AZ-800
Administering Windows Server Hybrid Core Infrastructure
AZ-800 Exam Guide: Administering Windows Server Hybrid Core Infrastructure
AZ-800 validates the ability to administer Windows Server across on-premises and hybrid environments, including Active Directory Domain Services, Azure-connected management, virtual machines, networking, storage, and file services. It serves Windows Server administrators who manage these workloads and collaborate with architects, engineers, and other administrators. This guide helps you decide whether your current experience is sufficient, which skills to study first, how to use Microsoft’s blueprint, and what to check before scheduling an exam that Microsoft says will retire on September 30, 2026, at 5:00 PM Central Standard Time.
What does AZ-800 validate?
AZ-800 tests operational administration rather than isolated product recognition. Microsoft describes the role as deploying, implementing, managing, and troubleshooting Windows Server in Azure, on-premises networks, and hybrid environments, including migration and workload deployment to Azure.
The exam title is Administering Windows Server Hybrid Core Infrastructure. Its scope covers identity, security, management, compute, networking, storage, monitoring, high availability, and disaster recovery for Windows Server. The named technical tools include Windows Admin Center, PowerShell, Azure Arc, Azure Policy, Azure Monitor, Azure Update Manager, Microsoft Defender for Identity, Microsoft Defender for Cloud, and Azure IaaS virtual-machine administration.
A useful way to interpret the scope is to ask how a Windows Server workload is administered across boundaries. You should be able to connect an administrative objective with the appropriate Windows Server or Azure service, understand the effect of configuration choices, and recognize how identity, connectivity, storage, and management interact. That is a better study lens than memorizing isolated feature descriptions.
What kind of administrator is the exam aimed at?
Microsoft’s audience profile is a candidate responsible for administering Windows Server as a workload in both on-premises and hybrid environments. Microsoft recommends several years of experience with Windows Server operating systems, so candidates with only introductory Azure exposure should not treat the exam as an entry-level Azure test.
The certification page places the role alongside collaboration with architects, administrators, and engineers. That matters because many scenarios require an administrator to implement a design or select an operational approach without being the person who created the overall architecture.
Use your own work history as an early readiness test. If you can explain how your organization manages domain controllers, remote administration, virtual machines, network services, and file services, you have a practical base. If those areas are mostly theoretical, plan for hands-on learning rather than relying only on reading.
Is AZ-800 enough for the associate certification?
No. AZ-800 is one of two required exams for Microsoft Certified: Windows Server Hybrid Administrator Associate. AZ-801, Configuring Windows Server Hybrid Advanced Services, is the other required exam.
AZ-801 covers advanced areas such as securing Windows Server on-premises and hybrid infrastructures, high availability, disaster recovery, server and workload migration, and monitoring and troubleshooting. AZ-800 establishes the core infrastructure foundation; it does not complete the associate certification by itself.
If your immediate objective is the certification, include the AZ-801 requirements in your planning. If your immediate objective is only AZ-800, keep the advanced topics in view but prioritize the AZ-800 skills measured page and avoid allowing AZ-801 material to displace core preparation.
Which skills carry the most weight?
The current AZ-800 blueprint has five domains. Active Directory Domain Services is the largest domain at 30–35% of the questions, while hybrid Windows Server management is the smallest at 10–15%. The remaining three domains—virtual machines and containers, hybrid networking, and storage and file services—are each listed at 15–20%.
The English-language version was updated on January 21, 2026. Use the study guide version that matches your exam timing, because Microsoft provides skills-measured objectives for different update periods and states that English updates first.
The percentages are planning signals, not a promise about an individual exam form. They should influence study time, but they should not justify ignoring a domain. A candidate can lose readiness through a weak 15–20% area just as easily as through incomplete AD DS knowledge.
Active Directory Domain Services: 30–35%
Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments accounts for 30–35% of the questions. This is the first study priority because it combines the largest blueprint share with dependencies that affect identity, authentication, administration, and hybrid integration.
