Microsoft Azure Architect Technologies

This exam measures your ability to accomplish the following technical tasks: design monitoring; design identity and security; design data storage; design business continuity; and design infrastructure.

Packt.com Subscribe to our online digital library for full access to over 7,000 books and videos, as well as industry leading tools to help you plan your personal development and advance your career For more information, please visit our website Why subscribe? • Spend less time learning and more time coding with practical eBooks and videos from over 4,000 industry professionals • Improve your learning with Skill Plans built especially for you • Get a free eBook or video every month • Fully searchable for easy access to vital information • Copy and paste, print, and bookmark content Did you know that Packt offers eBook versions of every book published, with PDF and ePub files available? You can upgrade to the eBook version at packt.com and, as a print book customer, you are entitled to a discount on the eBook copy Get in touch with us at customercare@packtpub.com for more details At www.packt.com, you can also read a collection of free technical articles, sign up for a range of free newsletters, and receive exclusive discounts and offers on Packt books and eBooks Contributors About the authors Based in the UK, Brett Hargreaves is a lead Azure consultant who has worked for some of the world's biggest companies for over 25 years, helping them design and build cuttingedge solutions With a career spanning infrastructure, development, consulting, and architecture, he has been involved in projects covering the entire solution stack, including hardware, virtualization, databases, storage, software development, and the cloud He loves passing on his knowledge to others through books, blogging, and his online training courses, which have over 20,000 students (and counting!) Sjoukje Zaal is a CTO, Microsoft Regional Director, and Microsoft Azure MVP with over 20 years' experience in architecture-, development-, consultancy-, and design-related roles She currently works at Capgemini, a global leader in consultancy, technology services, and digital transformation She loves to share her knowledge and is active in the Microsoft community as a co-founder of the user groups Tech Daily Chronicle, Global XR Community, and the Mixed Reality User Group She is also a board member of Azure Thursdays and Global Azure Sjoukje is an international speaker and is involved in organizing many events She has written several books and writes blogs About the reviewers Ricardo Cabral is a licensed computer engineer with several Microsoft certifications, and is also a Microsoft Certified Trainer (MCT) Having worked in both administration and development roles, with several years' experience in IT management, development, and projects, he now works as an IT consultant and trainer In his spare time, he actively participates in, and volunteers and/or speaks at, technical community meetings I would like to thank all my friends and a special individual (you know who you are) who helped guide me in my decisions I would also like to thank Packt Publishing for the opportunity to review this wonderful book Aprizon has been working with Microsoft Infrastructure technologies for more than 20 years, starting with Windows Server through to the cloud platform, including Office 365, Microsoft Azure, and Microsoft Enterprise Mobility Security, and is passionate about business process transformation He has worked in an IT consulting company as an expert by leveraging Office 365, enterprise mobility security, and Microsoft Azure to increase efficiency and implement changes from the ground up He has also worked as a Microsoft Certified Trainer and delivers Microsoft Official Curriculum training Above all else, he is a father, husband, son, brother, and friend Derek Campbell works as a senior solution architect in the advisory team at Octopus Deploy He has worked all over the globe, including in London, Melbourne, and Singapore, and now from his home in Glasgow, Scotland Derek originally started in operations 15 years ago, becoming a system architect Over time, he moved into DevOps He has been automating infrastructure configuration, working with Azure and CI/CD pipelines, for about years and has helped lead and implement CI/CD across multiple companies during his time in DevOps and automation consultancy Packt is