Microsoft Certified: Windows Server Hybrid Administrator Associate (AZ800-801)

This eight-day certification track training is composed of two parts:

Administering Windows Server Hybrid Core Infrastructure (AZ-800T00)

This four-day Microsoft certified course teaches IT Professionals how to manage core Windows Server workloads and services using on-premises, hybrid, and cloud technologies. The course teaches IT Professionals how to implement and manage on-premises and hybrid solutions such as identity, management, compute, networking, and storage in a Windows Server hybrid environment.

Configuring Windows Server Hybrid Advanced Services (AZ-801T00)

This four-day Microsoft certified course teaches IT Professionals to configure advanced Windows Server services using on-premises, hybrid, and cloud technologies. The course teaches IT Professionals how to leverage the hybrid capabilities of Azure, how to migrate virtual and physical server workloads to Azure IaaS, and how to secure Azure VMs running Windows Server. The course also teaches IT Professionals how to perform tasks related to high availability, troubleshooting, and disaster recovery. The course highlights administrative tools and technologies including Windows Admin Center, PowerShell, Azure Arc, Azure Automation Update Management, Microsoft Defender for Identity, Azure Security Center, Azure Migrate, and Azure Monitor.

This training is a comprehensive preparation to the exams AZ-800 and AZ-801 to earn the Microsoft Certified: Windows Server Hybrid Administrator Associate certification.

You can purchase an individual part of this certification track - contact us for the details.


Applicable solutions

Public class

Virtual classroom
Planned datePlanned date
July 15 2024
Virtual classroom
Planned datePlanned date
August 12 2024
Virtual classroom
Planned datePlanned date
September 9 2024
Virtual classroom
Planned datePlanned date
October 21 2024
Virtual classroom
Planned datePlanned date
November 18 2024
Virtual classroom
Planned datePlanned date
December 16 2024
8 days / 56 hours

Private class

Virtual classroom
Minimum no. of participants: 5
8 days / 56 hours
Price on request
English or French
Training plan: 

Administering Windows Server Hybrid Core Infrastructure (AZ-800T00)

Module 1: Introduction to AD DS

  • Define AD DS
  • Define users, groups, and computers
  • Define AD DS forests and domains
  • Define OUs
  • Manage objects and their properties in AD DS

Module 2: Manage AD DS domain controllers and FSMO roles

  • Deploy AD DS domain controllers
  • Maintain AD DS domain controllers
  • Manage the AD DS Global Catalog role
  • Manage AD DS operations masters
  • Manage AD DS schema

Module 3: Implement Group Policy Objects

  • Define GPOs
  • Implement GPO scope and inheritance
  • Define domain-based GPOs
  • Create and configure a domain-based GPO
  • Define GPO storage
  • Define administrative templates

Module 4: Manage advanced features of AD DS

  • Create trust relationships
  • Implement ESAE forests
  • Monitor and troubleshoot AD DS
  • Create custom AD DS partitions

Module 5: Implement hybrid identity with Windows Server

  • Select an Azure Active Directory integration model
  • Plan for Azure Active Directory integration
  • Prepare on-premises Active Directory for directory synchronization
  • Install and configure directory synchronization with Azure Active Directory Connect
  • Implement Seamless Single Sign-On
  • Enable Azure Active Directory login in for Windows VM in Azure
  • Describe Azure Active Directory Domain Services
  • Implement and configure Azure Active Directory Domain Services
  • Manage Windows Server 2019 in an Azure Active Directory Domain Services environment
  • Create and configure an Azure Active Directory Domain Services instance
  • Join a Windows Server VM to a managed domain

Module 6: Deploy and manage Azure IaaS Active Directory domain controllers in Azure

  • Select an option to implement directory and identity services using Active Directory Domain Services in Azure
  • Deploy and configure Active Directory Domain Services domain controllers in Azure VMs
  • Install a replica Active Directory domain controller in an Azure VM
  • Install a new Active Directory forest on an Azure VNet

Module 7: Perform Windows Server secure administration

  • Define least privilege administration
  • Implement delegated privileges
  • Use privileged access workstations
  • Use jump servers

Module 8: Describe Windows Server administration tools

  • Explore Windows Admin Center
  • Use Server Manager
  • List Remote Server Administration Tools
  • Use Windows PowerShell
  • Use Windows PowerShell to remotely administer a server

