The Windows Server Hybrid Administrator course is designed to teach IT professionals how to manage Windows Server workloads using both on-premises and hybrid cloud technologies. This includes implementing and maintaining services such as identity, compute, storage, and networking across hybrid environments. By blending the capabilities of local infrastructure with Microsoft Azure, administrators gain flexibility and enhanced management control over their environments.

The course is structured around a comprehensive, hands-on approach to configuring and managing Windows Server in hybrid scenarios. Learners explore how to use core administrative tools, perform remote management, secure identities, and optimize server configurations in a modern enterprise setting.

This program provides foundational and advanced knowledge to support evolving IT landscapes where cloud integration is essential to efficiency, scalability, and continuity.

Intended Audience for the Course

This training is specifically created for Windows Server Hybrid Administrators. These professionals typically have experience working with traditional Windows Server infrastructures and are looking to broaden their skill sets by incorporating hybrid and cloud-based technologies into their workflows.

The course is best suited for:

• System administrators are responsible for managing and supporting Windows Server
  
• IT professionals managing Active Directory and virtual machines
  
• Technical staff transitioning from purely on-premises setups to hybrid or cloud-integrated models
  
• Professionals seeking to prepare for Azure-based hybrid roles within enterprise IT environments.
  

It is particularly useful for those supporting organizations undergoing digital transformation and integrating Azure as part of their infrastructure strategy.

Certification Preparation: AZ-800 and AZ-801

This course is a direct preparation tool for the Microsoft Exam AZ-800, which focuses on administering core Windows Server workloads in on-premises, hybrid, and cloud environments. Together with Exam AZ-801, it qualifies candidates for the Microsoft Certified: Windows Server Hybrid Administrator Associate certification.

The certification validates knowledge and skill in areas such as:

• Managing Windows Server in Azure and on-premises environments
  
• Hybrid identity integration using Azure Active Directory
  
• Configuring networking and virtualization technologies in hybrid deployments
  
• Implementing storage solutions and Windows Server file services
  

Earning this certification helps professionals stand out in a competitive job market, demonstrating expertise in both legacy infrastructure and modern hybrid systems.

Prerequisites and Foundational Knowledge

To get the most out of this course, participants should meet a few key prerequisites:

• Experience managing Windows Server operating systems and workloads
  
• Familiarity with core Windows Server roles like AD DS, DNS, Hyper-V, File and Storage Services
  
• Practical understanding of Windows Server management tools such as Windows Admin Center and PowerShell
  
• Basic knowledge of Microsoft computing, storage, and networking technologies.
  

Participants should already be comfortable performing administrative tasks in a local server environment and be ready to expand those capabilities into hybrid configurations that include Azure integration.

Module 1: Identity Services in Windows Server

Active Directory Domain Services (AD DS) is a central component in managing identity within Windows Server environments. This module begins by introducing the structure and roles of AD DS, explaining how it supports authentication, authorization, and directory-based policies.

Participants learn to deploy and manage domain controllers, assign and transfer Flexible Single Master Operations (FSMO) roles, and maintain the health and availability of the AD DS infrastructure.

Key areas of focus include:

• Role of domain controllers in network identity
  
• Planning and implementing domain controller deployments
  
• Monitoring and managing replication and trust relationships
  
• Using administrative tools to manage users, groups, and OUs
  

This foundational knowledge is critical for securing access and ensuring consistent identity management across a network.

Implementing and Managing Group Policy

Group Policy allows administrators to enforce settings across users and computers within a domain. This module covers how to configure Group Policy Objects (GPOs) to ensure that all domain-joined systems meet organizational requirements.

Key tasks include:

• Creating and editing GPOs using the Group Policy Management Console
  
• Linking GPOs to domains and organizational units
  
• Setting GPO inheritance and precedence
  
• Using filtering and loopback processing for granular control
  
• Troubleshooting GPO application issues
  

By understanding how to use Group Policy effectively, administrators can control software installations, enforce security policies, and manage desktop configurations at scale.

Advanced Features of AD DS

The module also touches on advanced AD DS capabilities such as sites and services, read-only domain controllers, and fine-grained password policies. These features provide additional control and performance enhancements, particularly in larger or multi-site organizations.

Participants are introduced to:

• Managing AD replication across different sites
  
• Securing branch office deployments with RODCs
  
• Creating custom password policies for different groups
  

These advanced skills prepare administrators to manage enterprise-grade directory services environments.