searching for authors like you If you're interested in becoming an author for Packt, please visit authors packtpub.com and apply today We have worked with thousands of developers and tech professionals, just like you, to help them share their insight with the global tech community You can make a general application, apply for a specific hot topic that we are recruiting an author for, or submit your own idea Table of Contents Preface Section 1: Implement and Monitor Azure Infrastructure Implementing Cloud Infrastructure Monitoring Technical requirements Understanding Azure Monitor Creating and analyzing metrics and alerts 4 Metrics7 Multi-dimensional metrics Creating a baseline for resources19 Configuring diagnostic settings on resources 19 Enabling diagnostic settings 20 Viewing alerts in Log Analytics 21 Utilizing log search query functions22 Querying logs in Azure Monitor 23 Using Network Watcher 25 Connection Monitor 26 Diagnostics28 Monitoring security 36 Activity log 36 Managing costs 38 Cost Analysis 38 Budgets40 Questions  Further reading  41 42 Creating and Configuring Storage Accounts Technical requirements 44 Understanding Azure Storage accounts44 Storage account types Storage replication types 44 45 Azure Blob storage Azure file storage Azure disk storage 47 48 48 ii Table of Contents Creating and configuring a storage account Installing and using Azure Storage Explorer Configuring network access to the storage account SAS tokens and access keys 50 51 55 58 Managing access keys Generating an SAS 59 60 Implementing Azure Storage replication and failover 62 Summary64 Questions64 Further reading 65 Implementing and Managing Virtual Machines Technical requirements Understanding VMs 68 68 Saving a deployment as an ARM template91 VM series and sizes Managed disks 69 70 Deploying resources with Azure DevOps94 Understanding Availability Sets 71 Fault domains and update domains 72 Understanding how to provision VMs 73 Deploying a Windows VM from the Azure portal 74 Deploying a Windows VM from PowerShell78 Understanding VM scale sets 79 Deploying and configuring scale sets 81 Modifying and deploying ARM templates83 Modifying an ARM template 83 Setting up your first DevOps project Creating a service connection Creating the pipeline 95 97 99 Configuring Azure Disk Encryption for VMs 101 Creating an Azure Key Vault Encrypting the disk 101 102 Azure Dedicated Host 103 Implementing a dedicated host Creating VMs on a dedicated host 104 106 Summary108 Questions108 Further reading 109 Implementing and Managing Virtual Networking Technical requirements Understanding Azure VNets 112 112 Understanding IP addresses Public IP addresses Private IP addresses 113 114 114 Table of Contents iii Configuring VNets and subnets 115 Configuring private and public IP addresses 116 User-defined routes 117 Creating UDRs 118 Summary121 Questions121 Further reading 121 Creating Connectivity between Virtual Networks Technical requirements 124 Understanding VNet peering 124 Creating and configuring VNet peering125 Understanding VNet-to-VNet 128 Creating and configuring VNet-to-VNet 129 connectivity136 VNet peering versus VNet-toVNet connections 137 Summary138 Questions138 Further reading 138 Verifying your virtual network's Managing Azure Active Directory (Azure AD) Understanding Azure AD Creating and managing users and groups Creating users in Azure AD Creating groups in Azure AD Adding and managing guest accounts Performing bulk user updates Configuring a self-service password reset Understanding Conditional Access policies and security 142 defaults154 143 Security defaults Using Conditional Access policies 154 155 Working with Azure AD join 156 144 147 149 151 152 Managing device settings 156 Adding custom domains 161 Summary163 Questions164 Further reading 164 Implementing Multi-Factor Authentication (MFA) Understanding Azure MFA 168 Enabling MFA for an Azure AD tenant 170 Leave a review - let other readers know what you think 513 Leave a review - let other readers know what you think Please share your thoughts on this book with others by leaving a review on the site that you bought it from If you purchased the book from Amazon, please leave us an honest review on this book's Amazon page This is vital so that other potential readers can see and use your unbiased opinion to make purchasing decisions, we can understand what our customers think about our products, and our authors can see your feedback on the title that they have