Module 9: Perform post-installation configuration of Windows Server

  • List the available post-installation configuration tools
  • Configure Server Core using Sconfig
  • Use DSC to configure Windows Server
  • Perform post-installation configuration with Windows Admin Center
  • Configure a server with answer files

Module 10: Just Enough Administration in Windows Server

  • Explain the concept of Just Enough Administration (JEA)
  • Define role capabilities for a JEA endpoint
  • Create a session configuration file to register a JEA endpoint
  • Describe how JEA endpoints work to limit access to a PowerShell session
  • Create and connect to a JEA endpoint
  • Demonstration: Connect to a JEA endpoint

Module 11: Administer and manage Windows Server IaaS Virtual Machine remotely

  • Select the appropriate remote administration tool
  • Manage Windows Virtual Machines with Azure Bastion
  • Create an Azure Bastion host
  • Configure just-in-time administration

Module 12: Manage hybrid workloads with Azure Arc

  • Describe Azure Arc
  • Onboard Windows Server instances
  • Connect hybrid machines to Azure from the Azure portal
  • Use Azure Arc to manage Windows Server instances
  • Restrict access with RBAC

Module 13: Configure and manage Hyper-V

  • Define Hyper-V
  • Define Hyper-V Manager
  • Configure Hyper-V hosts using best practices
  • Configure Hyper-V networking
  • Assess advanced Hyper-V networking features
  • Define nested virtualization

Module 14: Configure and manage Hyper-V virtual machines

  • List the virtual machine configuration versions
  • List the virtual machine generation versions
  • List available VHD formats and types
  • Create and configure VMs
  • Determine storage options for VMs
  • Define shared VHDs and VHD Sets
  • Implement guest clusters using shared VHDX

Module 15: Secure Hyper-V workloads

  • Define guarded fabric
  • Define the Host Guardian Service
  • Explore TPM-trusted attestation
  • Define KPS
  • Determine key features of shielded VMs
  • Compare encryption-supported and shielded VMs in a guarded fabric
  • Implement a shielded VM

Module 16: Run containers on Windows Server

  • Define containers
  • List the differences between containers and VMs
  • Define Windows Server and Hyper-V containers and isolation modes
  • Explore Docker
  • Prepare a Windows Server 2019 host for container deployment
  • Security, Storage, and Networking with Windows containers

Module 17: Orchestrate containers on Windows Server using Kubernetes

  • Define orchestration
  • Define Kubernetes
  • Deploy Kubernetes resources
  • Create a Kubernetes cluster on Windows
  • Define Azure Arc
  • Connect an Azure Arc-enabled Kubernetes cluster to Azure Arc

Module 18: Plan and deploy Windows Server IaaS Virtual Machines

  • Describe Azure compute
  • Describe Virtual Machine storage
  • Deploy Azure Virtual Machines
  • Create a windows Virtual Machine using the portal
  • Create a windows Virtual Machine using Azure CLI
  • Deploy Azure Virtual Machines using templates

Module 19: Customize Windows Server IaaS Virtual Machine images

  • Create a generalized image
  • Create a new Virtual Machine from a managed image
  • Create a managed image of a generalized virtual machine in Azure
  • Create a Virtual Machine from a managed image
  • Implement Azure Image Builder
  • Create a windows Virtual Machine using Azure Image Builder template
  • Create a Windows Virtual Machine with Azure Image Builder using PowerShell

Module 20: Automate the configuration of Windows Server IaaS Virtual Machines

  • Describe Azure Automation
  • Implement Azure Automation with DSC
  • Remediate noncompliant servers
  • Describe Custom Script Extensions
  • Configure a Virtual Machine by using DSC

Module 21: Deploy and manage DHCP

  • Use DHCP to simplify IP configuration
  • Install and configure the DHCP role
  • Configure DHCP options
  • Configure DHCP scopes
  • Select DHCP high availability options
  • Implement DHCP Failover

Module 22: Implement Windows Server DNS

  • Explore the DNS architecture
  • Work with DNS zones and records
  • Install and configure the DNS role
  • Implement DNS forwarding

