AI-Powered IT Administrator — Course Syllabus

🖥️ MODULE 1 — WINDOWS IT ADMINISTRATION
SESSION 1: IT INFRASTRUCTURE FUNDAMENTALS
Topics:
  • IT infrastructure core components (Hardware, OS, Networking)
  • Desktop vs Server operating systems
  • Workgroup vs Domain models
  • Network essentials: IP addressing, DNS, and DHCP
  • User accounts & computer objects
  • Local, Cloud, and Hybrid administration overview
PRACTICAL LAB:
  • Lab 1: Explore Windows Administration Tools (MMC, System Info)
  • Lab 2: Check System Configurations & Specs
  • Lab 3: Extract IP and MAC details via CMD & PowerShell
  • Lab 4: Configure static IP settings and test connectivity
SESSION 2: WINDOWS INSTALLATION & CONFIGURATION
Topics:
  • Clean installation vs in-place upgrades
  • Windows editions and licensing models
  • Disk partitioning: MBR vs GPT, BIOS vs UEFI
  • Device driver management and updates
  • Windows Update strategies and servicing channels
  • Local user accounts and host settings
PRACTICAL LAB:
  • Lab 1: Install Windows in a Virtual Machine (Hyper-V / VirtualBox)
  • Lab 2: Rename system hostnames to match IT standards
  • Lab 3: Create local administrator & standard accounts
  • Lab 4: Configure Windows Update deferral policies
  • Lab 5: Backup, restore, and update device drivers
SESSION 3: USER & SYSTEM MANAGEMENT
Topics:
  • Local accounts, SIDs, and built-in groups
  • Group permissions and access control lists (ACLs)
  • NTFS vs Share permissions
  • Managing Windows background services and dependencies
  • Startup applications and performance optimization
  • Automating tasks with Task Scheduler
PRACTICAL LAB:
  • Lab 1: Provision local users and assign to custom groups
  • Lab 2: Configure advanced folder permissions & test Effective Access
  • Lab 3: Manage services (Start, Stop, Recovery actions)
  • Lab 4: Create automated maintenance tasks in Task Scheduler
SESSION 4: WINDOWS TROUBLESHOOTING
Topics:
  • Performance analysis (CPU, Memory, Disk, Network bottlenecks)
  • Disk errors and file system health checks
  • Application crash diagnostics & Safe Mode
  • Network connectivity isolation tools
  • Windows Event Log inspection (Application, Security, System)
PRACTICAL LAB:
  • Lab 1: Diagnose high CPU and memory resource hogs
  • Lab 2: Troubleshoot app errors using Event Viewer filters
  • Lab 3: Fix network outages using ping, tracert, and nslookup
SESSION 5: DISK & STORAGE ADMINISTRATION
Topics:
  • Disk Management MMC and Diskpart CLI
  • Basic vs Dynamic Disks (Volume types)
  • File Systems: FAT32 vs NTFS vs ReFS
  • BitLocker Encryption and Key Management
  • Windows Recovery Environment (WinRE) tools
PRACTICAL LAB:
  • Lab 1: Partition and format new secondary drives
  • Lab 2: Shrink and extend volume sizes on the fly
  • Lab 3: Repair system files using `sfc /scannow` and `DISM`
🌐 MODULE 2 — WINDOWS SERVER 2022 & ACTIVE DIRECTORY
SESSION 6: WINDOWS SERVER 2022 INSTALLATION
Topics:
  • Windows Server 2022 editions (Standard vs Datacenter)
  • Desktop Experience (GUI) vs Server Core
  • Server Manager and roles overview
  • Network baseline setup (Static IP, Hostname)
PRACTICAL LAB:
  • Lab 1: Deploy Windows Server 2022 in a VM and complete initial configuration
SESSION 7: ACTIVE DIRECTORY DOMAIN SERVICES (AD DS)
Topics:
  • AD architecture: Forests, Domains, OUs, and Trees
  • Domain Controllers (DCs) and Global Catalog
  • Promoting a Windows Server 2022 Domain Controller
  • Creating Users, Groups, and Organizational Units (OUs)
  • Delegation of Administrative Control
PRACTICAL LAB:
  • Lab 1: Install AD DS and promote Server 2022 to Root Domain Controller
  • Lab 2: Build departmental OU structure and create domain users/groups
  • Lab 3: Delegate OU permissions to junior admins
SESSION 8: DNS ADMINISTRATION ON SERVER 2022
Topics:
  • DNS resolution flow and root hints
