Exam Vouchers: Administer Windows Server (AZ-802)

As a candidate for this exam, you’re responsible for deploying, implementing, managing, and troubleshooting Windows Server as a workload in on-premises, cloud, or hybrid environments.

You administer identity, security, management, compute, networking, storage, and monitoring for Windows Server.

You typically collaborate with architects, administrators, and engineers.

For this exam, you should have experience administering Windows Server by using technologies such as Windows Admin Center, Hyper-V, PowerShell, Azure Arc, Azure Monitor, Azure Update Manager, and Microsoft Defender for Cloud. You should also be familiar with Active Directory Domain Services (AD DS).

Updated  Oct. 2026

Candidates will be assessed on:

• Deploy and manage AD DS (20–25%)
• Manage Windows Server instances and workloads in a hybrid environment (10–15%)
• Manage virtual machines (10–15%)
• Implement and manage an on-premises and hybrid networking infrastructure (10–15%)
• Manage storage and file services (15–20%)
• Secure Windows Server infrastructure (10–15%)
• Monitor and troubleshoot Windows Server environments (15–20%)

Module 1: Deploy and manage Active Directory Domain Services

• Deploy and manage Active Directory Domain Services domain controllers
• Deploy and manage Azure IaaS Active Directory domain controllers in Azure
• Manage AD DS domain controllers and FSMO roles
• Create and manage Active Directory objects
• Implement hybrid identity with Windows Server
• Create and configure Group Policy Objects in Active Directory
• Implement Group Policy Objects
• Manage advanced features of AD DS

Module 2: Manage Windows Server instances and workloads in a hybrid environment

• Administer and manage Windows Server IaaS Virtual Machine remotely
• Describe Windows Server administration tools
• Just Enough Administration in Windows Server
• Perform Windows Server secure administration
• Use advanced Windows PowerShell remoting techniques
• Manage single and multiple computers by using Windows PowerShell remoting
• Manage hybrid workloads with Azure Arc
• Manage Azure updates
• Automate the configuration of Windows Server IaaS Virtual Machines
• Enforce VM security configuration with Azure Machine Configuration
• Explore Azure Automation with DevOps

Module 3: Manage virtual machines

• Configure and Manage Hyper-V Virtual Machines
• Configure and Manage Hyper-V
• Secure Hyper-V Workloads
• Implement High Availability of Windows Server Virtual Machines
• Run Containers on Windows Server
• Plan and deploy Windows Server IaaS Virtual Machines
• Implement scale and high availability with Windows Server VM
• Implement Windows Server IaaS VM IP addressing and routing
• Implement Windows Server IaaS VM network security
• Administer and manage Windows Server IaaS Virtual Machine remotely

Module 4: Implement and manage an on-premises and hybrid networking infrastructure

• Implement Windows Server DNS
• Implement DNS for Windows Server IaaS VMs
• Secure Windows Server DNS
• Deploy and manage DHCP
• Implement IP Address Management
• Implement Windows Server IaaS VM IP addressing and routing

Module 5: Manage storage and file services

• Implement a hybrid file server infrastructure
• Manage Windows Server file servers
• Implement Storage Spaces and Storage Spaces Direct
• Implement Windows Server Data Deduplication
• Implement Windows Server iSCSI
• Implement Windows Server Storage Replica

Module 6: Secure Windows Server infrastructure

• Hardening Windows Server
• Manage Microsoft Defender for Endpoint
• Manage Microsoft Defender in Windows client
• Understand Active Directory Group Policy security settings
• Manage security in Active Directory
• Understand Windows Server service accounts
• Secure Windows Server user accounts
• Manage security controls for identity and access
• Security monitoring and governance

Candidates should have experience administering Windows Server and be familiar with technologies such as Windows Admin Center, Hyper-V, PowerShell, Azure Arc, Azure Monitor, Azure Update Manager, and Microsoft Defender for Cloud. Familiarity with Active Directory Domain Services (AD DS) is also recom mended.