Lab Exercise: Identity Services and Group Policy

Hands-on lab activities in this module include:

• Deploying a new domain controller on Server Core
  
• Configuring Active Directory Sites and Services
  
• Creating and applying Group Policy settings
  
• Verifying policy application and resolving issues
  

The lab helps solidify theoretical knowledge by allowing learners to build and manage a domain environment in a simulated, controlled setting.

Module 2: Implementing Identity in Hybrid Scenarios

In this module, participants learn how to configure an Azure environment to support identity workloads. The goal is to extend existing on-premises AD DS services into Azure, allowing for hybrid identity management.

Participants explore:

• Deploying Active Directory Domain Services on Azure IaaS VMs
  
• Establishing secure network connectivity between on-premises and Azure
  
• Synchronizing identities for unified access control across environments
  

This setup ensures that users can log in and access resources regardless of where services are hosted.

Azure Active Directory and Identity Integration

Azure Active Directory (Azure AD) is Microsoft’s cloud-based identity platform. To integrate it with an on-premises AD DS environment, organizations use Azure AD Connect. This tool synchronizes identities between the two platforms and supports advanced features like single sign-on and conditional access.

Key topics covered:

• Planning and deploying Azure AD Connect
  
• Synchronizing users, passwords, and groups
  
• Using Pass-through Authentication and Seamless SSO
  
• Configuring Azure AD Join and Hybrid Azure AD Join
  

This integration enables a consistent user experience and centralized identity management.

Hybrid Identity Use Cases and Benefits

Hybrid identity offers several practical benefits, including:

• Centralized authentication for cloud and on-premises resources
  
• Reduced administrative overhead through identity synchronization
  
• Improved security through multi-factor authentication and conditional access
  
• Enhanced user experience with single sign-on across systems
  

Understanding these advantages helps administrators advocate for and implement hybrid identity as part of their infrastructure modernization.

Lab Exercise: Configuring Hybrid Identity

The lab component of this module walks participants through:

• Preparing Azure AD and AD DS environments for integration
  
• Installing and configuring Azure AD Connect
  
• Verifying synchronization between Azure AD and on-prem AD
  
• Testing single sign-on and conditional access configurations
  

By completing these steps, learners gain practical experience in deploying hybrid identity solutions that are scalable and secure.

The first part of the Windows Server Hybrid Administrator course lays the foundation for understanding identity management in both on-premises and hybrid environments. Participants learn how to deploy domain controllers, configure Group Policy, and extend their identity infrastructure to Azure using Azure AD Connect.

These skills are essential for any IT administrator managing access and security in a hybrid cloud environment. In this section, we will cover administrative tools, secure access practices, and remote server management using technologies like Windows Admin Center and Azure Arc.

Module 3: Windows Server Administration

Security is a critical component of server administration. In hybrid environments where both cloud and on-premises systems coexist, securing administrative access is essential. This module begins by emphasizing the principle of least privilege and introduces tools and concepts designed to reduce security risks.

Key practices covered include:

• Using Privileged Access Workstations (PAWs) to isolate sensitive administrative tasks
  
• Implementing Just Enough Administration (JEA) to delegate specific admin rights
  
• Configuring multi-factor authentication and credential security
  
• Managing access through role-based principles rather than full administrative rights
  

These practices reduce the likelihood of credential compromise and enforce accountability in administrative actions.

Introduction to Administration Tools

This section of the module explores various tools available for managing Windows Server environments. Administrators are introduced to both traditional and modern interfaces for system configuration and monitoring.

Key tools include:

• Windows Admin Center: A browser-based, centralized management interface for managing both local and remote servers
  
• Server Manager: A legacy tool for managing server roles and features
  
• PowerShell: A powerful scripting language used for automating administrative tasks and performing configuration at scale
  
• System Configuration (sconfig): A command-line utility for configuring Server Core installations
  

The goal is to familiarize administrators with the appropriate tools for different management scenarios, including automation, interactive use, and remote control.

Post-Installation Configuration of Windows Server

After installing Windows Server, administrators must perform essential configuration tasks to prepare systems for production. This module outlines the standard post-installation workflow.

Tasks include:

• Assigning server names and IP addresses
  
• Enabling remote management features
  
• Joining the server to a domain
  
• Installing necessary roles and features
  
• Configuring firewall rules and security baselines
  

These steps ensure that new servers are secure, manageable, and consistent with organizational policies.