The Microsoft readiness episode organizes this area around deploying and managing domain controllers, configuring multi-site, multi-domain, and multi-forest environments, creating and managing AD DS security principals, implementing hybrid identities, and managing Windows Server with domain-based Group Policy.
Study this domain as a connected operating model. For each topic, be able to explain the purpose of the configuration, the administrative consequence, and the condition that would make another approach more suitable. Build a small written decision table for domain-controller placement, site configuration, security principals, hybrid identity, and Group Policy.
Hybrid Windows Server management: 10–15%
Manage Windows Servers and workloads in a hybrid environment accounts for 10–15% of the questions. The readiness material emphasizes configuring remote management for Windows Servers in a hybrid environment and managing Windows Servers and workloads by using Azure services.
The Microsoft learning path includes secure administration, administration tools, post-installation configuration, remote management of Windows Server IaaS virtual machines, Azure Arc, Azure Policy, role-based access control for Log Analytics data, and Just Enough Administration. These subjects give the domain practical depth beyond the percentage alone.
Do not study Azure Arc, Windows Admin Center, PowerShell, and policy as unrelated names. For each tool, write down the management problem it addresses, what resource or server it reaches, and what access control or operational limitation matters. This approach helps with scenario questions that ask for the most appropriate administrative method.
Virtual machines and containers: 15–20%
Manage virtual machines and containers accounts for 15–20% of the questions. The official exam page identifies this as a distinct domain, so preparation should cover both the Windows Server administration implications of virtualized workloads and the relevant hybrid operating context.
Keep this domain tied to administration decisions: how a workload is deployed, how it is managed remotely, how its connectivity and storage are provided, and how the chosen location affects operations. Separate the Windows Server task from the Azure control-plane task in your notes so that you do not confuse a guest operating-system action with an Azure resource action.
Use the blueprint and study guide as the authority for the current subobjectives. Where your experience is limited to traditional virtual machines, deliberately identify container concepts that you cannot explain and study those before relying on practice questions.
On-premises and hybrid networking: 15–20%
Implement and manage an on-premises and hybrid networking infrastructure accounts for 15–20% of the questions. The domain requires you to connect Windows Server administration with hybrid connectivity and the network conditions that allow users, administrators, and workloads to communicate.
Prepare by mapping each network scenario to its dependency: name resolution, addressing, routing, remote administration, identity, or service access. Then ask what would fail if that dependency were absent. This is more useful than collecting commands without understanding the traffic path.
Keep a separate troubleshooting checklist for on-premises and hybrid symptoms. Record the evidence you would inspect first, the configuration boundary where the fault may exist, and the least disruptive corrective action. These are practical recommendations, not a substitute for the current Microsoft skills outline.
Storage and file services: 15–20%
Manage storage and file services accounts for 15–20% of the questions. Microsoft explicitly identifies storage and file services as an AZ-800 measurement area, making it a core infrastructure domain rather than an optional extension of virtual-machine study.
Study storage and file services through workload requirements: capacity, access, permissions, availability, administration location, and hybrid integration. When reviewing a design, distinguish storage configuration from file access control and distinguish a server-side operation from an Azure service operation.
Create comparison notes using the exact terms in the Microsoft study guide. For each service or feature, record what it stores, who manages it, how clients reach it, and which identity or permission model governs access. Avoid adding undocumented limits or performance claims to your notes.
How should you prepare if you already administer Windows Server?
Start with the blueprint, not with a generic Azure course. Mark every subobjective as able to explain, able to perform, or unfamiliar, then use hands-on work to close the unfamiliar and explain-only gaps. Experienced administrators should spend extra time on hybrid boundaries, Azure management tools, and any domain outside their normal job.
Microsoft’s AZ-800 course is an intermediate course for IT professionals who have experience working with Windows Server and want to extend on-premises environments with hybrid technologies. The course teaches identity, management, compute, networking, and storage in a Windows Server hybrid environment and is available through instructor-led or self-paced preparation.
A strong sequence is: baseline assessment, AD DS, hybrid administration, virtual machines and containers, networking, storage and file services, then mixed review. Revisit the domains in blueprint order only when your diagnostic shows that order matches your weaknesses.
