Certification guide

AZ-800

Windows Server Hybrid Administrator (Core Infrastructure): the honest guide

AZ-800 is the Windows Server exam for administrators whose servers are half in a rack and half in Azure. Microsoft's audience profile asks for several years of experience with Windows Server operating systems and names the tools it expects you to use: Windows Admin Center, PowerShell, Azure Arc, Azure Policy, Azure Monitor, Azure Update Manager, Microsoft Defender for Identity, Microsoft Defender for Cloud and IaaS virtual machine administration.

It is one of two exams, not a certification on its own. Microsoft Certified: Windows Server Hybrid Administrator Associate lists AZ-800 and AZ-801 as required. Technical exam scores are reported on a scale of 1 to 1,000 and a passing score is 700 or greater, which Microsoft is careful to say is a scaled score and may not equal 70 percent of the points.

Read the date before the syllabus. Microsoft retires AZ-800 and AZ-801 on 30 September 2026 at 5:00 PM Central Standard Time, and its certification page says that once they retire they will be removed and AZ-802 will remain as the available path to earn this certification. The English version of AZ-800 was last updated on 21 January 2026, so anything written before that is out of step with the current study guide as well.

Who Windows Server Hybrid Core is for

A good fit if

  • You administer Windows Server on-premises and the estate is being connected to Azure with Arc, Microsoft Entra Connect or Azure Files.
  • You have several years of Windows Server behind you, which is what Microsoft's own audience profile asks for.
  • Active Directory is a real part of your job and you want a current Microsoft credential that still examines it seriously.
  • You hold AZ-104 and want the server side credential beside it rather than another Azure only exam.
  • You can sit both AZ-800 and AZ-801 before 30 September 2026.

Probably not, if

  • You are new to Windows Server. The exam assumes forests, trusts, FSMO roles and Group Policy as background and does not teach any of them.
  • You want a cloud only credential. Deploying and managing Active Directory Domain Services is 30 to 35 percent of this exam and much of the rest is on-premises infrastructure joined to Azure. AZ-104 is the Azure administration exam.
  • You are starting from nothing today. Two exams before 30 September 2026 is a hard schedule from a standing start, and after that date AZ-802 is the path Microsoft names.

Is Windows Server Hybrid Core worth it?

For a working Windows Server administrator whose estate is moving toward Azure, yes. The curriculum is the job as it is now rather than as it was: domain controllers on-premises and in Azure, Microsoft Entra Domain Services, Azure Arc, hybrid networking and Azure File Sync sit beside the AD DS and Hyper-V material that has been examinable for years.

The timing changes the answer more than the content does. With the exam retiring on 30 September 2026, this is worth booking only if you can also clear AZ-801 before that date. Microsoft says to complete an exam before its retirement date to ensure it is applied toward your certification, and has not published what a single AZ-800 pass is worth afterward.

For somebody with no Windows Server background, no. This is an associate exam with a several year experience profile, and the AD DS half assumes operational knowledge that no course delivers quickly. The honest first step is running the services, not booking the exam.

What the exam actually asks you to do

Multiple choice and multiple response, plus drag-and-drop ordering, hot area items where you click a region of a screenshot, and case studies that hold one scenario across several linked questions.

Item formats

  • Multiple choice
  • Multiple response
  • Drag and drop
  • Hot area
  • Case study

The highlighted formats are the ones you cannot answer from memory alone. Microsoft Learn, exam duration and question types ↗

Domain breakdown and official weightings

From the official Microsoft Learn study guides. Deploy and manage Active Directory Domain Services in on-premises and cloud environments is the heaviest domain at 33 percent, followed by Manage virtual machines and containers at 18 percent.

  • Deploy and manage Active Directory Domain Services in on-premises and cloud environments33%
  • Manage Windows Servers and workloads in a hybrid environment13%
  • Manage virtual machines and containers18%
  • Implement and manage an on-premises and hybrid networking infrastructure18%
  • Manage storage and file services18%

Microsoft Azure: Microsoft Learn study guides ↗

Study plans by experience level

Working Windows Server administrator with Azure exposure

3 to 4 weeksat 8 hours

  1. 1Week 1: read the study guide as it stands after the 21 January 2026 update and mark every sub-objective you have not personally done. For most administrators the marks land on Azure Arc, Microsoft Entra Domain Services and containers rather than on AD DS.
  2. 2Week 2: the marked hybrid items, in one concentrated block on an Azure subscription. Arc enable a server, run Microsoft Entra Connect Sync against a lab forest, and stand up an Azure File Sync group, then delete the resource group.
  3. 3Week 3: the areas you run daily but have never explained. Trusts, sites and replication, service account types, and the difference between a read only domain controller and a writable one in a branch.
  4. 4Week 4: the free practice assessment, then a full length timed form, then a second pass over whichever skill area came out lowest.

Azure administrator new to on-premises Active Directory

8 to 10 weeksat 8 hours

  1. 1Weeks 1 to 3: build a forest from nothing on evaluation media. Two domain controllers, a child domain, sites and subnets, and replication you have watched succeed and watched fail.
  2. 2Weeks 4 to 5: Group Policy, security principals, service accounts and the multi domain and multi forest scenarios. This is the largest skill area at 30 to 35 percent and it is the part your Azure background does not cover.
  3. 3Weeks 6 to 7: Hyper-V and containers, then on-premises and hybrid networking, including name resolution and the routes between your lab and a virtual network.
  4. 4Weeks 8 to 9: storage and file services, then the hybrid identity join to Microsoft Entra ID, which is where your existing knowledge finally helps.
  5. 5Week 10: the practice assessment and a timed form, with the AD DS area re-drilled if it is still the weak bar.