Module 23: Implement IP Address Management

  • Define IP Address Management
  • Deploy IP Address Management
  • Administer IP Address Management
  • Configure IP Address Management options
  • Manage DNS zones with IP Address Management
  • Manage DHCP servers with IP Address Management
  • Use IP Address Management to manage IP addressing

Module 24: Implement remote access

  • Examine the remote access options in Windows Server
  • Select and set up VPNs
  • Use NPS to create and enforce network access policies
  • Plan and implement NPS
  • Deploy a PKI for remote access
  • Use WAP as a reverse web proxy

Module 25: Implement hybrid network infrastructure

  • Describe Azure network topologies
  • Implement Azure VPN options
  • Create a route-based VPN gateway using the Azure portal
  • Implement Azure ExpressRoute
  • Configure Azure Virtual WAN
  • Implement DNS in hybrid environments

Module 26: Implement DNS for Windows Server IaaS VMs

  • Understand Azure DNS
  • Implement Azure DNS
  • Create an Azure DNS zone and record using the Azure portal
  • Implement DNS with Azure IaaS virtual machines
  • Implement split-horizon DNS in Azure
  • Troubleshoot DNS

Module 27: Implement Windows Server IaaS VM IP addressing and routing

  • Implement a virtual network
  • Implement IaaS VM IP addressing
  • Assign and manage IP addresses
  • Configure a private IP address for a virtual machine using the Azure portal
  • Create a virtual machine with a static public IP address using the Azure portal
  • Implement IaaS virtual machine IP routing
  • Implement IPv6 for Windows Server IaaS virtual machines

Module 28: Manage Windows Server file servers

  • Define the Windows Server file system
  • List the benefits and uses of File Server Resource Manager
  • Define SMB and its security considerations
  • Configure SMB protocol
  • Define Volume Shadow Copy Service

Module 29: Implement Storage Spaces and Storage Spaces Direct

  • Define the Storage Spaces architecture and its components
  • List the functionalities, benefits, and use cases of Storage Spaces
  • Implement Storage Spaces
  • List the functionalities, components, benefits, and use cases of Storage Spaces Direct
  • Implement Storage Spaces Direct

Module 30: Implement Windows Server Data Deduplication

  • Define the architecture, components, and functionality of Data Deduplication
  • Define the use cases and interoperability of Data Deduplication
  • Implement Data Deduplication
  • Manage and maintain Data Deduplication

Module 31: Implement Windows Server iSCSI

  • List the functionalities, components, and use cases of iSCSI
  • List the considerations for implementing iSCSI
  • Implement iSCSI
  • Configure high availability for iSCSI

Module 32: Implement Windows Server Storage Replica

  • List the functionalities and components of Storage Replica
  • Examine the prerequisites for implementing Storage Replica
  • Implement Storage Replica by using Windows Admin Center
  • Implement Storage Replica by using Windows PowerShell

Module 33: Implement a hybrid file server infrastructure

  • Describe Azure File services
  • Configure Azure Files
  • Configure connectivity to Azure Files
  • Describe Azure File Sync
  • Implement Azure File Sync
  • Deploy Azure File Sync
  • Deploy Azure File Sync 2
  • Manage cloud tiering
  • Migrate from DFSR to Azure File Sync

Configuring Windows Server Hybrid Advanced Services (AZ-801T00)

Module 1: Secure Windows Server user accounts

  • Configure user account rights
  • Protect user accounts with the Protected Users group
  • Describe Windows Defender Credential Guard
  • Block NTLM authentication
  • Locate problematic accounts

Module 2: Hardening Windows Server

  • Describe Local Password Administrator Solution
  • Configure Privileged Access Workstations
  • Secure domain controllers
  • Analyze security configuration with Security Compliance Toolkit
  • Secure SMB traffic

Module 3: Windows Server update management

  • Explore Windows Update
  • Outline Windows Server Update Services server deployment options
  • Define Windows Server Update Services update management process
  • Describe the process of Update Management

Module 4: Secure Windows Server DNS

  • Implement split-horizon DNS
  • Create DNS policies
  • Implement DNS policies
  • Secure Windows Server DNS
  • Implement DNSSEC