Use work experience as evidence, not as a shortcut
Work experience can reduce the amount of basic orientation you need, but it does not prove coverage of the entire exam. An administrator who mainly manages AD DS may still be weak in Azure Arc, hybrid networking, containers, or Azure IaaS virtual-machine administration.
For every blueprint statement, write one sentence explaining the task and one sentence describing how you would verify the result. If you cannot provide both, classify the topic as a study gap. This simple test exposes recognition-based knowledge that may not transfer to a scenario.
Do not assume that a familiar product name means complete readiness. Microsoft lists several tools and services together because the role involves choosing and combining them. Study the boundary between tools, especially where a Windows Server action and an Azure service action meet.
Use a lab with a defined question
Hands-on preparation works best when each exercise answers an operational question. Instead of clicking through a product, choose a task such as configuring secure remote administration, applying a policy to a hybrid server, or managing a file service, then record the prerequisites, action, validation, and rollback considerations.
Microsoft’s learning path includes modules for secure administration, administration tools, post-installation configuration, remote management of Windows Server IaaS virtual machines, Azure Arc, and Just Enough Administration. Use those modules to structure exercises rather than building an unbounded lab.
If you use Azure resources, monitor your account and remove resources when the exercise is complete. Microsoft’s learning path presents account options including pay as you go and Azure free for up to 30 days; confirm current availability and terms on Microsoft Learn before creating resources.
Turn mistakes into a revision system
A missed practice item should produce a correction note, not just a lower score. Record the requirement, the option you selected, the evidence that disproved it, and the rule you will apply next time. Revisit the note after studying the relevant Microsoft objective.
Microsoft provides a free practice assessment and an exam sandbox. Use the practice assessment to expose knowledge gaps and the sandbox to become familiar with the exam environment; neither should be treated as a source of live exam questions or as proof that memorization guarantees a pass.
Group mistakes by domain and by cause. Useful categories include missing prerequisite, wrong tool, wrong scope, incorrect identity assumption, and failure to validate an operational outcome. The category tells you how to revise more effectively than the raw result alone.
What is a practical AZ-800 study roadmap?
A roadmap should end with demonstrable capability in every domain, not merely completed videos. Begin by establishing the current blueprint version and a personal diagnostic, then study the largest domain, build hybrid management context, cover the three mid-weight domains, and finish with mixed scenario review and scheduling checks.
The roadmap below is a sequence of study phases rather than a promised timetable. Choose the length of each phase according to your experience and available practice time. Keep the official study guide open throughout, because Microsoft updates exams to reflect role requirements.
Phase 1: establish scope and readiness
Open the AZ-800 exam page and study guide, confirm the skills-measured date, and list the five domains with their labels and percentages. Mark your experience with AD DS, hybrid administration, virtual machines and containers, networking, and storage and file services.
Next, take Microsoft’s free practice assessment if appropriate and review the exam sandbox. Treat the results as a diagnostic. Create a gap register with three columns: objective, evidence of competence, and next lab or reading task.
Decide whether you need foundational study first. Microsoft’s learning path lists Windows Server 2012 or Windows Server 2016, basic security best practices, Windows client operating systems such as Windows 10, command-line tools, and basic experience implementing and managing Azure IaaS services as prerequisites.
Phase 2: build the AD DS foundation
Study the 30–35% AD DS domain before moving to the smaller domains. Cover domain controllers, multi-site, multi-domain, and multi-forest environments, security principals, hybrid identities, and domain-based Group Policy using the official readiness material and study guide.
For each topic, practice explaining a deployment or management decision and how you would validate it. Include dependencies such as connectivity, name resolution, permissions, and administrative scope in your notes. Avoid studying Group Policy as a list of settings; focus on management intent and scope.
Finish this phase with a short closed-book explanation of how identity flows between on-premises and cloud environments. If your explanation relies on vague phrases such as ‘the service handles it,’ return to the relevant objective and document the actual administrative responsibility.