Holder of an older Windows Server certification

5 to 7 weeksat 6 hours

  1. 1Weeks 1 to 2: the hybrid objectives only. Azure Arc, Azure Policy and Azure Update Manager against on-premises servers, and Windows Admin Center as the console Microsoft names in the audience profile.
  2. 2Weeks 3 to 4: Microsoft Entra ID, Microsoft Entra Domain Services and Microsoft Entra Connect Sync, which did not exist in the exams you took and are examined here by name.
  3. 3Weeks 5 to 6: what changed underneath the familiar material. Storage Spaces, Storage Replica, Azure File Sync and containers on Windows Server, plus the current PowerShell modules for the tasks you used to do in a console.
  4. 4Week 7: the practice assessment and a timed form, then book AZ-801 immediately while the material is loaded.

Common mistakes

Treating AZ-800 as a certification
It is one of two required exams. Passing it puts a line on your transcript and earns no credential until AZ-801 is behind it too. Candidates who book AZ-800, pass, and then wait for a quiet month find that Microsoft's exam pages tell them to complete an exam before its retirement date for it to be applied toward the certification.
Studying the Azure half and assuming the AD DS half
Deploying and managing Active Directory Domain Services is 30 to 35 percent of the exam, the largest single area, and it is examined at the level of FSMO role transfer, trust direction, site link costs and service account selection. Years of clicking through Active Directory Users and Computers does not answer those questions.
Reading about hybrid identity instead of building it
Microsoft Entra Connect Sync, Microsoft Entra Domain Services and the Microsoft Entra join for Windows Server are distinct things that sound alike in prose and behave differently in a portal. One afternoon connecting a lab forest to a tenant separates them permanently, and nothing you read does.
Leaving an Azure subscription running between study sessions
The free account credit covers the hybrid objectives comfortably if the resources exist only while you are using them. A gateway or a premium file share left running through a work week spends the lab budget on nothing, and the resource group delete at the end of a session is the habit that prevents it.
Using material written before 21 January 2026
Microsoft updated the English version of AZ-800 on that date and publishes a change log in the study guide. A course or a set of notes aimed at the previous outline can be accurate about Windows Server and still wrong about what the exam asks, which is the failure mode hardest to notice while it is happening.

What comes after passing

Book AZ-801 while the material is still loaded, and before 30 September 2026. The two exams share an audience profile and a toolset, and the gap between them is the most expensive place to stall.

The certification lasts one year and renews free through an unproctored, open book assessment on Microsoft Learn, with the window opening six months before expiry.

The skills transfer sideways more than upward. AZ-104 is the natural neighbor if the Azure half of the job is growing, and the identity work here leads toward SC-300 rather than toward another server exam.

What survives the retirement is the subject rather than the exam code. The skill areas Microsoft lists for AZ-802 include deploying and managing AD DS, managing Windows Servers and workloads in a hybrid environment, virtual machines, on-premises and hybrid networking, and storage and file services, which is most of what AZ-800 asks about. Time on this material is not time on a dead subject.

Costs across the full renewal cycle are on the Windows Server Hybrid Core cost page.

Frequently asked questions

Does passing AZ-800 on its own certify me?

No. Microsoft Certified: Windows Server Hybrid Administrator Associate lists AZ-800 and AZ-801 as required exams. Passing one gives you a transcript entry, not the certification. Microsoft's note on both exam pages says to complete an exam before its retirement date to ensure it is applied toward your certification.

When do AZ-800 and AZ-801 retire?

Both retire on 30 September 2026 at 5:00 PM Central Standard Time, according to the warning on each exam page and each study guide. Microsoft's certification page says that once they retire they will be removed, and AZ-802 will remain as the available path to earn this certification.

How much of AZ-800 is Active Directory?

The study guide puts deploying and managing Active Directory Domain Services in on-premises and cloud environments at 30 to 35 percent, the largest of the five skill areas. Domain controllers on-premises and in Azure, forest and domain trusts, sites, replication, security principals, service accounts and the hybrid identity join to Microsoft Entra ID are all named objectives inside it.

What score do I need to pass?

The AZ-800 exam page publishes a passing score of 700. Microsoft reports all technical exam scores on a scale of 1 to 1,000 and states that because this is a scaled score it may not equal 70 percent of the points. A score report breaks the result down by skill area, and Microsoft does not share which questions were answered incorrectly.

Can I prepare for AZ-800 for free?

Almost entirely. The study guide, the self paced collection on Microsoft Learn, a practice assessment and the Windows Server documentation are all free, and evaluation versions of Windows Server install without a purchased license. Only the hybrid objectives need an Azure subscription, and a new account starts with credit that covers a concentrated block of Arc, Microsoft Entra Connect and Azure Files work.

Keep reading

Every guide and cost breakdown, by vendor

Practice Windows Server Hybrid Core for free while you decide

Original questions written from the published objectives, with the concept, the reasoning, and a note on every wrong option. No account needed to start.

Start free Windows Server Hybrid Core questions