Training: Configure Windows Server Hybrid Advanced Services (AZ-801)

Ref. AZ-801T00

Download PDF

Duration:

jours

Exam:

Optionnel

Level:

Intermédiaire

Funding:

Eligible

Home > Trainings > IT Pro > Systems and Networking > Configure Windows Server Hybrid Advanced Services (AZ-801)

Configure Windows Server Hybrid Advanced Services Training (AZ-801)

The AZ-801 training teaches you to configure advanced Windows Server services in a hybrid environment. In four days, you master security hardening with Credential Guard and AppLocker, high availability with failover clustering, disaster recovery via Azure Site Recovery, migration to Azure with Azure Migrate, and centralized hybrid monitoring. This official Microsoft course gives you the concrete tools to protect and evolve your Windows Server infrastructure.

Offered by ITTA in Geneva, Lausanne, or via virtual classroom, this official training (MOC) is led by MCT certified trainers. Hands-on labs on Microsoft cloud environments allow you to work in near-production conditions System administrators in French-speaking Switzerland will find an essential update to their skills.

Participant Profiles

System and network administrators
IT infrastructure engineers
Level 2 and 3 support technicians
IT managers
Microsoft technology consultants

Objectives

Secure Windows Server on-premises and hybrid infrastructures
Implement high availability solutions using failover clustering and Storage Spaces Direct
Design and implement disaster recovery solutions including Azure Site Recovery
Plan and execute server migration strategies to Azure
Implement and manage Windows Server monitoring using Azure Monitor and Event Logs
Troubleshoot Windows Server infrastructure including AD DS, networking, and storage
Implement advanced security features including Secured-core servers and SMB encryption

Prerequisites

Basic experience in Windows Server administration
Fundamental knowledge of networking and virtualization
Familiarity with Azure cloud concepts

Course Content

Module 1: Implement Windows Server IaaS VM network security

Implement network security groups and Windows IaaS VMs
Implement Azure Firewall and Windows IaaS VMs
Implement Windows Firewall with Windows Server IaaS VMs
Choose the appropriate filtering solution
Deploy and configure Azure firewall using the Azure portal
Capture network traffic with network watcher
Log network traffic to and from a VM using the Azure portal

Module 2: Audit the security of Windows Server IaaS Virtual Machines

Describe Microsoft Defender for Cloud
Enable Microsoft Defender for Cloud in hybrid environments
Implement and assess security policies
Protect your resources with Microsoft Defender for Cloud
Implement Microsoft Sentinel

Module 3: Manage Azure updates

Describe update management
Enable update management
Deploy updates
View update assessments
Manage updates for your Azure Virtual Machines

Module 4: Configure BitLocker disk encryption for Windows IaaS Virtual Machines

Describe Azure Disk Encryption and server-side encryption
Configure Key Vault for Azure Disk Encryption
Encrypt Azure IaaS Virtual Machine hard disks
Back up and recover data from encrypted disks
Create and encrypt a Windows Virtual Machine

Module 5: Implement change tracking and file integrity monitoring for Windows IaaS VMs

Implement Change Tracking and Inventory
Manage Change Tracking and Inventory
Manage tracked files
Implement File Integrity Monitoring
Select and monitor entities
Use File Integrity Monitoring

Module 6: Secure Windows Server DNS

Implement split-horizon DNS
Create DNS policies
Implement DNS policies
Secure Windows Server DNS
Implement DNSSEC

Module 7: Secure Windows Server user accounts

Configure user account rights
Protect user accounts with the Protected Users group
Describe Windows Defender Credential Guard
Block NTLM authentication
Locate problematic accounts

Module 8: Windows Server update management

Explore Windows Update
Outline Windows Server Update Services server deployment options
Define Windows Server Update Services update management process
Describe the process of Update Management

Module 9: Introduction to Cluster Shared Volumes

Determine the functionality of Cluster Shared Volumes
Explore the architecture and components of Cluster Shared Volumes
Implement Cluster Shared Volumes

Module 10: Implement Windows Server failover clustering

Define Windows Server failover clustering
Plan Windows Server failover clustering
Implement Windows Server failover clustering
Manage Windows Server failover clustering
Implement stretch clusters
Define cluster sets

Module 11: Implement high availability of Windows Server VMs

Select high-availability options for Hyper-V
Consider network load balancing for Hyper-V VMs
Implement Hyper-V VM live migration
Implement Hyper-V VMs storage migration

Module 12: Implement Windows Server File Server high availability

Explore the Windows Server File Server high-availability options
Define Cluster Shared Volumes
Implement Scale-Out File Server
Implement Storage Replica

Module 13: Implement scale and high availability with Windows Server VM

Describe virtual machine scale sets
Implement scaling
Implement load-balancing VMs
Create a virtual machine scale set in the Azure portal
Describe Azure Site Recovery
Implement Azure Site Recovery