  • Forward vs Reverse Lookup Zones
  • Resource Records: A, CNAME, MX, PTR, SRV
  • Active Directory-Integrated Zones & Forwarders
PRACTICAL LAB:
  • Lab 1: Create DNS records and configure DNS forwarders
  • Lab 2: Troubleshoot DNS issues using `nslookup`
SESSION 9: DHCP ADMINISTRATION ON SERVER 2022
Topics:
  • DHCP Process (DORA) and AD authorization
  • Scopes, IP Ranges, Exclusions, and Lease Durations
  • DHCP Options (Gateway, DNS, Domain Name)
  • MAC Address Reservations
PRACTICAL LAB:
  • Lab 1: Build a DHCP scope and configure static MAC IP reservations
SESSION 10: DOMAIN JOIN INTEGRATION
Topics:
  • Domain join prerequisites and network checks
  • Kerberos authentication basics
  • Troubleshooting client domain trust issues
PRACTICAL LAB:
  • Lab 1: Complete Build: Server 2022 → AD DS → DNS → DHCP → Windows Client Domain Join
🏆 MODULE PROJECT: BUILD YOUR FIRST WINDOWS SERVER 2022 DOMAIN
🛠️ MODULE 3 — WINDOWS SERVER 2022 ADMINISTRATION
SESSION 11: GROUP POLICY MANAGEMENT
Topics:
  • GPO structure and processing order (LSDOU)
  • Computer vs User Configurations
  • Security policies: Passwords, USB Blocking, Drive Mapping
  • Troubleshooting GPOs (`gpupdate /force`, `gpresult`)
PRACTICAL LAB:
  • Lab 1: Create and link GPOs for domain password rules and USB restrictions
  • Lab 2: Generate GPResult reports on client machines
SESSION 12: FILE SERVER & PERMISSIONS
Topics:
  • File Server Role on Server 2022
  • NTFS vs Share permissions calculation
  • Departmental folder security (HR, Finance, IT)
  • File Server Resource Manager (FSRM) quotas and screens
PRACTICAL LAB:
  • Lab 1: Build department network shares with explicit security permissions
  • Lab 2: Set storage quotas and block `.exe` uploads using FSRM
SESSION 13: SERVER MONITORING & AUDITING
Topics:
  • Performance Monitor (PerfMon) and Data Collectors
  • Event Logs: Security Event IDs (Failed logins, user changes)
  • Configuring Audit Policies via GPO
PRACTICAL LAB:
  • Lab 1: Track failed login attempts (Event ID 4625) in Event Viewer
  • Lab 2: Create PerfMon logs to track CPU and RAM trends
SESSION 14: POWERSHELL FOR SERVER 2022
Topics:
  • PowerShell cmdlets, pipelines (`|`), and variables
  • Active Directory module (`Get-ADUser`, `New-ADUser`)
  • Automating user provisioning from CSV files
  • Exporting reports to CSV and HTML
PRACTICAL LAB:
  • Lab 1: Write PowerShell scripts to find inactive AD users
  • Lab 2: Automate bulk user creation using `Import-Csv`
🏆 SESSION 15 PROJECT: BUILD SERVER 2022 + AD + GPO + FILE SERVER + POWERSHELL
☁️ MODULE 4 — MICROSOFT 365 ADMINISTRATION
SESSION 16: MICROSOFT 365 FUNDAMENTALS
Topics:
  • Cloud basics and M365 architecture
  • Tenants, licensing models, and Admin Center navigation
  • Custom Domain Setup (DNS TXT, MX records)
  • Admin Roles and RBAC
PRACTICAL LAB:
  • Lab 1: Setup M365 tenant and verify a custom domain
  • Lab 2: Assign administrative roles to support staff
SESSION 17: USER & LICENSE ADMINISTRATION
Topics:
  • User provisioning & Group-Based Licensing (GBL)
  • Password resets and Self-Service Password Reset (SSPR)
  • User offboarding checklists (Convert to Shared Mailbox, Revoke access)
  • Group Types: M365, Security, Distribution, Dynamic
PRACTICAL LAB:
  • Lab 1: Create users and manage group-based license allocation
  • Lab 2: Execute a complete user offboarding workflow
SESSION 18: EXCHANGE ONLINE ADMINISTRATION
Topics:
  • User, Shared, and Equipment Mailboxes
  • Mailbox permissions (Send As, Full Access)
  • Mail Flow / Transport Rules
  • Spam & Anti-Phishing protection queues
PRACTICAL LAB:
  • Lab 1: Create Shared Mailboxes (`support@`) and assign access
  • Lab 2: Create custom Mail Flow rules to add disclaimers
SESSION 19: SHAREPOINT & TEAMS ADMINISTRATION
Topics:
  • SharePoint Team Sites vs Communication Sites
  • External sharing policies and document security