Just Enough Administration (JEA)

JEA is a Windows PowerShell-based technology that allows for granular access control by defining what tasks an administrator can perform. Rather than giving users full administrative privileges, JEA allows the creation of custom roles with limited capabilities.

Participants learn to:

• Create role capability files and session configurations
  
• Assign users to specific JEA roles.
  
• Audit JEA activity for compliance and accountability
  

This model is particularly useful in environments where multiple users manage systems and separation of duties is required.

Lab: Managing Windows Server

In this hands-on lab, learners gain experience with:

• Connecting to remote servers using Windows Admin Center
  
• Performing tasks through PowerShell and sconfig
  
• Configuring local and remote administration policies
  
• Implementing secure server access practices
  

The lab reinforces best practices and introduces modern administrative workflows suitable for both cloud-hosted and on-premises servers.

Module 4: Facilitating Hybrid Management

Managing Azure-based Windows Server virtual machines requires different tools and approaches compared to traditional on-premises systems. This module begins by exploring how administrators can manage remote VMs hosted in Azure using native tools.

Techniques covered include:

• Remote PowerShell sessions to Azure VMs
  
• Configuring WinRM for secure communication
  
• Using Remote Desktop Protocol (RDP) with Azure Bastion for secure access
  
• Implementing Just-in-Time VM access using Microsoft Defender for Cloud
  

These techniques allow administrators to maintain and troubleshoot Azure VMs without exposing systems to public access vulnerabilities.

Introduction to Azure Arc

Azure Arc is a management solution that brings Azure control and services to non-Azure machines, including on-premises servers and machines hosted in other clouds. This capability allows administrators to manage hybrid environments from the Azure portal as if all resources were native to Azure.

In this module, participants learn to:

• Register on-premises servers with Azure Arc
  
• Apply Azure Policy and governance to Arc-connected machines.
  
• Use Azure Monitor to track performance and health.
  
• Manage hybrid systems through a unified interface.
  

Azure Arc significantly simplifies hybrid operations by centralizing visibility, monitoring, and policy enforcement across all workloads.

Deploying Azure Policies in Hybrid Scenarios

Once on-premises machines are connected through Azure Arc, administrators can deploy Azure Policies to enforce organizational rules. These policies ensure that all systems, regardless of location, meet the same compliance and configuration standards.

Topics covered:

• Creating policy definitions and assignments
  
• Using initiative definitions to group multiple policies
  
• Monitoring compliance and remediating issues
  
• Applying tagging, resource configuration, and security baselines
  

This unified policy model improves standardization and reduces administrative overhead across hybrid environments.

Using Role-Based Access Control (RBAC)

Azure RBAC is used to manage who has access to Azure resources, what actions they can perform, and on which resources. RBAC integrates with Azure Arc, allowing access control across hybrid systems.

In this module, participants learn to:

• Assign roles using least privilege principles
  
• Create custom roles for specific job functions.
  
• Audit role assignments and permissions
  
• Use RBAC in combination with Azure Policy for governance.
  

Understanding and applying RBAC correctly ensures secure and accountable access to a hybrid infrastructure.

Lab: Windows Admin Center in Hybrid Environments

The lab in this module provides real-world exercises to demonstrate hybrid management capabilities:

• Provisioning Azure VMs running Windows Server
  
• Connecting on-premises servers to Azure using Azure Network Adapter
  
• Deploying Windows Admin Center as a gateway in Azure
  
• Managing both cloud and local resources through a single interface
  

This experience shows how Windows Admin Center and Azure Arc can simplify hybrid management, offering consistent tooling across environments.

Benefits of Hybrid Management Tools

The combination of Windows Admin Center and Azure Arc provides a comprehensive solution for managing complex hybrid infrastructure. These tools reduce the number of interfaces administrators must use and enable centralization of control, visibility, and compliance.

Some key advantages include:

• Simplified management of on-premises and cloud resources from one console
  
• Improved security with centralized policy and identity control
  
• Cost optimization by managing updates, configurations, and workloads efficiently
  
• Enhanced monitoring and diagnostics with integration into Azure Monitor
  

These tools help organizations enforce IT standards across diverse environments, ensuring consistency and reducing risks.

