Learn JEA and (RBAC) for Windows Admin Center
Learn JEA and (RBAC) for Windows Admin Center
$99.95
Minimum price
$199.95
Suggested price
Learn JEA and (RBAC) for Windows Admin Center

This book is 98% complete

Last updated on 2019-11-14

About the Book

In this lab guide, you will learn about managing Windows Server 2019 by exploring two new Windows Server 2019 features: Just Enough Administration (JEA) and Windows Admin Center. Additionally, you will learn about Windows PowerShell Direct and other modern administrative techniques that go along with with JEA.

About the Authors

Dave Kawula
Dave Kawula

Dave is a Microsoft Most Valuable Professional (MVP) with over 20 years of experience in the IT industry. His background includes data communications networks within multi-server environments, and he has led architecture teams for virtualization, System Center, Exchange, Active Directory, and Internet gateways. Very active within the Microsoft technical and consulting teams, Dave has provided deep-dive technical knowledge and subject matter expertise on various System Center and operating system topics.

Dave is well-known in the community as an evangelist for Microsoft, 1E, and Veeam technologies. Locating Dave is easy as he speaks at several conferences and sessions each year, including TechEd, Ignite, MVP Days Community Roadshow, and VeeamOn. 

Recently Dave has been honored to take on the role of Conference Co-Chair of TechMentor with fellow MVP Sami Laiho.  The lineup of speakers and attendees that have been to this conference over the past 20 years is really amazing. Come down to Redmond or Orlando in 2018 and you can meet him in person.

As the founder and Managing Principal Consultant at TriCon Elite Consulting, Dave is a leading technology expert for both local customers and large international enterprises, providing optimal guidance and methodologies to achieve and maintain an efficient infrastructure.

BLOG: www.checkyourlogs.net

Twitter: @DaveKawula

John O'Neill Sr.
John O'Neill Sr.

John’s professional IT career began as a teenager, taking him on many wonderful adventures over the past 30 years. John’s IT path started with programming, but branched out quickly. Opportunities from the Help Desk to the Corner Office shape his IT journey. Specializing in Systems and Infrastructure technologies, John’s broad skillset includes Desktop and Server OS, Identity Management, Networking Services, Network Architecture, IP Telephony, and Security.

Passionate about giving back to the IT community, John develops relevant, timely content IT Pros take advantage of immediately. Part of the MVPDays team, he develops both online and in-print content. In addition, John authored material as a contributing editor for the Petri.co.il online community as well as senior contributor to Tom’s IT Pro, Redmond Magazine, Netwrix, and both Thomson-Reuters' Aspatore Books and Exec Blueprints publications.

Helping others succeed and advance in IT drives John to share knowledge. Speaking at conferences worldwide, developing technology training courses for Pluralsight’s online training library, and leading webinars are all regular investments by John in the current and next generation of IT professionals.

John is proud to be honored by industry organizations, leaders, and peers. John is a four-time recipient of Microsoft’s MVP Award. John received NEOSA’s CIO of the Year Award in 2012.

Cristal Kawula
Cristal Kawula

Cristal Kawula is the co-founder of MVPDays Community Roadshow and #MVPHour live Twitter Chat.   She is the President of TriCon Elite Consulting where she manages the day to day operations of the field consulting and sales teams.

Cristal is also only the 2nd Woman in the world to receive the prestigious Veeam Vanguard Community excellence award.  In July of 2017 she was awarded the designation of Microsoft MVP.  

Early in her career Cristal worked as a consultant with Microsoft authoring content for internal SMSGR and GTR teams.   This content was used to train internal support engineers and global escalation engineering teams.  

Cristal can be found speaking at Microsoft Ignite, MVPDays, and other local user groups.   She is extremely active in the community and has recently helped publish a book for other Women MVP’s called Voices from the Data Platform.  

 