Module 5: Implement Windows Server IaaS VM network security

  • Implement network security groups and Windows IaaS VMs
  • Implement adaptive network hardening
  • Implement Azure Firewall and Windows IaaS VMs
  • Implement Windows firewall with Windows Server IaaS VMs
  • Choose the appropriate filtering solution
  • Deploy and configure Azure firewall using the Azure portal
  • Capture network traffic with network watcher
  • Log network traffic to and from a VM using the Azure portal

Module 6: Audit the security of Windows Server IaaS Virtual Machines

  • Describe Azure Security Center
  • Enable Azure Security Center in hybrid environments
  • Implement and assess security policies
  • Protect your resources with Azure Security Center
  • Implement Azure Sentinel

Module 7: Manage Azure updates

  • Describe update management
  • Enable update management
  • Deploy updates
  • View update assessments
  • Manage updates for your Azure Virtual Machines

Module 8: Create and implement application allowlists with adaptive application control

  • Describe adaptive application control
  • Implement adaptive application control policies

Module 9: Configure BitLocker disk encryption for Windows IaaS Virtual Machines

  • Describe Azure Disk Encryption and server-side encryption
  • Configure Key Vault for Azure Disk Encryption
  • Encrypt Azure IaaS Virtual Machine hard disks
  • Back up and recover data from encrypted disks
  • Create and encrypt a Windows Virtual Machine

Module 10: Implement change tracking and file integrity monitoring for Windows IaaS VMs

  • Implement Change Tracking and Inventory
  • Manage Change Tracking and Inventory
  • Manage tracked files
  • Implement File Integrity Monitoring
  • Select and monitor entities
  • Use File Integrity Monitoring

Module 11: Introduction to Cluster Shared Volumes

  • Determine the functionality of Cluster Shared Volumes
  • Explore the architecture and components of Cluster Shared Volumes
  • Implement Cluster Shared Volumes

Module 12: Implement Windows Server failover clustering

  • Define Windows Server failover clustering
  • Plan Windows Server failover clustering
  • Implement Windows Server failover clustering
  • Manage Windows Server failover clustering
  • Implement stretch clusters
  • Define cluster sets

Module 13: Implement high availability of Windows Server VMs

  • Select high-availability options for Hyper-V
  • Consider network load balancing for Hyper-V VMs
  • Implement Hyper-V VM live migration
  • Implement Hyper-V VMs storage migration

Module 14: Implement Windows Server File Server high availability

  • Explore the Windows Server File Server high-availability options
  • Define Cluster Shared Volumes
  • Implement Scale-Out File Server
  • Implement Storage Replica

Module 15: Implement scale and high availability with Windows Server VM

  • Describe virtual machine scale sets
  • Implement scaling
  • Implement load-balancing VMs
  • Create a virtual machine scale set in the Azure portal
  • Describe Azure Site Recovery
  • Implement Azure Site Recovery

Module 16: Implement Hyper-V Replica

  • Define Hyper-V Replica
  • Plan for Hyper-V Replica
  • Configure and implement Hyper-V Replica
  • Define extended replication
  • Define Azure Site Recovery
  • Implement Site Recovery from on-premises site to Azure
  • Implement Site Recovery from on-premises site to on-premises site

Module 17: Protect your on-premises infrastructure from disasters with Azure Site Recovery

  • Azure Site Recovery overview
  • Workloads supported for protection with Azure Site Recovery
  • Run a disaster recovery drill
  • Failover and failback

Module 18: Implement hybrid backup and recovery with Windows Server IaaS

  • Describe Azure Backup
  • Implement recovery vaults
  • Implement Azure Backup policies
  • Recover Windows IaaS Virtual Machines
  • Perform file and folder recovery
  • Perform backup and restore of on-premises workloads
  • Manage Azure Virtual Machine backups with Azure Backup service

Module 19: Protect your Azure infrastructure with Azure Site Recovery

  • What is Azure Site Recovery
  • Prepare for disaster recovery with Azure Site Recovery
  • Run a disaster recovery drill
  • Failover and failback using Azure Site Recovery

Module 20: Protect your virtual machines by using Azure Backup

  • Azure Backup features and scenarios
  • Back up an Azure virtual machine by using Azure Backup
  • Restore virtual machine data

