AZ-801T00 | Configuring Windows Server Hybrid Advanced Services

• Understand and implement security measures to protect Windows Server operating systems and ybrid Active Directory infrastructures.
• Utilize Azure services to identify and remediate security issues within Windows Server environments.
• Configure and secure network and storage resources in Windows Server installations.
• Implement and manage Windows Server failover clustering and Storage Spaces Direct for high availability.
• Manage backup strategies and implementdisaster recoverysolutions using Azure Site Recovery and Hyper-V replicas.
• Perform migrations of on-premises storage, servers, and workloads to Azure and newer versions of Windows Server.
• Transition IIS workloads and Active Directory Domain Services (AD DS) infrastructures to Azure andWindows Server 2022AD DS.
• Monitor Windows Server environments using native tools and Azure services for optimized performance and health.
• Troubleshoot network, virtual machine, and Active Directory issues in both on-premises and Azure-hosted Windows Server deployments.
• Leverage best practices for maintaining and troubleshooting server environments to minimize downtime and ensure business continuity.

This four-day course is intended for Windows Server Hybrid Administrators who have experience working with Windows Server and want to extend the capabilities of their on-premises environments by combining on-premises and hybrid technologies. Windows Server Hybrid Administrators who already implement and manage on-premises core technologies want to secure and protect their environments, migrate virtual and physical workloads to Azure Iaas, enable a highly available, fully redundant environment, and perform monitoring and troubleshooting.

• Experience with managing Windows Server operating system and Windows Server workloads in on-premises scenarios, including AD DS, DNS, DFS, Hyper-V, and File and Storage Services
• Experience with common Windows Server management tools (implied in the first prerequisite).
• Basic knowledge of core Microsoft compute, storage, networking, and virtualization technologies (implied in the first prerequisite).
• Experience and an understanding of core networking technologies such as IP addressing, name resolution, and Dynamic Host Configuration Protocol (DHCP)
• Experience working with and an understanding of Microsoft Hyper-V and basic server virtualization concepts
• An awareness of basic security best practices
• Basic understanding of security-related technologies (firewalls, encryption, multi-factor authentication, SIEM/SOAR).
• Basic knowledge of on-premises resiliency Windows Server-based compute and storage technologies (Failover Clustering, Storage Spaces).
• Basic experience with implementing and managing IaaS services in Microsoft Azure
• Basic knowledge of Azure Active Directory
• Experience working hands-on with Windows client operating systems such as Windows 10 or Windows 11
• Basic experience with Windows PowerShell

An understanding of the following concepts as related to Windows Server technologies:

• High availability and disaster recovery
• Automation
• Monitoring
• Troubleshooting

• Configure and manage Exploit Protection
• Configure and manage Windows Defender Application Control
• Configure and manage Microsoft Defender for Servers
• Configure and manage Windows Defender Credential Guard
• Configure SmartScreen
• Implement operating system security by using Group Policies

• Configure password policies
• Enable password block lists
• Manage protected users
• Manage account security on a Read-Only Domain Controller (RODC)
• Harden domain controllers
• Configure authentication policy silos
• Restrict access to domain controllers
• Configure account security
• Manage AD built-in administrative groups
• Manage AD delegation
• Implement and manage Microsoft Defender for Identity

• Monitor on-premises servers and Azure VMs by using Microsoft Sentinel
• Identify and remediate security issues in on-premises servers and Azure
• VMs by using Microsoft Defender for Cloud

• Manage Windows Defender Firewall
• Implement domain isolation
• Implement connection security rules

• Manage Windows BitLocker Drive Encryption (BitLocker)
• Manage and recover encrypted volumes
• Enable storage encryption by using Azure Disk Encryption
• Manage disk encryption keys for IaaS virtual machines

• Implement a failover cluster on-premises, hybrid, or cloud-only
• Create a Windows failover cluster
• Implement a stretch cluster across datacenters or Azure regions
• Configure storage for failover clustering
• Modify quorum options
• Configure network adapters for failover clustering
• Configure cluster workload options
• Configure cluster sets
• Configure Scale-Out File servers
• Create an Azure witness
• Configure a floating IP address for the cluster
• Implement load balancing for the failover cluster

• Implement cluster-aware updating
• Recover a failed cluster node
• Upgrade a node to Windows Server 2022
• Failover workloads between nodes
• Install Windows updates on cluster nodes
• Manage failover clusters using Windows Admin Center

• Create a failover cluster using Storage Spaces Direct
• Upgrade a Storage Spaces Direct node
• Implement networking for Storage Spaces Direct
• Configure Storage Spaces Direct

• Backup and restore files and folders to Azure Recovery Services Vault
• Install and manage Azure Backup Server
• Back up and recover using Azure Backup Server
• Manage backups in Azure Recovery Services Vault
• Create a backup policy
• Configure backup for Azure VM using the built-in backup agent
• Recover VM using temporary snapshots
• Recover VMs to new Azure VMs
• Restore a VM

• Configure Azure Site Recovery networking
• Configure Site Recovery for on-premises VMs
• Configure a recovery plan
• Configure Site Recovery for Azure VMs
• Implement VM replication to secondary datacenter or Azure region
• Configure Azure Site Recovery policies

• Configure Hyper-V hosts for replication
• Manage Hyper-V replica servers
• Configure VM replication
• Perform a failover

• Transfer data and share
• Cut over to a new server by using Storage Migration Service (SMS)
• Use Storage Migration Service to migrate to Azure VMs
• Migrate to Azure file shares

• Deploy and configure Azure Migrate appliance
• Migrate VM workloads to Azure IaaS
• Migrate physical workloads to Azure IaaS
• Migrate by using Azure Migrate

• Migrate IIS
• Migrate Hyper-V hosts
• Migrate Remote Desktop Services (RDS) host servers
• Migrate Dynamic Host Configuration protocol (DHCP)
• Migrate print servers

• Migrate IIS workloads to Azure Web Apps
• Migrate IIS workloads to containers

Migrate an Active Directory Domain Services (AD DS) infrastructure to

Windows Server 2022 AD DS

• Migrate AD DS objects, including users, groups and Group Policies using
• AD Migration Tool
• Migrate to a new Active Directory Forest
• Upgrade an existing forest

• Monitor Windows Server by using Performance Monitor
• Create and configure Data Collector Sets
• Monitor servers and configure alerts by using Windows Admin Center
• Analyze Windows Server system data by using System Insights
• Manage event logs
• Deploy Azure Monitor agents
• Collect performance counters to Azure
• Create alerts
• Monitor Azure VMs by using Azure diagnostics extension
• Monitor Azure VMs performance by using VM Insights

• Troubleshoot hybrid network connectivity
• Troubleshoot on-premises connectivity
• Troubleshoot Windows Server virtual machines in Azure
• Troubleshoot deployment failures
• Troubleshoot booting failures
• Troubleshoot VM performance issues
• Troubleshoot VM extension issues
• Troubleshoot disk encryption issues
• Troubleshoot storage
• Troubleshoot VM connection issues

• Restore objects from AD recycle bin
• Recover Active Directory database using Directory

• Recover system volume (SYSVOL)
• Troubleshoot Active Directory replication
• Troubleshoot Hybrid authentication issues
• Troubleshoot on-premises Active Director

*Minimum 5 registrations required for public batches