Configuring Windows Server Hybrid Advanced Services (AZ-801)

For IT leaders: Hybrid Windows estates fail in predictable places: unpatched cluster nodes, untested backups, stalled migrations, and Active Directory replication issues nobody can diagnose quickly. This course gives your Windows Server team a shared playbook for securing, clustering, protecting, migrating, and troubleshooting Windows Server 2025 workloads across on-premises and Azure.

• Role fit: Built for system engineers and cloud ops staff who already patch, script, and troubleshoot Windows Server. It is intermediate level, not an onboarding course. Pair it with AZ-800 for newer admins.
• Time investment: About 20 hours across 23 skills of roughly 45–60 minutes each. Several skills include scenario-based challenge reviews, so plan focused time for configuration review, troubleshooting, and reinforcement.
• Risk and resilience: The course covers GPO and OSConfig baselines, Credential Guard, domain isolation, BitLocker-style storage encryption, Azure VM backup configuration, Recovery Services backup policy and retention, and Hyper-V and failover cluster scenarios. These topics map directly to DR and audit conversations.
• Change management: Domain isolation and forest migrations are presented as staged, multistep rollouts, which helps your team plan changes without disrupting production. Defender for Cloud and Sentinel are covered at an orientation level; deeper security work belongs in AZ-500.

Scenario-based challenge reviews close many skills to reinforce troubleshooting. Use Playlists to assign the security, DR, or migration track your team needs, and use Team Reporting to track progress. Microsoft retired the AZ-801 exam on 30 September 2026.

IT teams complete this training to keep hybrid Windows Server environments running when something breaks, whether that is a failed host, a stalled domain controller, or a revenue-generating website that goes offline. The course works through scenarios your engineers face on the job. A file server bottlenecks during nightly backup jobs. AD replication fails between sites because an IPSec tunnel or MPLS route is down. A stretch cluster across two Azure VNets throws errors during setup. A help desk team needs scoped OU permissions without being handed domain admin.

• Faster recovery, fewer outages: Engineers configure Hyper-V replication and Azure Site Recovery to meet recovery time objectives (RTOs). They also configure backups and recovery for Azure VMs so data can be restored to an earlier point in time.
• Resilient workloads: Team Leads gain admins who can build workgroup, domain, and Azure stretch failover clusters with PowerShell and Storage Spaces Direct. Those admins can also patch cluster nodes and pull nodes for maintenance without taking services down.
• Lower-risk migrations: Practitioners work through hybrid migration scenarios for VMs, storage, web apps, AD DS, and server roles. That includes storage migrations with Windows Admin Center, web app migration considerations for Azure App Service, and cross-forest moves with ADMT.
• Stronger security posture: Teams harden servers with GPO and OSConfig, apply application control and Credential Guard, plan domain isolation, and see where Defender for Cloud and Sentinel fit in a hybrid environment.

Each skill ends with challenge scenarios that reinforce troubleshooting judgment. This preparation helps teams diagnose problems methodically under pressure.

Knowledge

• How to harden Windows Server with Group Policy (password policies, user rights assignments) and newer tools like OSConfig, plus Windows Defender features such as application control policies and Credential Guard
• How domain isolation works, including requiring authentication and optional encryption between domain-joined devices with Windows Defender Firewall
• Where Microsoft Defender for Cloud and Microsoft Sentinel fit in protecting hybrid environments
• How backups, replication, and high availability differ, and how each one maps to recovery time objectives (RTO) and recovery point objectives (RPO)
• Failover cluster design choices, including SAN/iSCSI shared storage, domain-joined cluster configurations, and hybrid or cloud failover scenarios
• Migration paths for VMs, storage, web apps, AD DS, and Windows roles to Windows Server 2025 and Azure

Ability

• Implement and manage failover clusters for Windows Server environments, including shared-storage configurations and hybrid/cloud failover considerations
• Protect workloads with Azure Backup, Microsoft Azure Backup Server for VMware VMs, Hyper-V Replica, and Azure Site Recovery
• Plan and perform migrations for VMware and Hyper-V VMs, move storage with Windows Admin Center, and migrate AD DS environments to Windows Server 2025
• Delegate Active Directory administration, such as password resets for help desk staff, without granting domain admin rights
• Monitor servers with Performance Monitor data collector sets, Event Viewer, Azure Monitor, and VM Insights
• Troubleshoot AD replication with repadmin and diagnose Azure VM deployment, networking, and storage problems