Module 21: Active Directory Domain Services migration

  • Examine upgrade vs. migration
  • Upgrade a previous version of Active Directory Domain Services to Windows Server 2022
  • Migrate to Active Directory Domain Services in Windows Server 2022 from a previous version
  • Explore the Active Directory Migration Tool

Module 22: Migrate file server workloads using Storage Migration Service

  • Storage Migration Service overview and usage scenarios
  • Storage migration requirements
  • Migrate a server with Storage migration
  • Evaluate storage migration considerations

Module 23: Migrate Windows Server roles

  • Describe the Windows Server Migration Tools
  • Install the Migration Tools
  • Migrate roles using the Migration Tools

Module 24: Migrate on-premises Windows Server instances to Azure IaaS virtual machines

  • Plan your migration
  • Describe Azure Migrate
  • Perform server assessment
  • Assess physical servers with Azure Migrate
  • Migrate Windows Server workloads by using Azure Migrate

Module 25: Upgrade and migrate Windows Server IaaS virtual machines

  • Describe Azure Migrate
  • Migrate Windows Server workloads by using Azure Migrate
  • Describe storage migration
  • Migrate file servers by using Storage Migration Service

Module 26: Containerize and migrate ASP.NET applications to Azure App Service

  • Azure Migrate App Containerization overview

Module 27: Monitor Windows Server performance

  • Use Performance Monitor to identify performance problems
  • Use Resource Monitor to review current resource usage
  • Review reliability with Reliability Monitor
  • Implement a performance monitoring methodology
  • Use Data Collector Sets to analyze server performance
  • Monitor network infrastructure services
  • Monitor virtual machines running Windows Server
  • Monitor performance with Windows Admin Center
  • Use System Insights to help predict future capacity issues
  • Optimize the performance of Windows Server

Module 28: Manage and monitor Windows Server event logs

  • Describe Windows Server event logs
  • Use Windows Admin Center to review logs
  • Use Server Manager to review logs
  • Use custom views
  • Implement event log subscriptions

Module 29: Implement Windows Server auditing and diagnostics

  • Describe basic auditing categories
  • Describe advanced categories
  • Log user access
  • Enable setup and boot event collection

Module 30: Troubleshoot Active Directory

  • Recover objects from the AD recycle bin
  • Recover the AD DS database
  • Recover SYSVOL
  • Troubleshoot AD DS replication
  • Troubleshoot hybrid authentication issues

Module 31: Monitor Windows Server IaaS Virtual Machines and hybrid instances

  • Enable Azure Monitor for Virtual Machines
  • Monitor an Azure Virtual Machine with Azure Monitor
  • Enable Azure Monitor in hybrid scenarios
  • Collect data from a Windows computer in a hybrid environment
  • Integrate Azure Monitor with Microsoft Operations Manager

Module 32: Monitor the health of your Azure virtual machine by using Azure Metrics Explorer and metric alerts

  • Monitor the health of the virtual machine
  • View VM metrics
  • Configure the Azure Diagnostics extension
  • Diagnostic data case studies

Module 33: Monitor performance of virtual machines by using Azure Monitor VM Insights

  • What are Azure Monitor Logs and Azure Monitor VM Insights?
  • Build log queries by using the Kusto Query Language

Module 34: Troubleshoot on-premises and hybrid networking

  • Diagnose DHCP problems
  • Diagnose DNS problems
  • Diagnose IP configuration issues
  • Diagnose routing problems
  • Use Packet Manager to help diagnose network problems
  • Use Azure Network Watcher to help diagnose network problems

Module 35: Troubleshoot Windows Server Virtual Machines in Azure

  • Troubleshoot VM deployment
  • Troubleshoot VM startup
  • Troubleshoot VM extensions
  • Troubleshoot VM connectivity
  • Troubleshoot VM performance
  • Troubleshoot VM storage

Before attending this course, students must have:

  • Experience with managing Windows Server operating system and Windows Server workloads in on-premises scenarios, including AD DS, DNS, DFS, Hyper-V, and File and Storage Services
  • Experience with common Windows Server management tools (implied in the first prerequisite).
  • Basic knowledge of core Microsoft compute, storage, networking, and virtualization technologies (implied in the first prerequisite).
  • Experience and an understanding of core networking technologies such as IP addressing, name resolution, and Dynamic Host Configuration Protocol (DHCP)
  • Experience working with and an understanding of Microsoft Hyper-V and basic server virtualization concepts
  • Basic experience with implementing and managing IaaS services in Microsoft Azure
  • Basic knowledge of Azure Active Directory
  • Experience working hands-on with Windows client operating systems such as Windows 10 or Windows 11
  • Basic experience with Windows PowerShell
Credentials information: 