Module 14: Implement Hyper-V Replica

Define Hyper-V Replica
Plan for Hyper-V Replica
Configure and implement Hyper-V Replica
Define extended replication
Define Azure Site Recovery
Implement Site Recovery from on-premises site to Azure
Implement Site Recovery from on-premises site to on-premises site

Module 15: Implement hybrid backup and recovery with Windows Server IaaS

Describe Azure Backup
Implement recovery vaults
Implement Azure Backup policies
Recover Windows IaaS Virtual Machines
Perform file and folder recovery
Perform backup and restore of on-premises workloads
Manage Azure Virtual Machine backups with Azure Backup service

Module 16: Protect your on-premises infrastructure from disasters with Azure Site Recovery

Azure Site Recovery overview
Workloads supported for protection with Azure Site Recovery
Run a disaster recovery drill
Failover and failback

Module 17: Protect your virtual machines by using Azure Backup

Azure Backup features and scenarios
Back up an Azure virtual machine by using Azure Backup
Restore virtual machine data

Module 18: Migrate on-premises Windows Server instances to Azure IaaS virtual machines

Plan your migration
Describe Azure Migrate
Perform server assessment
Assess physical servers with Azure Migrate
Migrate Windows Server workloads by using Azure Migrate

Module 19: Upgrade and migrate Windows Server IaaS virtual machines

Describe Azure Migrate
Migrate Windows Server workloads by using Azure Migrate
Describe storage migration
Migrate file servers by using Storage Migration Service

Module 20: Active Directory Domain Services migration

Examine upgrade vs. migration
Upgrade a previous version of Active Directory Domain Services to Windows Server 2025
Migrate to Active Directory Domain Services in Windows Server 2025 from a previous version

Module 21: Migrate file server workloads using Storage Migration Service

Storage Migration Service overview and usage scenarios
Storage migration requirements
Migrate a server with Storage migration
Evaluate storage migration considerations

Module 22: Migrate Windows Server roles

Describe the Windows Server Migration Tools
Install the Migration Tools
Migrate roles using the Migration Tools

Module 23: Monitor Windows Server IaaS Virtual Machines and hybrid instances

Enable Azure Monitor for Virtual Machines
Monitor an Azure Virtual Machine with Azure Monitor
Enable Azure Monitor in hybrid scenarios
Collect data from a Windows computer in a hybrid environment
Integrate Azure Monitor with Microsoft Operations Manager

Module 24: Monitor your Azure virtual machines with Azure Monitor

Monitoring for Azure VMs
Monitor VM host data
Use Metrics Explorer to view detailed host metrics
Collect client performance counters by using VM insights
Collect VM client event logs

Module 25: Monitor Windows Server performance

Use Performance Monitor to identify performance problems
Use Resource Monitor to review current resource usage
Review reliability with Reliability Monitor
Implement a performance monitoring methodology
Use Data Collector Sets to analyze server performance
Monitor network infrastructure services
Monitor virtual machines running Windows Server
Monitor performance with Windows Admin Center
Use System Insights to help predict future capacity issues
Optimize the performance of Windows Server

Module 26: Manage and monitor Windows Server event logs

Describe Windows Server event logs
Use Windows Admin Center to review logs
Use Server Manager to review logs
Use custom views
Implement event log subscriptions

Module 27: Implement Windows Server auditing and diagnostics

Describe basic auditing categories
Describe advanced categories
Log user access
Enable setup and boot event collection

Module 28: Troubleshoot on-premises and hybrid networking

Diagnose DHCP problems
Diagnose DNS problems
Diagnose IP configuration issues
Diagnose routing problems
Use Packet Monitor to help diagnose network problems
Use Azure Network Watcher to help diagnose network problems

Module 29: Troubleshoot Windows Server Virtual Machines in Azure

Troubleshoot VM deployment
Troubleshoot VM startup
Troubleshoot VM extensions
Troubleshoot VM connectivity
Troubleshoot VM performance
Troubleshoot VM storage

Module 30: Troubleshoot Active Directory

Recover objects from the AD recycle bin
Recover the AD DS database
Recover SYSVOL
Troubleshoot AD DS replication
Troubleshoot hybrid authentication issues

Documentation

Access to Microsoft Learn, Microsoft’s online learning platform, offering interactive resources and educational content to deepen your knowledge and develop your technical skills.

Lab / Exercises

This course provides you with exclusive access to the official Microsoft lab, enabling you to practice your skills in a professional environment.

Exam

This course prepares you to the AZ-801: Configuring Windows Server Hybrid Advanced Services exam.

Complementary Courses

Eligible Funding

ITTA is a partner of a continuing education fund dedicated to temporary workers. This fund can subsidize your training, provided that you are subject to the “Service Provision” collective labor agreement (CCT) and meet certain conditions, including having worked at least 88 hours in the past 12 months.

