Manage Windows Server across on-premises, hybrid, and cloud environments with AD DS, Entra Connect, Azure Arc, Hyper-V, and Defender for Cloud. 5-day official course aligned to Exam AZ-802, replacing AZ-800 and AZ-801.

👥 2 Enrolled ⏱️ 5 Days 💼 Intermediate Level ⭐ 5 ( 1 ) Reviews

500+Courses

10+ YrsExperience

95K+Global Learners

Live Online (Public Batch)

Instructor-led group class, fixed schedule

USD 2595

Private Group

Train your whole team, on your dates

Custom Quote

For Teams

Proceed to Buy Request Info

📄 Download Course PDF

100% Satisfaction Guarantee · Guaranteed to Run · Secure Payment

Course Overview

Windows Server administration stopped being an on-premises job some time ago. The servers are still there, but so are the Azure VMs, the hybrid identity sync, the cloud-tiered file shares, and the patching that now runs through Azure Update Manager. AZ-802T00 is Microsoft's course for that reality, and it replaces the two-course AZ-800 and AZ-801 path with a single five-day programme.

Across those five days you will learn to deploy, manage, secure, monitor, and troubleshoot Windows Server workloads wherever they run. The course goes deep on Active Directory Domain Services, covering domain controllers on-premises and in Azure VMs, FSMO roles, schema management, trusts, ESAE forests, Group Policy, and hybrid identity through Microsoft Entra Connect and Entra Domain Services.

From there it moves through hybrid management with Azure Arc, Just Enough Administration, and Azure Automation; virtualization covering Hyper-V, shielded VMs, guarded fabric, live migration, and Azure virtual machine scale sets; networking across DNS, DHCP, IPAM, DNSSEC, and Azure networking; storage including Azure File Sync with cloud tiering, Storage Spaces Direct, Data Deduplication, iSCSI, and Storage Replica; and security spanning LAPS, Defender for Endpoint, Defender for Cloud, Entra identity protection, and Zero Trust.

The final stretch is monitoring and troubleshooting, which is where the course earns its keep. Performance Monitor, System Insights, event log subscriptions, auditing, Packet Monitor, Network Watcher, Azure VM diagnostics, AD recycle bin recovery, SYSVOL recovery, and replication troubleshooting all get proper coverage.

The course prepares you for Exam AZ-802 and the Microsoft Certified: Windows Server Administrator Associate credential.

Mode of Training

🏫 Classroom 💻 Live Online 🧪 Blended 👨‍👩‍👧‍👦 Private Group

Upcoming Schedules

Start Date	Time	Duration	Mode	Price
Sep 14, 2026	9:00 am - 5:00 pm	5 Days	online	$2595	GTR
Sep 28, 2026	9:00 am - 5:00 pm	5 Days	online	$2595	GTR
Oct 05, 2026	9:00 am - 5:00 pm	5 Days	online	$2595	GTR
Oct 19, 2026	9:00 am - 5:00 pm	5 Days	online	$2595	GTR
Nov 02, 2026	9:00 am - 5:00 pm	5 Days	online	$2595	GTR

+ View more schedules

What you will learn

Deploy and manage Active Directory Domain Services
Manage Windows Server instances and workloads in hybrid environments
Deploy, configure, and manage Hyper-V and Azure virtual machines
Implement and manage on-premises and hybrid networking infrastructure
Configure and manage Windows Server storage and file services
Secure and harden Windows Server infrastructure and workloads
Administer environments using Windows Admin Center, PowerShell, and Azure Arc
Monitor environments using Azure Monitor and Azure Update Manager
Apply security capabilities through Microsoft Defender for Cloud
Monitor and troubleshoot workloads across on-premises, hybrid, and cloud environments

Who Should Attend This Course?

Windows Server administrators who deploy, implement, manage, and troubleshoot Windows Server as a workload in on-premises, cloud, or hybrid environments. In this role you handle identity, security, compute, networking, storage, and monitoring, and you work alongside architects, administrators, and engineers.

The course also suits:

Infrastructure engineers extending on-premises skills into hybrid and cloud management
System administrators preparing for the Windows Server Administrator Associate certification
Anyone who was working toward AZ-800 or AZ-801 and needs the replacement path

Prerequisites

Experience administering Windows Server and Windows Server workloads.

That is Microsoft's stated requirement, and it is deliberately broad. In practice you will get far more from the course if you also bring:

Working knowledge of Active Directory Domain Services
Familiarity with virtualization and virtual machine management
Networking fundamentals including TCP/IP, DNS, and DHCP
Basic comfort with PowerShell and the Azure portal

The course does not teach Windows Server from scratch. It assumes you already administer it and want to extend that into hybrid and cloud environments.

📞 Talk to a Learning Advisor

Exam and Certification

This course prepares you for Exam AZ-802: Administering Windows Server, leading to the Microsoft Certified: Windows Server Administrator Associate credential.

Exam duration: 120 minutes
Passing score: 700 out of 1000
Format: multiple choice, case studies, and lab-based questions
Renewal: annually, through a free online assessment on Microsoft Learn

The exam is booked and paid for separately from the course.