Phase 3: connect Windows Server to Azure management
Study the 10–15% hybrid Windows Server management domain after the AD DS foundation. Focus on remote management, Windows Server administration tools, Azure Arc, Azure Policy, Azure Monitor, Azure Update Manager, and the security and access concepts identified in Microsoft’s resources.
Use the learning path’s modules on secure administration, remote management of Windows Server IaaS virtual machines, Azure Arc, and Just Enough Administration to create targeted exercises. For every exercise, identify whether the control is local to Windows Server, applied through an Azure service, or dependent on both.
At the end of this phase, create a one-page tool-selection map. It should answer which tool you would consider for a stated management problem and what prerequisite or access boundary could prevent it from working.
Phase 4: cover compute, networking, and storage
Study virtual machines and containers, hybrid networking, and storage and file services as separate domains, then combine them in scenario notes. Each domain is listed at 15–20%, so none should be left for a final skim.
For compute, distinguish guest administration from Azure resource administration. For networking, trace the path between users, servers, Azure resources, and administrative endpoints. For storage and file services, connect access requirements with permissions, management location, and workload needs. These distinctions help prevent category errors during review.
Use a repeatable lab record: objective, starting state, configuration, validation evidence, failure introduced for testing, and cleanup. The point is not to reproduce exam content; it is to build the reasoning needed to select and verify an operational solution.
Phase 5: perform a mixed readiness review
A final review should mix domains because production problems rarely arrive in blueprint order. Start with an identity or management requirement, add a network or storage constraint, and explain how the chosen Windows Server or Azure service would be administered and validated.
Return to every gap in your register. A topic is ready when you can explain its purpose, identify prerequisites, perform or outline the configuration, and diagnose a plausible failure. If you can only recognize terminology, continue studying that topic.
Use the current Microsoft study guide for final scope control. Microsoft notes that most questions cover generally available features, although preview features may appear when they are commonly used. Do not expand preparation into every preview feature you encounter.
How do you schedule AZ-800 correctly?
Schedule only after checking the current exam page, the language you need, the provider options shown for your account, and the retirement notice. Microsoft says AZ-800 can generally be taken online or at a local test center when those options are available, but the actual choices are presented during registration.
The current listed passing score is 700. Microsoft lists English, Japanese, Chinese (Simplified), German, French, Spanish, and Portuguese (Brazil) as AZ-800 languages. If the exam is not available in your preferred language, Microsoft says you can request an additional 30 minutes.
Use a personal Microsoft account for your Learn profile. Microsoft warns that registering with an organizational account can cause exam records to be lost and unrecoverable if you leave the organization.
Choose the provider and delivery method
From the certification or exam details page, select the schedule option and review the provider choices. Microsoft instructs candidates taking certification exams independently or as part of a training program to select Pearson VUE; students, academic-institution members, and Microsoft Office Specialist candidates use Certiport when that option applies.
For an online exam, complete the provider’s system pre-check before committing to that delivery method. Microsoft states that online proctored exams require the computer and testing area to meet security standards, and that Certiport does not offer online proctored exams at this time.
If no online option appears, Microsoft says it is not available from the exam provider. In that situation, select an available test-center option or review the provider’s instructions rather than assuming an online appointment will become available.
Check timing, language, and cost at registration
Microsoft states that certification exams can be scheduled no more than 90 days in advance and that a maximum of two Microsoft Certification exams can be scheduled at a time through Pearson VUE. Confirm the live appointment rules and availability in your Learn profile before choosing a date.
Microsoft lists the U.S. AZ-800 price as $165, while also stating that the actual price depends on the country or region where the exam is proctored. Confirm the exact price with the exam provider before registering; do not use the U.S. figure as a universal fee.
The English version was updated on January 21, 2026, and Microsoft says localized versions may be updated approximately eight weeks after the English version. Check the schedule page for the language version actually offered and review the applicable study-guide objectives.
Plan around the retirement notice
Microsoft states that AZ-800 will retire on September 30, 2026, at 5:00 PM Central Standard Time. If you need AZ-800 to count toward the Windows Server Hybrid Administrator Associate certification, complete it before the retirement date and verify the current certification requirements on Microsoft Learn.