worked with Packt to create It will only take a few minutes of your time, but is valuable to other potential customers, our authors, and Packt Thank you! Index A access keys about 58 managing 59 access, to Azure resources configuring, by assigning roles 290-292 Active Directory authentication implementing 385 Active Directory Federation Services (AD FS) 168, 180 active geo-replication 472 Activity Log using 36, 37 alerts setting up, for Logic Apps 351-353 viewing, in Log Analytics 21 Amazon Web Services (AWS) 204 application, Azure Kubernetes Service (AKS) cluster health and logs, monitoring 377-380 testing 376, 377 Application Delivery Network (ADN) 272 application diagnostics 339 application metrics application running on ACI, implementing about 358, 359 container image, creating with Dockerfile 359-361 container image, publishing to ACR 361-363 container image, pushing to ACI from ACR 364, 365 Application Security Group (ASG) implementing 276-279 App Service authentication and authorization, security features identity provider 385 logging and tracing 385 token store 385 user claims 384 App Service background task creating, with WebJobs 332-337 App Service Environment (ASE) 317, 342 516 Index App Service plans about 315 Dev/Test 315 production 316 App Services about 314 capabilities 314, 315 App Service web app creating, for containers 366-368 ARM templates deploying 83 deployment, saving as 91-94 modifying 83-91 Atomicity, Consistency, Isolation, Durability (ACID) 424 authentication implementing, with certificates 394-399 automatic scaling setting up 328-331 Availability Sets 71 Azure built-in roles 289 management access, configuring to 292, 293 Azure Active Directory (Azure AD) about 142, 399 application, registering 401-407 custom domains, adding 161-163 device settings, managing 156-161 groups, creating 147, 148 guest accounts, adding 149, 150 guest accounts, managing 149, 150 OAuth2 authentication, implementing 399, 400 tokens, implementing 407-410 tokens, refreshing 411 users, creating 144-146 Azure AD Connect about 180 installing 182-185 managing 186, 187 password writeback, enabling 189-192 Azure AD Connect Health about 180 using 194-196 Azure AD Connect sync component 180 Azure AD Connect sync service 180 Azure AD join working with 156 Azure AD pass-through authentication 181 Azure AD password hash synchronization 181 Azure AD Premium 143 Azure AD, pricing plans basic 142 free 142 Premium P1 142 Premium P2 142 reference link 143 Azure AD Seamless Single Sign-On (SSO) 181 Azure AD tenant MFA, enabling for 170 reference link 143 Azure Application Gateway about 260 components 263, 264 creating 265-269 features 261, 262 health probes 269 implementing 263, 264 sizes 263 used, for monitoring resources 270, 271 Index 517 Azure Application Gateway, tiers standard 263 standard v2 263 WAF 263 WAF v2 263 Azure App Service WebJobs, deploying to 337, 338 Azure App Service authentication 384, 385 Azure App Service Web App creating 318, 319 Azure Backup reference link 250 VMs, protecting with 240-243 Azure Bastion using 280-283 Azure Blob storage 47 Azure Blueprints about 302 configuring 302 implementing 302 Azure Container Instances (ACI) 356-358 Azure Cosmos DB documentation link 448 Request Units, reference link 449 Azure Data Box Gateway 206 Azure dedicated host 103 Azure DevOps about 94 pipeline, creating 99-101 project, setting up 95-97 resources, deploying with 94 service connection, creating 97, 98 Azure Dev Spaces reference link 373 Azure Disk Encryption prerequisites, reference link 101 Azure Disk Encryption for VMs configuring 101 disk, encrypting 102, 103 Azure disk storage about 48 managed disks 49 premium disk storage 49 standard disk storage 49 ultra disk storage 49 unmanaged disks 49 Azure file storage 48 Azure Firewall about 279, 280 functionalities 280 Azure Front Door about 272 features 273, 274 Azure Functions creating 342-345 using 340, 341 Azure Hybrid Benefit 103 Azure Key Vault creating 101 Azure Kubernetes Service (AKS) 369 Azure Kubernetes Service (AKS) cluster application, deploying to 373-376 connecting to 372, 373 creating 370-372 Azure Load Balancer creating 256-258 implementing 255 Azure MFA about 168 offerings 168 verification methods 169 518 Index Azure Migrate about 202 features 202 reference link 250 Azure Migrate Server Assessment tool about 203 using 203, 204 Azure Migrate Server Migration tool using 204 Azure Migrate tools Azure Migrate Server Assessment tool 203 