Important: the AZ-800 and AZ-801 transition

AZ-802 replaces both AZ-800 and AZ-801, which retire on 30 September 2026. After that date those exams can no longer be taken, and AZ-802 becomes the only route to the credential.

If you already hold Windows Server Hybrid Administrator Associate, your credential stays valid and annual renewal is unaffected.

If you have passed one of the two exams but not the other, you have a narrow window to finish the old path. Weigh that against preparing for AZ-802 instead.

If you have not started, AZ-802 is the path. There is no sense beginning a two-exam route that closes within weeks.

The certification name changed as well. It was Windows Server Hybrid Administrator Associate, and it is now Windows Server Administrator Associate.

📘 AZ-802T00: Administer Windows Server Outline

Domain controllers. Define AD DS, forests, and domains. Deploy domain controllers, migrate a domain controller to a new site, and manage operations masters.

Azure IaaS domain controllers. Choose an approach for directory and identity services in Azure, deploy and configure domain controllers in Azure VMs, install a replica domain controller in an Azure VM, and install a new forest on an Azure VNet.

Domain controllers and FSMO roles. Maintain domain controllers, manage the Global Catalog role, manage operations masters, and manage the AD DS schema.

Active Directory objects. Define users, groups, computers, and organizational units. Create and configure objects, manage properties, and perform bulk user account tasks.

Hybrid identity with Windows Server. Select a Microsoft Entra integration model and plan for it. Prepare on-premises AD for directory synchronization, install and configure Microsoft Entra Connect, implement Seamless Single Sign-On, and enable Entra login for Windows VMs in Azure. Implement and configure Microsoft Entra Domain Services, then join a Windows Server VM to a managed domain.

Group Policy. Define GPOs, scope, and inheritance. Create and configure domain-based GPOs, configure domain and fine-grained password policies, define GPO storage, and work with administrative templates.

Advanced AD DS. Create trust relationships, implement ESAE forests, create custom AD DS partitions, and monitor and troubleshoot AD DS.

Administration tools. Windows Admin Center, Server Manager, Remote Server Administration Tools, and PowerShell, including remote administration.

Just Enough Administration. Define role capabilities for a JEA endpoint, create session configuration files, and connect to a JEA endpoint.

Secure administration. Least privilege administration, delegated privileges, privileged access workstations, and jump servers.

PowerShell remoting. One-to-one and one-to-many remoting, sending parameters to remote computers, scope modifiers, and multi-hop remoting.

Azure Arc. Onboard Windows Server instances, connect hybrid machines to Azure, manage instances through Arc, and restrict access with RBAC.

Azure Update Manager. Enable update management, deploy updates, view assessments, and manage updates for Azure virtual machines.

Automation and configuration. Azure Automation with DSC, remediating noncompliant servers, Custom Script Extensions, Azure Machine Configuration with built-in security baselines and custom configurations, automation accounts, runbooks, webhooks, source control integration, and PowerShell workflows.

Hyper-V virtual machines. Configuration and generation versions, VHD formats and types, creating and configuring VMs, storage options, shared VHDs and VHD Sets, and guest clusters using shared VHDX.

Hyper-V hosts. Hyper-V Manager, host configuration best practices, Hyper-V networking and advanced networking features, and nested virtualization.

Securing Hyper-V workloads. Guarded fabric, Host Guardian Service, TPM-trusted attestation, Key Protection Service, and implementing shielded VMs.

High availability. High-availability options for Hyper-V, network load balancing, live migration, and storage migration.

Azure virtual machines. Azure compute and VM storage, deploying VMs through the portal, Azure CLI, and templates, plus management optimization options.

Scale and resilience. Virtual machine scale sets, scaling, load balancing, and Azure Site Recovery.

IaaS VM networking and security. Virtual networks, IP addressing and routing, static and private IPs, IPv6, network security groups, Azure Firewall, Windows Firewall, traffic capture with Network Watcher, and remote administration through Azure Bastion with just-in-time access.

Windows Server DNS. DNS architecture, zones and records, installing and configuring the DNS role, and DNS forwarding.

DNS in Azure. Azure DNS, DNS for IaaS virtual machines, split-horizon DNS in Azure, and DNS troubleshooting.

Securing DNS. DNS policies, DNSSEC, and hardening Windows Server DNS.

DHCP. Installing and configuring the DHCP role, options, scopes, high-availability choices, and DHCP failover.

IP Address Management. Deploying and administering IPAM, configuring options, and managing DNS zones and DHCP servers through IPAM.

Hybrid file server infrastructure. Azure File services and Azure Files connectivity, Azure File Sync deployment, cloud tiering, and migrating from DFSR to Azure File Sync.

Windows Server file servers. The Windows Server file system, File Server Resource Manager, SMB and its security considerations, SMB protocol configuration, and Volume Shadow Copy Service.

Storage Spaces and Storage Spaces Direct. Architecture, components, use cases, and implementation of both.

Data Deduplication. Architecture and components, use cases and interoperability, implementation, and ongoing maintenance.

iSCSI. Components and use cases, implementation considerations, and configuring high availability.