BLOG: http://www.checkyourlogs.net

Twitter: @supercristal1

Table of Contents

Foreword by iii Acknowledgments iii From Dave iii About the Authors iv Dave Kawula – Microsoft MVP iv Cristal Kawula – Microsoft MVP v John O’Neill Sr – Re-Connect Microsoft MVP vi Contents vii Introduction 11 MVPDays Online 11 Sample Files 11 Additional Resources 12 Lab 1 – Introduction to JEA 14 1.1 Downloading an electronic copy of the Lab Guide 14 1.2 Logging into Labs.Azure.com 14 Lab Server Names 14 Lab Overview 17 1.3 Learning the Basics of JEA (Just Enough Administration) 19 Scenario 20 Exercise 1 – Try out Just Enough Administration 20 Exercise 1.1 – Review JEA_DEMO 27 Exercise 1.2 – Creating JEA_DEMO2 31 Lab 2 – Configuring JEA_Demo in a Domain 40 Scenario 40 Exercise 1 – Configure the required Domain Accounts 40 Exercise 2 – Creating Demo_Module and JEA_Demo Endpoint 44 Lab 3 – Configuring a JEA EndPoint for DNS 49 Scenario 49 Exercise 1 – Configure a JEA Endpoint to manage DNS 49 Lab 4 – Configuring a JEA EndPoint for DHCP 56 Scenario 56 Exercise 1 – Configure a JEA Endpoint to manage DHCP 56 Lab 5 – Using the JEA Helper Tool 2.0 63 Scenario 65 Exercise 1 – Download and run the JEA Helper Tool 2 65 Exercise 2 – Customize the JEA_DEMO Endpoint for Hyper-V Delegated Management 68 Exercise 3 – (Advanced) Create an Active Directory JEA Endpoint 78 Lab 6 – Using JEA with Windows Admin Center 79 Scenario 81 Exercise 1 – Create a NAT Rule for 443 to the Windows Admin Center Server 81 Exercise 2 – Deploying Windows Admin Center using PowerShell 85 Exercise 3 – Windows Admin Center RBAC (via JEA) 94 Exercise 4 – Review the Reader Role in the Windows Admin Center JEA Endpoint 102 Exercise 5 – Customize the Role Capability Files for Windows Admin Center using the JEA ToolKit 2.0 (Advanced) 115 Appendix A 117 Building a Hyper-V Nested VM with Multiple Public IP Addresses in Azure 117 Building a Windows Server 2016 Virtual Machine 117 Creating Multiple Internal and External IP’s for the Lab 128 Enable Hyper-V in the LAB Virtual Machine 135 Configuring NAT Networking with one Public IP Address 143 Configuring NAT Networking with Multiple Public IP Address 146 Adding an IP Address to the lab Host (VM) 146 Configuring Routing and Remote Access on the Azure Nested Virtual Machine 150 Configure NAT Rules in RRAS for the Lab 158 Disable Windows Firewall 165 Create a NAT Rule in the Azure NSG for the Lab 167 Testing the NAT Rules in the lab 173 Using PowerShell to automate RRAS NAT Rule Configurations 178 Appendix B 181 Using BigDemo to Build your Lab 181 Lab Server Names 181 Building the Lab with BigDemo_DefenderATP_Server2019.PS1 184 Appendix C 188 Configuring Windows Admin Center 188 Install Google Chrome and Mozilla FireFox 189 Configure Windows Admin Center 190 Configure Azure Integration 192 Configure Azure Backup 197 Verifying Backups locally with the Backup Microsoft Azure Backup Agent 203 Configuring Windows Azure Update Management 205 Configure Azure Site Recovery 212 Upgrade to Security Center Standard in Azure 218 Appendix D 220 Defender Advanced Threat Protection ATP 220 Onboarding a Server with Windows Defender ATP 221 Reviewing an Incident with Windows Defender Advanced Threat Protection 223 Appendix E 226 Join us at MVPDays and meet great MVP’s like this in person 226 Live Presentations 226 Video Training 226 Live Instructor-led Classes 227 Consulting Services 227

Other books by these authors

Authors have earned$9,386,802writing, publishing and selling on Leanpub,
earning 80% royalties while saving up to 25 million pounds of CO2 and up to 46,000 trees.

Learn more about writing on Leanpub

The Leanpub 45-day 100% Happiness Guarantee

Within 45 days of purchase you can get a 100% refund on any Leanpub purchase, in two clicks.

See full terms

Free Updates. DRM Free.

If you buy a Leanpub book, you get free updates for as long as the author updates the book! Many authors use Leanpub to publish their books in-progress, while they are writing them. All readers get free updates, regardless of when they bought the book or how much they paid (including free).

Most Leanpub books are available in PDF (for computers), EPUB (for phones and tablets) and MOBI (for Kindle). The formats that a book includes are shown at the top right corner of this page.

Finally, Leanpub books don't have any DRM copy-protection nonsense, so you can easily read them on any supported device.

Learn more about Leanpub's ebook formats and where to read them

Write and Publish on Leanpub

You can use Leanpub to easily write, publish and sell in-progress and completed ebooks and online courses! Leanpub is a powerful platform for serious authors, combining a simple, elegant writing and publishing workflow with a store focused on selling in-progress ebooks. Leanpub is a magical typewriter for authors: just write in plain text, and to publish your ebook, just click a button. It really is that easy.

Learn more about writing on Leanpub