Modules 3 and 4 focus on equipping administrators with the tools and practices needed to manage Windows Server environments securely and efficiently. From configuring post-installation settings to implementing hybrid management with Azure Arc and Windows Admin Center, learners gain essential skills to support a modern hybrid IT infrastructure.

Module 5: Hyper-V Virtualization in Windows Server

Hyper-V is Microsoft’s native hypervisor used to run virtual machines on Windows Server. It is a foundational technology in both on-premises and hybrid environments, enabling administrators to consolidate workloads and isolate systems within virtual containers.

This module begins by introducing Hyper-V and its core features, including:

• Virtual machine creation and management
  
• Dynamic memory allocation
  
• Virtual switch configuration for network connectivity
  
• Checkpoints for VM recovery
  
• Integration services to improve VM performance
  

These features are essential for running a flexible, scalable, and cost-efficient virtual infrastructure.

Configuring and Managing Hyper-V Virtual Machines

In this section, learners gain hands-on experience configuring virtual machines in Hyper-V. Topics include:

• Creating VMs with different hardware profiles
  
• Assigning CPU, memory, disk, and network resources
  
• Using Generation 1 vs Generation 2 virtual machines
  
• Attaching and managing virtual hard disks (VHDs)
  
• Creating and applying VM templates for rapid deployment
  

The module emphasizes using PowerShell for automation and efficiency, particularly when managing multiple machines or performing repetitive configuration tasks.

Securing Hyper-V Workloads

Security in virtualized environments is critical. Hyper-V includes a number of built-in features to protect virtual machines and the host system. The module explores:

• Shielded virtual machines to protect against unauthorized access
  
• Host Guardian Service (HGS) for attestation and VM protection
  
• Secure boot and virtual TPM for data protection
  
• Isolated user and administrator trust boundaries
  

Participants also learn how to configure the Key Protection Service (KPS) and understand the architecture of a secure virtualization deployment.

Running Containers on Windows Server

Containers offer a lightweight and portable way to package applications and dependencies. Unlike traditional VMs, containers share the host OS but are isolated from each other. In Windows Server, containers can be implemented in two forms:

• Windows Server Containers (sharing the OS kernel)
  
• Hyper-V Containers (providing hardware-level isolation)
  

This module covers:

• Installing Docker and container components
  
• Creating and running containers using Docker CLI
  
• Pulling and managing container images from public and private registries
  
• Persisting data using container volumes
  
• Managing networking for containerized applications
  

Understanding containers is key for modernizing workloads and deploying applications more efficiently in hybrid and cloud-native environments.

Orchestrating Containers with Kubernetes

Kubernetes is the industry standard for container orchestration. Windows Server supports Kubernetes for managing and scaling containerized applications. The module introduces:

• Installing and configuring Kubernetes on Windows Server
  
• Deploying container workloads using YAML manifests
  
• Managing pods, deployments, and services
  
• Scaling and updating container applications
  
• Integrating monitoring and logging tools
  

While this section offers an introductory view, it prepares administrators to participate in environments adopting container-based infrastructure strategies.

Lab: Implementing Virtualization and Containers

In this hands-on lab, learners will:

• Create and configure virtual machines using Hyper-V
  
• Apply checkpoints and test recovery processes.
  
• Install Docker and run Windows containers.
  
• Deploy a basic Kubernetes cluster and run a sample containerized app.
  

The lab helps reinforce the conceptual and technical skills needed to manage virtual and containerized environments on Windows Server.

Module 6: Deploying and Configuring Azure Virtual Machines

Azure provides scalable virtual machine infrastructure with various options for compute and storage. Understanding the relationship between VM sizing, performance tiers, and storage configuration is essential for cost-effective and efficient deployment.

The module introduces:

• Azure VM families (General Purpose, Compute Optimized, Memory Optimized)
  
• Standard vs Premium storage options
  
• Azure managed disks and their types (Standard HDD, Standard SSD, Premium SSD)
  
• Availability sets and availability zones for high availability
  

Administrators learn to plan and allocate resources based on workload requirements and business priorities.

Deploying Windows Server Virtual Machines in Azure

Azure offers multiple deployment methods for virtual machines, including:

• Azure Portal: Manual creation using a graphical interface
  
• Azure CLI: Command-line deployment with flexibility
  
• ARM Templates: Infrastructure as code for repeatable deployments
  

This section guides learners through:

• Selecting VM images and sizes
  
• Defining network and storage configurations
  
• Setting administrative access credentials
  
• Applying tags and diagnostics settings during deployment
  

This knowledge enables administrators to confidently provision infrastructure in Azure, whether for production or test environments.