Storage Replica. Functionality and prerequisites, then implementation through both Windows Admin Center and PowerShell.

Hardening Windows Server. Local Administrator Password Solution, privileged access workstations, securing domain controllers, the Security Compliance Toolkit, and securing SMB traffic.

Microsoft Defender for Endpoint. Key capabilities, Windows Defender Application Control and Device Guard, Application Guard, Exploit Guard, and System Guard.

Defender on Windows clients. Windows Security Center, Credential Guard, Defender Antivirus, and Windows Defender Firewall with Advanced Security.

Active Directory security. User account rights and restrictions, delegating permissions, the Protected Users group, Credential Guard, blocking NTLM authentication, and locating problematic accounts.

Identity and access controls. Securing Entra users and groups, external identities, Entra Identity Protection, Entra Connect and Cloud Sync, password hash synchronization, pass-through authentication, federation, multifactor authentication, Kerberos and NTLM, passwordless authentication, password protection, single sign-on, Entra Verified ID, Azure and Entra role-based access control, management groups, Zero Trust, Privileged Identity Management, identity governance and lifecycle workflows, entitlement management, access reviews, and Conditional Access.

Security monitoring and governance. Microsoft Defender for Cloud and its usage scenarios, Azure Policy, initiatives, resource locks, and Defender for Identity.

Monitoring virtual machines and hybrid instances. Azure Monitor for virtual machines, monitoring in hybrid scenarios, collecting data from Windows computers in hybrid environments, host metrics through Metrics Explorer, client performance counters with VM insights, and client event log collection.

Windows Server performance. Performance Monitor, Resource Monitor, Reliability Monitor, a performance monitoring methodology, Data Collector Sets, monitoring network infrastructure services and virtual machines, Windows Admin Center performance monitoring, System Insights for capacity prediction, and performance optimization.

Event logs, auditing, and diagnostics. Reviewing logs through Windows Admin Center and Server Manager, custom views, event log subscriptions, basic and advanced auditing categories, logging user access, and setup and boot event collection.

Troubleshooting networking. Diagnosing DHCP, DNS, IP configuration, and routing problems, plus Packet Monitor and Azure Network Watcher.

Troubleshooting Azure virtual machines. Deployment, startup, extensions, connectivity, performance, and storage issues.

Update management. Windows Update, WSUS deployment options, and the update management process.

Troubleshooting Active Directory. Recovering objects from the AD recycle bin, recovering the AD DS database and SYSVOL, troubleshooting AD DS replication, and resolving hybrid authentication issues.

❓ Frequently Asked Questions

Microsoft consolidated them into a single exam. Both retire on 30 September 2026, and AZ-802 replaces them. The courses consolidated too, so AZ-802T00 covers in five days what previously took two separate courses. Some of the older disaster recovery and migration content was trimmed in the process.

That depends on how ready you are. If you can sit AZ-801 comfortably before the end of September, finishing the old path is reasonable. If you would be cramming, preparing properly for AZ-802 is a better use of your time and money. Both routes earn the same credential.

No. If you hold Windows Server Hybrid Administrator Associate it stays valid, and it renews annually through the free Microsoft Learn assessment as before. The exam consolidation does not affect renewal.

Azure runs through most of it, but as a management layer rather than a separate subject. You will use Azure Arc to manage on-premises servers, Azure Update Manager for patching, Azure Monitor for telemetry, Defender for Cloud for protection, and Azure File Sync for hybrid storage, alongside running Windows Server on Azure virtual machines. If your environment is purely on-premises today, this is the least familiar and most valuable part of the course.

Basic familiarity with the Azure portal is enough, and no Azure certification is required. Solid hands-on Windows Server administration matters more, since the hybrid material builds on that foundation.

Substantially. Alongside AD DS, it covers Microsoft Entra Connect, Entra Cloud Sync, Entra Domain Services, Seamless SSO, passwordless authentication, Conditional Access, Privileged Identity Management, and Entra ID governance. Hybrid identity is one of the largest themes in the course.

Yes. The labs run in a hybrid environment that connects on-premises servers with the Azure portal, so exercises reflect how these tools are used together rather than in isolation.

Still have questions?

Reach out to our learning advisors for personalized guidance on choosing the right course, group training, or enterprise packages.

📞 Talk to an Advisor

What You Get with Microtek Learning

Instructor-Led Excellence

✓ Certified Instructor-led Training
✓ Top Industry Trainers
✓ Official Student Handbooks

Measurable Learning Outcomes

✓ Pre- & Post-Training Assessments
✓ Practice Tests
✓ Exam-Oriented Curriculum

Real-World Skill Building

✓ Hands-on Activities & Scenarios
✓ Interactive Online Courses
✓ Peer Collaboration (Not in self-paced)

Full Support & Perks

✓ Exam Scheduling Support ^*
✓ Learn & Earn Program ^*
✓ Support from Certified Experts
✓ Gov. & Private Pricing ^*

Our Clients

For over 10 years, Microtek Learning has helped organizations, leaders, students and professionals to reach their maximum potential. We have led the path by addressing their challenges and advancing their performances.