Do not set a personal deadline equal to the final published date. Leave room for appointment availability, a reschedule, language or accommodation requests, and a second preparation attempt if your result is not passing. Those are planning recommendations, not Microsoft scheduling guarantees.
After retirement, Microsoft directs candidates to refer to the related certification for exam requirements. Recheck the official certification and exam pages before making a late-stage purchase or study commitment.
What preparation mistakes should you avoid?
The most damaging mistakes are usually scope and verification errors: studying only familiar Windows Server tasks, treating Azure tool names as sufficient knowledge, ignoring the updated blueprint, and using unofficial material as if it were authoritative. A disciplined study record keeps preparation tied to the role and the current Microsoft objectives.
Avoid any resource that claims leaked questions, exam dumps, or guaranteed passing through memorization. Such material does not replace the operational understanding AZ-800 is designed to assess and may reflect an outdated exam version.
Do not confuse a practice assessment result with a certification result. Use it to choose the next study action, then demonstrate the underlying skill through explanation, configuration planning, or a controlled lab exercise.
Do not over-study the largest domain
AD DS deserves priority because Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments is 30–35% of the questions, but that weight does not make the other domains optional. A candidate can prepare deeply for identity and still have a material gap in networking, storage, compute, or hybrid management.
Set a minimum evidence standard for every domain. For example, require a written explanation, a relevant Microsoft Learn activity, and a validation plan before marking an objective complete. This is a practical recommendation for balanced readiness, not an official scoring rule.
Do not study an old objective set blindly
Microsoft says the English-language version was updated on January 21, 2026 and provides two versions of the skills-measured objectives depending on when the candidate is taking the exam. Check the study guide’s current version before using notes, videos, or course material created earlier.
The official readiness episodes remain useful for organizing the five high-level topics, but the study guide and exam page should control final scope. Compare your notes against those pages and remove unsupported assumptions about features, question formats, or delivery details.
Do not neglect account and appointment details
A technically ready candidate can still create avoidable problems by using the wrong Microsoft account, failing to request accommodations before scheduling, or assuming an online option exists. Microsoft recommends a personal MSA account and says accommodation requests should be made before scheduling so the provider has time to review them.
Before paying, verify your legal name in the Learn profile against your legal identification, confirm provider and delivery method, check language, review the appointment details, and save the confirmation. These checks are practical safeguards based on the official registration workflow.
What should you do next?
Open the current AZ-800 study guide and write the five labeled domains into a readiness checklist. Mark your AD DS, hybrid management, compute, networking, and storage experience honestly, then select one Microsoft resource and one practical exercise for your weakest domain.
If the retirement timeline affects your plan, review the official exam and certification pages before scheduling. If your fundamentals are incomplete, begin with the Microsoft learning path or the AZ-800T00 course rather than rushing directly to practice questions.
Your next decision is simple: either schedule after confirming scope, delivery, language, account, and timing, or create a focused gap plan and revisit readiness after you can explain and validate each weak objective.
Conclusion
AZ-800 preparation is strongest when it mirrors the administrator’s real responsibility: connect Windows Server operations with identity, Azure management, compute, networking, storage, and hybrid constraints. Use the current Microsoft blueprint to allocate attention, use labs and correction notes to turn recognition into capability, and verify registration details directly with Microsoft and the exam provider. Because Microsoft has published a retirement date, include the current status and certification requirements in your scheduling decision rather than relying on older study material.
Related exams
- AZ-801 exam — Configuring Windows Server Hybrid Advanced Services
- AZ-104 exam — Microsoft Azure Administrator
- AZ-140 exam — Configuring and Operating Windows Virtual Desktop on Microsoft Azure
- AZ-120 exam — Planning and Administering Microsoft Azure for SAP Workloads
- AZ-305 exam — Designing Microsoft Azure Infrastructure Solutions
- AZ-400 exam — Microsoft Azure DevOps Solutions