Customizing Virtual Machine Images

Creating custom images allows organizations to deploy VMs with pre-installed applications, updates, and configurations. This module introduces:

• Generalizing VMs using Sysprep
  
• Capturing images for reuse across deployments
  
• Using Shared Image Gallery for centralized image management
  
• Creating images with Azure Image Builder templates
  

By leveraging custom images, organizations streamline deployments, reduce configuration time, and enforce standardization across multiple environments.

Automating Configuration with VM Extensions

Azure VM extensions enable automated configuration and post-deployment customization. These extensions run scripts or install software after the VM is provisioned.

Common VM extensions include:

• Custom Script Extension: Runs PowerShell or shell scripts on the VM
  
• Desired State Configuration (DSC) Extension: Applies configuration management
  
• Antimalware Extension: Adds endpoint protection.
  
• Monitoring and Diagnostics Extensions: Enable logging and telemetry
  

Participants learn how to include extensions in ARM templates or apply them to existing VMs using Azure CLI or PowerShell.

Using Desired State Configuration (DSC)

DSC is a declarative management platform in PowerShell that enables configuration consistency across Windows environments. In Azure, DSC can be used through VM extensions to enforce settings and detect drift.

Key features include:

• Writing DSC configuration scripts
  
• Compiling and publishing configurations
  
• Assigning configurations to VMs
  
• Monitoring compliance status
  

DSC helps maintain infrastructure as code principles and ensures that VMs adhere to security and operational policies over time.

Lab: Deploying and Configuring Azure VMs

This lab provides practical experience with Azure VM deployments. Participants will:

• Author ARM templates to create Azure VMs
  
• Add extensions to automate configuration during provisioning.
  
• Use Azure CLI to create and manage resources.
  
• Configure VM networking, security, and remote access
  
• Test VM connectivity and access through secure channels
  

These tasks prepare learners to manage VM lifecycles from deployment to production readiness in Azure.

Benefits of Virtualization and Automation

Modules 5 and 6 highlight the power of virtualization and cloud-based automation. These capabilities allow organizations to scale workloads efficiently, reduce physical hardware dependencies, and enforce consistency across environments.

Virtualization and automation deliver:

• Faster provisioning and deployment cycles
  
• Reduced infrastructure costs through better resource utilization
  
• Simplified recovery and replication strategies
  
• Standardized environments for testing and production
  
• Improved agility and responsiveness in hybrid architectures
  

Mastering these technologies enables administrators to support both legacy and modern applications with equal competence.

Modules 5 and 6 provide critical skills for any administrator working in today’s hybrid environments. Through virtualization with Hyper-V, container orchestration, and automated Azure VM deployment, learners acquire the knowledge needed to manage infrastructure that is flexible, scalable, and cloud-integrated.

Module 7: Network Infrastructure Services in Windows Server

Dynamic Host Configuration Protocol (DHCP) is a foundational network service used to automatically assign IP addresses and network configurations to devices. This module explains how to install, configure, and manage DHCP on Windows Server.

Administrators will learn how to:

• Deploy the DHCP server role on Windows Server
  
• Create and manage scopes to define IP address ranges.
  
• Configure options such as the default gateway and DNS servers
  
• Monitor DHCP lease activity and manage reservations.
  
• Implement DHCP failover for high availability.
  

Managing DHCP ensures consistent IP allocation, reduces configuration errors, and simplifies the network setup for client machines.

Implementing Windows Server DNS

The Domain Name System (DNS) is essential for translating domain names into IP addresses. A properly configured DNS infrastructure is critical for Active Directory, internet access, and hybrid networking.

Topics include:

• Installing and configuring the DNS server role
  
• Creating and managing forward and reverse lookup zones
  
• Adding and maintaining resource records such as A, CNAME, and MX
  
• Configuring zone transfers and secure dynamic updates
  
• Troubleshooting DNS resolution issues using command-line tools
  

DNS administration is a core task in any Windows Server environment and becomes even more important in hybrid and multi-site configurations.

Implementing IP Address Management (IPAM)

IP Address Management centralizes the tracking and management of IP address space across an organization’s network. This module introduces IPAM as a tool to integrate DHCP and DNS for unified oversight.