Azure Migrate Server Migration tool 204 Database Migration Assistant (DMA) 204 Database Migration Service (DMS) 205 selecting 203 used, for offline data migration 205-207 Web App Migration Assistant 205 Azure Monitor about action groups 17, 18 alerts 12 alerts, analyzing alerts, creating 6, 12-16 baseline, creating for resources 19 logs logs, querying 23, 24 metrics 5, 7, metrics, analyzing metrics, creating 6-11 multi-dimensional metrics Azure policies implementing 297-301 Azure Policy about 295 examples 295, 296 Azure portal groups, creating 143 groups, managing 143 password writeback, enabling 192 users, creating 143 users, managing 143 Windows VM, deploying from 74-77 Azure Resource Manager (ARM) 19 Azure resources service principal authentication managed identities, implementing 412-414 Azure Site Recovery about 202 reference link 250 Azure SQL Database about 452 configuring 454 connecting to 458-460 elastic database pool 452 elastic pools, configuring 467-471 item, deleting 466, 467 items, adding 460-462 items, querying 462-464 managed instance 453 provisioning 454 publishing 478-481 reference link 482 row, updating 464-466 server-level firewall rule, creating 455, 456 service tiers, reference link 482 single database 453 SQL Server Stretch Database 453 table, creating 457 Azure SQL Database managed instances about 453 business critical 477 Index 519 general purpose 476 implementing 476, 477 reference link 482 Azure Stack Edge Pro 206 Azure Storage failover, implementing 62, 63 replication, implementing 62, 63 Azure Storage accounts about 44 Blob storage 44 General-Purpose v1 (GPv1) 44 General-Purpose v2 (GPv2) 45 Azure Storage accounts, pricing page reference link 45 Azure Storage Explorer about 51 installing 51-54 Azure Traffic Manager implementing 258-260 options, to direct traffic 259 Azure Update Management using 234-239 Azure VNets 112 B backend health 270 backend pools 264 BitLocker 101 Blob storage account 44 Blob storage account, access tiers about 47 archive storage tier 48 cool access tier 48 hot access tier 47 blueprint assigning 303, 304 publishing 303, 304 blueprint definition creating 302, 303 Budgets using 40 built-in roles, Azure contributor 289 owner 289 readers 289 reference link 290 bulk user updates performing 151, 152 bypass options configuring 175, 176 C Cassandra API 424 certificates used, for implementing authentication 394-399 combined VNet-to-VNet communication 128 command-line interface (CLI) 113 compliance 288 Conditional Access policies reference link 156 using 155 Connection Monitor example 26-28 connectors, for Azure Logic Apps reference link 346 consistency level setting, for operations 445 consistency models, Azure Cosmos DB bounded staleness 445 consistent prefix 445 eventual consistency 445 520 Index session 445 strong consistency 445 containers App Service web app, creating for 366-368 continuous integration/continuous deployment (CI/CD) 315, 357 Cosmos DB about 423 benefits 423, 424 creating 425, 426 supported APIs 424 Cost Analysis using 38-40 costs managing 38 Cross-Origin Resource Sharing (CORS) 51, 315 cross-site scripting attacks (XSS) 261 custom domains adding, to Azure AD 161-163 custom metrics custom roles about 290 creating 294 D Database Migration Assistant tool (DMA) tasks, performing 204 using 204 Database Migration Service (DMS) 205, 476 Data Box 206 Data Box Disk 206 Data Box Heavy 206 dedicated host implementing 104, 105 Virtual Machines (VMs), creating on 106-108 demilitarized zone (DMZ) 117 deployment saving, as ARM template 91-94 Deployment Slots using 325-328 Destination Network Address Translation (DNAT) 280 Dev/Test App Service plans 315, 316 diagnostic logging about 338 enabling 339, 340 diagnostic logs, Azure Monitor resource logs 19 tenant logs 19 diagnostic settings configuring, on resources 19, 20 enabling, for resources 20, 21 disaster recovery implementing 244-248 DM-Crypt 101 dynamic IP addresses 113 Dynamic Thresholds metrics alerts 19 E elastic pools configuring, for Azure SQL Database 467-471 F failover groups 472 fault domains 71-73 Index 521 federated identity 385 Five-tuple Hash 255 fraud alerts configuring 174 frontend IP 263 Fully Qualified Domain Names (FQDN) 280 G General-Purpose v1 (GPv1) storage account 44 General-Purpose v2 (GPv2) storage account 45 Geo-Redundant Storage (GRS) 45, 46 Geo-Zone-Redundant Storage (GZRS) 45, 46 Global VNet peering 124 Google Cloud Platform (GCP) 204 governance 288 Graphics Processing