  • Teams Admin Center management
  • Channels (Standard, Private, Shared) and messaging policies
PRACTICAL LAB:
  • Lab 1: Build a SharePoint Team Site with restricted sharing
  • Lab 2: Configure Teams guest settings and channels
🏆 SESSION 20 PROJECT: BUILD A COMPLETE MICROSOFT 365 TENANT
🔐 MODULE 5 — IDENTITY, SECURITY & DEVICE MANAGEMENT
SESSION 21: MICROSOFT ENTRA ID
Topics:
  • Cloud identity architecture vs Active Directory
  • Hybrid Identity overview (Microsoft Entra Connect)
  • Users, Security Groups, and Directory Roles
PRACTICAL LAB:
  • Lab 1: Manage cloud identities and administrative roles in Entra Admin Center
SESSION 22: AUTHENTICATION & CONDITIONAL ACCESS
Topics:
  • Multi-Factor Authentication (MFA) enforcement
  • Conditional Access rules (User, Location, Device → Action)
  • Self-Service Password Reset (SSPR) rules
  • Zero Trust Architecture principles
PRACTICAL LAB:
  • Lab 1: Configure MFA policies for users
  • Lab 2: Create Conditional Access policies to block risky logins
SESSION 23: MICROSOFT INTUNE (MDM)
Topics:
  • Mobile Device Management (MDM) concepts
  • Device Enrollment methods
  • Compliance Policies and Configuration Profiles
  • Application Deployment to managed endpoints
PRACTICAL LAB:
  • Lab 1: Set up automatic Windows enrollment in Intune
  • Lab 2: Create Compliance and BitLocker Configuration profiles
SESSION 24: MICROSOFT DEFENDER
Topics:
  • Defender XDR suite overview
  • Endpoint Protection & Attack Surface Reduction (ASR)
  • Security alert investigation & machine isolation
  • Microsoft Secure Score optimization
PRACTICAL LAB:
  • Lab 1: Onboard Windows devices to Defender for Endpoint
  • Lab 2: Investigate simulated malware alerts and isolate endpoints
🏆 SESSION 25 PROJECT: DEPLOY ZERO TRUST SECURITY (Entra ID + MFA + Intune + Defender)
☁️ MODULE 6 — AZURE FUNDAMENTALS & ADMINISTRATION
SESSION 26: AZURE FUNDAMENTALS
Topics:
  • Regions, Availability Zones, Subscriptions & Resource Groups
  • Azure Portal, Azure CLI, and Cloud Shell
  • Azure Cost Budgets, Alerts, and Azure Policy tags
PRACTICAL LAB:
  • Lab 1: Set up Resource Groups and configure Cost Budget alerts
  • Lab 2: Deploy Azure Policies to restrict resource regions
SESSION 27: AZURE VIRTUAL MACHINES
Topics:
  • VM Sizing options (B-Series, D-Series)
  • Managed Disks, NICs, and Public/Private IPs
  • Secure Remote Access: Azure Bastion & JIT access
PRACTICAL LAB:
  • Lab 1: Provision Windows & Linux VMs in Azure
  • Lab 2: Connect securely to VMs using Azure Bastion
SESSION 28: AZURE STORAGE
Topics:
  • Storage Account types, Blob Containers, and Access Tiers
  • Azure Files and file shares
  • Shared Access Signatures (SAS) & Storage security
PRACTICAL LAB:
  • Lab 1: Create Blob containers and configure auto-archive lifecycle rules
  • Lab 2: Generate secure SAS tokens for file access
SESSION 29: AZURE NETWORKING
Topics:
  • Virtual Networks (VNets), Subnets, and IP schemes
  • Network Security Groups (NSGs) & Security Rules
  • VNet Peering for inter-network routing
PRACTICAL LAB:
  • Lab 1: Build VNets, subnets, and configure NSG firewall rules
  • Lab 2: Configure VNet Peering between two networks
🏆 SESSION 30 PROJECT: BUILD A SECURE AZURE INFRASTRUCTURE
⚙️ MODULE 7 — AZURE MANAGEMENT & OPERATIONS
SESSION 31: AZURE MONITORING
Topics:
  • Azure Monitor metrics and activity logs
  • Azure Monitor Agent (AMA) and Data Collection Rules
PRACTICAL LAB:
  • Lab 1: Monitor VM performance metrics and collect system activity logs
SESSION 32: LOG ANALYTICS & KQL
Topics:
  • Log Analytics Workspaces setup
  • Kusto Query Language (KQL) basics (`where`, `project`, `summarize`)
PRACTICAL LAB:
  • Lab 1: Write KQL queries to search for system errors and build dashboards
SESSION 33: AZURE BACKUP & RECOVERY
Topics:
  • Recovery Services Vault setup
  • VM Backup policies and File-Level Restore
PRACTICAL LAB:
