Follow given instructions through Task 2 Step 22

Lab 06, Exercise 2, Task 2 - warning about pasting code

Using the type text feature in the ALH will probably¹ mess up the JSON code in the web browser. There needs to be the usual warning here.

AZ-104 uses the following phrasing.

Note: If you are using a tool that pastes the code in line by line intellisense may add extra brackets causing validation errors. You may want to paste the code into notepad first and then paste it into line 20.

Footnotes

1. Skillable will certainly mess up the code. I suspect other ALH's will do the same. :-) ↩

en-dashes

Several of the PowerShell code blocks have en-dashes instead of hyphens, which means that copying and pasting into the lab machines is not working.

In the markdown viewer here in the web browser you can see the difference. The correct hyphens are coloured red by the `powershell syntax-colouring but the en-dashes are black.

One of the authors needs to open the markdown and do a search and replace.

For example, lab 09, exercise 1, task 1, step 5.

New-PSDrive –Name 'X' –PSProvider FileSystem –Root '\\SEA-ADM1\Labfiles'

Lab 5 Provider offline as of May 2023

Module: 05

Lab/Demo: 2

Task: 1

Description of issue
The DockerMsftProvider is: now OFFLINE as per their github page. The exercise needs to be updated to use another provider or method.

https://github.com/OneGet/MicrosoftDockerProvider

step missing to add dhcp extension to WAC

Module: 07

Lab/Demo: 001

Task: 01

Step: 14

Description of issue
Refresh the Microsoft Edge page back on the sea-svr1.contoso.com page, in the Tools list, select DHCP, and then, in the details pane, select Install to install the DHCP PowerShell tools.

Note: If the DHCP entry is not available in the Tools list for sea-svr1.contoso.com, refresh the Microsoft Edge page and try again.

DHCP was not installed by default in my 2110 WAC deployment and I had to manually add the extension.

Lab 7: Typo

Lab/Demo: 07

Exercise 1

Task: 05

Step: 07

Description of issue

The lease is obtained from SEA-SVR1, not SEA-SVR2. Given the previous DHCP installation steps use SEA-SVR1 it is presumed this is a typo and should be corrected to be SEA-SVR1. (but referenced IP is correct for SVR1)

Storage Migration Service inventory fails

Module: 05: Implementing and configuring virtualization in Windows Server

Task: 04: Manage Virtual Machines using Windows Admin Center

Step: 16 On the New Virtual Hard Disk pane, in the Size (GB) text box, type 5, leave other settings with their default values, and then select Create.

Description of issue
Can't save the setting after creating the virtual disk. Appears to be a known error linked below. Work around suggests updating Storage Migration Service Extension to 1.113.0 or newer. The Lab currently has 2.15.0 installed by default.

Error is occurring on multiple Lab Instances of this profile.

https://docs.microsoft.com/en-us/windows-server/storage/storage-migration-service/known-issues#storage-migration-service-inventory-fails-with-a-parameter-cannot-be-found-that-matches-parameter-name-includedfsn

Lab 08, Exercise 3, Task 2 - Typo

In steps 1 and 2, replace:

Get-AzResourceGroup -Name 'az800l08*'

With

Get-AzResourceGroup -Name 'AZ800-L08*'

Heading in Lab 8 don't show in menu bar online

Module/Lab: 08

Exercise: 00

Task: 00

Step: 00

Description of issue

Only Exercise 3 shows in the online version of the lab.

Repro steps:

1. Go to https://microsoftlearning.github.io/AZ-800-Administering-Windows-Server-Hybrid-Core-Infrastructure/Instructions/Labs/LAB_08_Implementing_hybrid_networking_infrastructure.html

Relevant screenshots

Lab 6,

Module: 06

Lab: 06

Exercise 5

Task: 3

Step: 03

Description of issue
Where it says "Open Azure Security Center link" it should say "Microsoft Defender for Cloud"

Lab 4: Deploy-WACAzVM.ps1 fails w/errors

Module: 00

Lab/Demo: 04

Exercise 3

Task: 01

Step: 08

Description of issue

Deploy-WACAzVM.ps1 script will error at this point, preventing fully successful completion of the balance of the Lab:

Repro steps:

1. Follow lab to that point, as-written
2. Note that in Lab 4, Exercise 2, Task 2, Step 2: Instructions reference sea-svr2.contoso.com however given context, and the VMs specified in the course manifest, this is likely a typo and the VM ought to be sea-adm1.contoso.com

Interestingly, the VM itself, and a variety of the resources are in fact, created successfully, however certain items (such as the DNS name) do not get populated. You can log in to the VM using RDP and the Student account, but due to the errors seen in script it is uncertain what else may have failed.

Also, I realize this is a different course issue BUT - this is essentially the identical behavior seen in WS-012, in this still open/unfixed issue that appeared relatively recently in identical .ps1, used almost identically as it is in AZ-800: https://github.com/MicrosoftLearning/WS-012T00-Windows-Server-2019-Hybrid-and-Azure-IaaS/issues/36

Because a suspiciously similar issue was seen with this very same Deploy-WACAzVM.ps1 script in yet one more past WS-012 issue (but was fixed ~April 7th, 2021) I feel it might be productive to take a look at some of the various bug reports down that chain. Apologies if these end up being red herrings - but the behaviors (relating to configuration of WSRemoting + forcing ignore of self-signed certs - are just so very similar to the behavior in the here and now for this AZ-800 error behavior.

See also: MicrosoftDocs/azure-docs#68262

I have tried using various previous versions of the https://www.powershellgallery.com/packages/PSWSMan/2.3.0 module, and various other troubleshooting on this new AZ-800 issue but have as-yet been unsuccessful in understanding why we fail here.

Lab1 localgroup administrators not found. Unable to add Ty to the group

Module: 01

Lab/Demo: 01

Task: 03

Step: 09

Description of issue
localgroup administrators not found* error when trying to add Ty to Administrators.

Get-localgroup doesnt not show this localgroup Administrators

Unable to create new local group Administrators either.

Repro steps:

Network Watcher Deprecation? Internal Server Error

Module: 08

Lab/Demo: 01

Task: 03 and 04

Description of issue
Keeps getting Internal Server Error when trying the Connection Trouble shoot