Unit (GPU) 68, 369 Gremlin (Graph) API 424 groups creating, in Azure AD 147 guest accounts adding, in Azure AD 149, 150 managing, in Azure AD 149, 150 guest OS metrics H hierarchical management using 305 high availability configuring 472 high availability configuration about 472 active geo-replication, using 472 failover groups, using 472 SQL database failover, creating 474-476 SQL replica, creating 472-474 host group 103 Hyper-V VMs, migrating to Azure about 229-234 test migration, running 230-232 I Immutable Infrastructure 94 InfluxData Telegraf agent about reference link Infrastructure as Code (IaC) 94 Input/Output Operations Per Second (IOPS) 70 Internet of Things (IoT) 341 IP addresses about 113 dynamic IP addresses 113 private IP addresses 114 public IP addresses 114 static IP addresses 113 IP Flow Verify 28, 30 IT Service Management (ITSM) 12 K kubectl installation link 372 Kusto query language reference link 24 522 Index L M line-of-business (LOB) 346 listeners 263 load balancing options about 252-255 selecting 274, 275 Locally Redundant Storage (LRS) 45 Log Analytics alerts, viewing 21 logical partitions 443 Logic App ARM template deploying 347, 348 Logic App resource managing 349 Logic Apps alerts 349 alerts, setting up for 351-353 building 346 logging capabilities 349 monitoring capabilities 349 runs and trigger history, viewing 349, 351 logs about 270 access log 270 activity log 270 firewall log 270 performance log 270 querying, in Azure Monitor 23, 24 log search query functions utilizing 22 logs, storage options Azure Monitor Logs 271 Event Hubs 271 storage account 271 managed disks 70 managed identities about 411 implementing 411 implementing, for Azure resources service principal authentication 412-414 system-assigned managed identity 412 user-assigned managed identity 412 Managed Service Identity (MSI) 411 management access configuring, to Azure 292, 293 management groups 305 management group structure setting up 306, 307 metrics 270 MFA about 168 enabling, for Azure AD tenant 170 user accounts, configuring for 170, 171 Microsoft Azure Recovery Services (MARS) 240 Microsoft Cloud App Security (MCAS) 155 Microsoft identity platform programming model use cases 399 Mobile Device Management (MDM) 157 MongoDB API 424 Multi-Factor Authentication (MFA) 142 N network access configuring, to storage account 55-58 network address translation (NAT) 117 Index 523 network-attached storage (NAS) 206 Network File System (NFS) 48, 206 network interface card (NIC) 116 Network Security Group (NSG) about 31 implementing 276-279 Network Watcher Connection Monitor 27, 28 using 25, 26 Network Watcher, diagnostics about 28 effective security rules 31 IP Flow Verify 28-30 Next Hop 30, 31 Packet Capture 32-35 Next Hop 30, 31 NoSQL versus SQL 420-423 O OAuth2 authentication implementing 400 implementing, in Azure AD 399, 400 one-to-many relationships 421 on-premises server migration, to Azure about 207 appliance, configuring 212-216 appliance, downloading 209-211 appliance, installing 209-211 assessment, creating 216-218 assessment, viewing 216-218 Azure Migrate project, creating 207, 209 continuous discovery, starting 212- 216 Hyper-V host, preparing 219-223 Hyper-V VMs, migrating 229 Hyper-V VMs, replicating 224-228 Hyper-V VMs, replicating for first time 229 on-premises servers migrating, to Azure 207 Open Web Application Security Project (OWASP) 261 operations consistency level, reference link 445 consistency level, setting for 445 P Packet Capture 32-35 partitioning schemes 443, 444 password synchronization 193 password writeback about 187 enabling, in Azure AD Connect 189-192 enabling, in Azure portal 192 features 188 managing 188 path-based redirection 262 peering, types Global VNet peering 124 VNet peering 124 physical partitions 443 platform metrics Point of Presence (POP) 273 PowerShell Windows VM, deploying from 78, 79 private IP addresses about 114 configuring 116, 117 production App Service plans basic 316 isolated 317 premium 317 standard 316 524 Index public IP addresses about 114 configuring 116, 117 purchasing models, database elastic pools Database Transaction Units (DTUs) 453 serverless 453 vCore 453 R RBAC about 289 custom roles 290 Read-Access Geo-Redundant Storage (RA-GRS) 47 Recovery Point Objective (RPO) 244 Recovery Time Object (RTO) 244 Remote Desktop Protocol (RDP) 280 Remote Direct Memory Access (RDMA) 69 replicas creating 446, 447 request units (RUs) 443 resources deploying, with Azure