  • Lab 1: Backup an Azure VM and test file-level restoration
SESSION 34: AZURE ALERTS
Topics:
  • Metric alerts and Action Groups (Email/SMS notifications)
PRACTICAL LAB:
  • Lab 1: Configure automated email alerts when CPU usage exceeds threshold
🏆 SESSION 35 PROJECT: BUILD AZURE MONITORING & BACKUP PIPELINE
🤖 MODULE 8 — AI ADMINISTRATOR
SESSION 36: ENTERPRISE AI & LLM FUNDAMENTALS
Topics:
  • Generative AI & LLMs (GPT-4o, Llama 3) mechanics
  • Tokens, Context Windows, Temperature, and Hallucination controls
  • Prompt Engineering for admins (System Prompts, Few-shot)
  • Microsoft Copilot ecosystem across Windows, M365, & Azure
PRACTICAL LAB:
  • Lab 1: Craft prompts to analyze system errors and draft RCA reports
SESSION 37: SCRIPT GENERATION WITH COPILOT
Topics:
  • Generating PowerShell, Python, and Bicep scripts with AI
  • Debugging syntax/logic errors and code optimization
  • Auditing AI-generated code for security flaws
PRACTICAL LAB:
  • Lab 1: Use Copilot to write, debug, and optimize complex PowerShell scripts
SESSION 38: AI-POWERED DIAGNOSTIC TRIAGE
Topics:
  • Parsing Event Viewer XML & server logs using LLMs
  • AI-assisted outage triage (High CPU, crashes, auth failures)
PRACTICAL LAB:
  • Lab 1: Feed unformatted error logs to Copilot for root cause analysis
SESSION 39: AZURE AI FOUNDRY & OPENAI
Topics:
  • Deploying Azure OpenAI instances and models (GPT-4o)
  • API Key management, endpoints, and Content Safety filters
  • Token quotas, rate limits, and cost management
PRACTICAL LAB:
  • Lab 1: Deploy a GPT-4o model in Azure AI Foundry & configure safety filters
SESSION 40: LOCAL LLM DEPLOYMENT & ADMINISTRATION
Topics:
  • Running local open-source LLMs (Llama 3, Mistral) via Ollama
  • Hardware requirements (GPU VRAM, CPU, Quantization)
  • Deploying local Open WebUI interfaces for offline privacy
PRACTICAL LAB:
  • Lab 1: Install Ollama and run a private LLM with Open WebUI interface
SESSION 41: ENTERPRISE AI AGENTS & RAG
Topics:
  • Retrieval-Augmented Generation (RAG) concepts
  • Vector Databases (Azure AI Search) overview
  • Building internal IT Helpdesk Knowledge Bots
PRACTICAL LAB:
  • Lab 1: Build a custom RAG Chatbot using company IT documentation
SESSION 42: AI SECURITY & GOVERNANCE
Topics:
  • Prompt Injection attacks and prevention
  • Data Loss Prevention (DLP) for AI using Microsoft Purview
  • Responsible AI enterprise policies
PRACTICAL LAB:
  • Lab 1: Configure Purview DLP rules to prevent sensitive data leaks into AI tools
🏆 MODULE PROJECT: DEPLOY AN AI-POWERED IT HELP-DESK & AUTOMATION PIPELINE
🚀 MODULE 9 — AUTOMATION FOR IT ADMINISTRATORS
SESSION 43: AUTOMATING DAILY IT TASKS
Topics:
  • PowerShell scheduled scripts & Power Automate Cloud Flows
PRACTICAL LAB:
  • Lab 1: Build automated disk cleanup scripts and user approval flows
SESSION 44: AUTOMATED REPORTING & ALERTS
Topics:
  • Collecting multi-server reports and sending Teams/Email alerts
PRACTICAL LAB:
  • Lab 1: Create a script that compiles system health and posts alerts to Microsoft Teams
SESSION 45: AI-ASSISTED INCIDENT AUTOMATION
Topics:
  • Workflow: Incident → Data Collection → AI Triage → Auto-fix approval
PRACTICAL LAB:
  • Lab 1: Build an end-to-end incident response automation workflow
🏆 MODULE 10 — FINAL CAPSTONE PROJECT
SESSION 46: CAPSTONE BUILD-OUT
Integration Focus:
  • Combine Server 2022 + AD + M365 + Azure VMs + Intune + Copilot AI + Automation
SESSION 47: FINAL DEMO & EVALUATION
Demonstration Checklist:
  • 1️⃣ Windows Client Administration
  • 2️⃣ Windows Server 2022 & AD DS infrastructure
  • 3️⃣ Microsoft 365 tenant & user lifecycle management
  • 4️⃣ Identity & Security (Entra ID, MFA, Intune, Defender)
  • 5️⃣ Azure Cloud setup (VNets, VMs, Monitoring)
  • 6️⃣ AI Administration (Copilot troubleshooting, Azure OpenAI, Local LLM)
  • 7️⃣ Automation pipelines (PowerShell scripts & Power Automate flows)