Exams Characteristics

  • Exams codes: AZ-800 and AZ-801
  • Titles: Administration of the main hybrid Windows Server infrastructure and Configuration of advanced hybrid Windows Server services
  • Duration: 120 minutes each
  • Number of questions: 40 to 60 each
  • Question format: Multiple-choice, multiple-answer, scenario-based
  • Passing score: 700 out of 1000
  • Cost: $0 (included in your training)

Exams Topics 


  • Deploy and manage Active Directory Domain Services (AD DS) in local and cloud environments
  • Manage Windows Server servers and workloads in a hybrid environment
  • Manage virtual machines and containers
  • Implement and manage a local and hybrid network infrastructure
  • Manage storage and file services
  • All details...


  • Secure local and hybrid Windows Server infrastructures
  • Implement and manage high availability in Windows Server
  • Implement disaster recovery
  • Migrate servers and workloads
  • Monitor Windows Server environments and resolve associated issues
  • All details...

Certification Overview 

The Microsoft Certified: Windows Server Hybrid Administrator Associate certification focuses on equipping IT professionals with the expertise required to manage hybrid cloud infrastructures effectively. The certification validates skills essential for facilitating operations across hybrid environments, acknowledging the significance of harmonizing on-premises and cloud resources. 

Key Responsibilities of a Windows Server Hybrid Administrator 

Professionals pursuing this certification often find themselves responsible for a diverse set of tasks. These may include implementing and managing hybrid infrastructure, overseeing virtualization, storage management, identity and access control management, network configuration, and security protocols across hybrid environments. 

Skills Validated by the Certification 

The certification exams cover a broad array of essential skills and knowledge areas. Candidates are evaluated on their proficiency in implementing and managing hybrid identities using Azure Active Directory, deploying, and managing Azure compute and networking resources, integrating on-premises Windows Server environments with Azure services, and ensuring data resilience and security across the hybrid setup. 

Benefits of Certification 

Earning the Windows Server Hybrid Administrator Associate certification offers numerous advantages. It validates an individual's expertise in managing hybrid cloud environments, enhancing career opportunities in roles focused on integrating on-premises infrastructure with cloud solutions. Additionally, it showcases proficiency in leveraging Microsoft Azure services to optimize operations and secure hybrid environments effectively. 

Conclusion: Embracing Hybrid Cloud Expertise 

The Microsoft Certified: Windows Server Hybrid Administrator Associate certification signifies a profound understanding of managing hybrid environments seamlessly. It underscores the skills required to bridge the gap between on-premises infrastructure and cloud services, enabling professionals to orchestrate and maintain resilient, secure, and efficient hybrid cloud operations. 

Common Questions about AZ-800 and AZ-801 (FAQ)

What is AZ-801? 

AZ-801 is a Microsoft certification exam evaluating candidates' proficiency in implementing Windows Server hybrid infrastructure. It covers integrating on-premises Windows Server environments with Azure services, emphasizing skills related to hybrid cloud operations, networking, security, identity, and management. 

Is AZ-801 worth it? 

The value of AZ-801 depends on individual career goals and job roles. Achieving AZ-801 certification showcases expertise in managing hybrid infrastructure, potentially benefiting professionals working with Windows Server environments and seeking to optimize operations using Azure services. It may enhance career prospects in roles involving hybrid cloud operations and Windows Server administration. 

How to pass the AZ-800 and AZ-801 exams? 

To pass the certification exams, it is crucial to have a solid understanding of Azure solution concepts and actively practice with Azure services. Following official training, consulting Microsoft documentation, and engaging in hands-on scenarios can enhance your preparation. Ensure comprehensive coverage of all exam domains and utilize reliable resources to maximize your chances of success. 

Contact us for more information on pricing::

Office: 1-888-718-9732
E-mail: info@eccentrix.ca

130, King Street West, Suite 1800
Toronto, Ontario M5X 1E3