YUNOVA · Windows Administration & Server
Module 12: Security and hybrid
Windows Server hardening security baseline
Key points
- A security baseline is a recommended set of security settings.
- Microsoft publishes baselines that can be applied with Group Policy.
- Turn off unused services and apply updates regularly.
Active Directory Certificate Services basics
Key points
- AD CS lets an organisation run its own certificate authority.
- Certificates are used for encryption, signing and authentication.
- Certificate templates control who can request which certificates.
Windows Admin Center
Key points
- Windows Admin Center is a browser-based tool for managing servers.
- It brings tasks like updates, storage and Hyper-V into one console.
- It is installed on a gateway machine and connects to the servers.
Azure AD Connect hybrid identity
Key points
- Azure AD Connect syncs on-premises Active Directory users to Microsoft Entra ID.
- Sign-in options include password hash sync, pass-through authentication and federation.
- Hybrid identity gives users one identity for local and cloud resources.