Additional Information

AZ-801 Training: Hybrid Advanced Services for Windows Server

Windows Server production environments demand much more than initial configuration. Securing servers against current threats, ensuring critical service availability, planning disaster recovery, and continuously monitoring performance are daily responsibilities for infrastructure teams. Integration with Azure services adds new possibilities to address these challenges.

The AZ-801 training, titled “Configuring Windows Server Hybrid Advanced Services,” covers these areas in depth. In four days, you learn to harden Windows Server security, configure high availability with failover clustering, plan Azure migrations, and set up comprehensive hybrid monitoring. This official Microsoft course is the direct complement to the AZ-800 training for obtaining the Windows Server Hybrid Administrator Associate certification.

Advanced Windows Server Security: Hardening and Protection

Windows Server security is a priority topic for companies in Switzerland. The AZ-801 training covers essential hardening mechanisms: Credential Guard to protect domain credentials, Device Guard and AppLocker to control authorized applications, and Windows Defender Application Control (WDAC) to strengthen system integrity. You also learn to configure advanced audit strategies and centralized logging.

The course also covers SMB connection security, BitLocker encryption for server volumes, Windows Firewall configuration with granular rules, and implementing Just Enough Administration (JEA) to limit privileges. These techniques form a defense-in-depth strategy adapted to the compliance requirements of Swiss companies.

High Availability and Disaster Recovery

Failover clustering is the key Windows Server technology for ensuring service continuity. You learn to deploy multi-node failover clusters, configure quorums, cluster resources, and dynamic role migration. The AZ-801 training also covers Hyper-V Replica for virtual machine replication between sites and configuring Storage Replica for synchronous storage replication.

For cloud-based disaster recovery, you configure Azure Site Recovery (ASR) to replicate your Windows servers to Azure and orchestrate automatic failover in case of primary site failure. This hybrid approach significantly reduces Recovery Time Objective (RTO) and data loss (RPO) without investing in a complete secondary datacenter.

Azure Migration and Hybrid Monitoring

Migrating on-premises workloads to Azure is a recurring project in French-speaking Swiss companies. The training teaches you to use Azure Migrate to assess server compatibility, plan the migration, and execute the transfer to Azure virtual machines. You discover migration strategies (lift-and-shift, replatforming) and complementary tools such as Storage Migration Service.

Hybrid monitoring combines Azure Monitor, Log Analytics, and Azure Arc to provide complete visibility across your entire Windows Server fleet. You configure alerts, custom dashboards, and automation rules to detect and resolve issues before they impact users. Microsoft Sentinel integration adds a SIEM layer for security threat detection.

Windows Server Hybrid Administrator Associate Certification: AZ-801 Exam

The AZ-801 exam (Configuring Windows Server Hybrid Advanced Services) is the second exam required for the Microsoft Windows Server Hybrid Administrator Associate certification. It contains between 40 and 60 questions with practical scenarios and lasts approximately 120 minutes. The passing score is 700 out of 1000. Combined with the AZ-800 exam, it validates complete expertise in hybrid Windows Server administration.

In Switzerland, this dual certification is sought after for hybrid infrastructure engineer, systems architect, Windows security administrator, or cloud migration consultant positions. Companies in Geneva and Lausanne, particularly in the banking, pharmaceutical, and institutional sectors, actively recruit Windows Server certified profiles.

At ITTA, a Microsoft Learning Partner MCT certified trainers guide you through hands-on labs on real Microsoft cloud environments and official course materials (MOC). Sessions are available in-person in Geneva and Lausanne or via virtual classroom.

FAQ

Do I need to take the AZ-800 training before AZ-801?

It is not mandatory but strongly recommended. AZ-800 covers core infrastructure (AD DS, DNS, Hyper-V, storage) while AZ-801 covers advanced services (security, HA, migration, monitoring). The two courses complement each other for the certification.

What are the prerequisites for the AZ-801 training?

You should have experience in Windows Server administration, including AD DS, storage management, and Hyper-V virtualization. Basic knowledge of Azure services (portal, virtual machines, virtual network) is also recommended.

Is the AZ-801 exam sufficient to obtain the certification?

No. The Windows Server Hybrid Administrator Associate certification requires passing both exams: AZ-800 and AZ-801. Each exam can be taken independently, in any order.

Is Azure Site Recovery covered in detail in this training?

Yes. You learn to configure Windows server replication to Azure, define recovery policies, and execute failover tests. Labs allow you to practice setting up a complete disaster recovery plan.

Is this training suitable for administrators managing only on-premises servers?

Yes. Even if you do not yet use Azure, the modules on advanced security, failover clustering, and local monitoring are directly applicable. The Azure modules prepare you for the hybrid evolution of your infrastructure.

What lab tools are used during the training?

Labs use Microsoft cloud environments with preconfigured Windows Server virtual machines. You work on complete clustering, security, and migration scenarios in near-production conditions.

Does the training cover migration from older Windows Server versions?

Yes. The Azure Migrate and Storage Migration Service module covers migration from Windows Server 2012 R2 and later versions to modern environments, on-premises or in Azure.