DevOps 94 diagnostic settings, configuring on 19, 20 diagnostic settings, enabling for 20, 21 role-based access control (RBAC) 369, 412 root management group 305 routing rules 264 S sample application creating 426 sample application creation, steps Azure Cosmos DB resources, querying 438-440 container, creating 431 Cosmos DB account, connecting to 427-430 database, creating 430 item, deleting 441, 442 items, adding to container 432-438 JSON item, updating 440, 441 SAS generating 60, 61 SAS tokens 58 scalable alerting 19 schema 420 Secure Network Address Translation (SNAT) 280 Secure Shell (SSH) 280 Secure Sockets Layer (SSL) 273 security monitoring 36 security defaults 154, 155 security groups 148 security information and event management (SIEM) 271 security rules viewing 31 self-service password reset configuring 152, 153 Server Message Block (SMB) 48, 206 Service Level Agreement (SLA) 71 single sign-on (SSO) 142 Smart Metric Pattern Recognition 19 snapshots, Site Recovery app-consistent 244, 248 crash consistent 244 Software as a Service (SaaS) 180 Source IP Affinity 255 Index 525 source network address translation (SNAT) 114 SQL versus NoSQL 420-423 SQL API 424 SQL database failover creating 474-476 SQL queries reference link 449 SQL replica creating 472, 473 SQL Server Integration Services (SSIS) 205 SQL Server Stretch Database 453 SSL certificates reference link 394 SSL convertor reference link 394 static IP addresses 113 storage account configuring 50 creating 50 network access, configuring to 55-58 storage replication types about 45 Geo-Redundant Storage (GRS) 46 Geo-Zone-Redundant Storage (GZRS) 46 Locally Redundant Storage (LRS) 45 Read-Access Geo-Redundant Storage (RA-GRS) 47 Zone-Redundant Storage (ZRS) 46 subnets configuring 115 subnetting reference link 113 supported APIs, Cosmos DB Cassandra API 424 Gremlin (Graph) API 424 MongoDB API 424 SQL API 424 Table API 424 Swagger about 320 documentation, creating for API 320-325 system-assigned managed identity 412 system route table, routes Internet 117 local VNet 117 on-premises 117 T Table API 424 trusted IPs configuring 173 U update domains 71-73 user accounts configuring, for MFA 170, 171 user-assigned managed identity 412 user-defined functions (UDFs) 424 user-defined routes (UDRs) about 117 creating 118-120 reference link 120 users creating, in Azure AD 144-146 526 Index V verification methods configuring 172, 173 virtual desktop infrastructures (VDIs) 202 Virtual Hard Disks (VHDs) 44 Virtual Machines (VMs) about 68, 124 creating, on dedicated host 106-108 protecting, with Azure Backup 240, 241 provisioning 73 series 69 sizes 69 virtual network's connectivity verifying 136, 137 virtual network (VNet) 25, 476 virtual private network (VPN) gateways 128, 137 VM scale sets about 79, 80 configuring 81, 82 deploying 81, 82 VM sizes reference link 69 VNet peering about 112, 124, 137 configuring 125-127 creating 125-127 versus VNet-to-VNet connections 137 VNets configuring 115 VNet-to-VNet connection about 128 benefits 128 configuring 129 creating 129, 135, 136 VNet-to-VNet connection, steps IP ranges, planning 130 PacktVNet1, creating 131-133 PacktVNet2, creating 133-135 W Web App authentication, enabling 387-394 authorization, enabling 387-394 deploying 385, 387 Web App for Containers 366 web application firewall (WAF) about 261 detection mode 271 prevention mode 271 turning on 271, 272 Web App Migration Assistant about 205 features 205 WebJobs about 331 App Service background task, creating 332-337 continuous 331 deploying, to Azure App Service 337, 338 triggered 331 web server diagnostics about 338 detailed error logging 339 failed request tracing 339 web server logging 338 Index 527 Windows Diagnostic Extension (WAD) Windows VM deploying, from Azure portal 74-77 deploying, from PowerShell 78, 79 Z Zone redundancy 261 Zone-Redundant Storage (ZRS) 45, 46 ... working with Microsoft Infrastructure technologies for more than 20 years, starting with Windows Server through to the cloud platform, including Office 365, Microsoft Azure, and Microsoft Enterprise... virtual network's Managing Azure Active Directory (Azure AD) Understanding Azure AD Creating and managing users and groups Creating users in Azure AD Creating groups in Azure AD Adding and managing... Identities Understanding Azure AD Connect180 Azure AD password hash synchronization181 Azure AD pass-through authentication 181 Installing Azure AD Connect 182 Managing Azure AD Connect 186