Key learning areas:

• Deploying and configuring IPAM on Windows Server
  
• Discovering and managing DHCP and DNS servers
  
• Creating IP address blocks and managing utilization
  
• Tracking IP lease history and detecting configuration conflicts
  

Using IPAM allows administrators to plan and maintain efficient and conflict-free IP address usage in dynamic environments.

Implementing Remote Access

Remote Access services enable secure connectivity to internal network resources from external locations. In this module, administrators explore various remote access technologies.

Covered topics:

• Configuring Virtual Private Network (VPN) connections
  
• Implementing DirectAccess for seamless remote access
  
• Setting up routing and remote access roles (RRAS)
  
• Managing authentication, encryption, and access policies
  

Remote Access supports secure, reliable connections for mobile workforces and remote administrative access.

Lab: Configuring Network Infrastructure Services

In this lab, learners will:

• Deploy and configure DHCP scopes and reservations
  
• Set up DNS zones and validate name resolution.
  
• Use IPAM for centralized address management.
  
• Test VPN connectivity and configure routing options.
  

The lab strengthens understanding of essential network services that form the backbone of any Windows Server deployment.

Module 8: Implementing Hybrid Networking Infrastructure

This module addresses the core requirement of hybrid networking—connecting on-premises environments with Azure. Administrators explore tools and strategies for secure and efficient connectivity.

Options include:

• Azure VPN Gateway for encrypted site-to-site connections
  
• Azure ExpressRoute for private, high-throughput connectivity
  
• Using Azure Network Adapter for simpler connectivity from Windows Admin Center
  

These methods allow organizations to extend their data centers to Azure without compromising security or performance.

Configuring DNS for Azure VMs

DNS configuration is vital when deploying Windows Server virtual machines in Azure. Administrators must ensure that name resolution is reliable both within Azure and in hybrid environments.

Tasks include:

• Configuring Azure DNS or custom DNS settings for VMs
  
• Implementing conditional forwarding between Azure and on-premises DNS
  
• Running a DNS server inside Azure virtual machines
  
• Managing split-brain DNS scenarios with private zones
  

Proper DNS setup ensures seamless identity integration and application availability across network boundaries.

Managing IP Addressing and Routing in Azure

IP address planning and routing are crucial when integrating Azure VMs into hybrid infrastructures. In this module, learners explore:

• Assigning static and dynamic private IP addresses to VMs
  
• Managing public IPs and Network Security Groups (NSGs)
  
• Implementing user-defined routes (UDRs) for custom traffic flow
  
• Monitoring and analyzing virtual network topology
  

These configurations ensure secure and efficient routing between Azure and on-premises resources.

Lab: Hybrid Networking Configuration

In this lab, participants will:

• Create and configure virtual networks and subnets in Azure
  
• Implement routing between subnets and regions.
  
• Set up DNS forwarding between Azure and on-premises DNS.
  
• Verify end-to-end network connectivity across the hybrid environment.
  

This hands-on experience helps learners understand the components and considerations involved in hybrid network architecture.

Module 9: File Servers and Storage Management in Windows Server

File servers play a central role in storing and sharing data within organizations. This module covers the configuration and administration of file services in Windows Server.

Tasks include:

• Installing the File Server role
  
• Creating and securing shared folders
  
• Implementing access-based enumeration (ABE)
  
• Configuring NTFS and share permissions
  
• Managing quotas and file screening with File Server Resource Manager (FSRM)
  

These skills allow administrators to control access to organizational data and enforce data usage policies.

Storage Spaces and Storage Spaces Direct

Storage Spaces is a technology that pools physical disks into virtual storage for resiliency and scalability. Storage Spaces Direct extends this to provide highly available storage for clustered environments.

Topics include:

• Creating storage pools and virtual disks
  
• Configuring resiliency options such as mirroring and parity
  
• Deploying Storage Spaces Direct in failover clusters
  
• Monitoring storage health and performance
  

These features are useful for building scalable and redundant storage solutions using commodity hardware.

Data Deduplication and iSCSI

Data Deduplication reduces storage usage by eliminating duplicate copies of data. iSCSI (Internet Small Computer Systems Interface) allows block-level storage to be accessed over a network.

This section includes:

• Enabling and configuring deduplication on volumes
  
• Scheduling deduplication jobs and reviewing savings
  
• Setting up the iSCSI target and initiator services
  
• Managing iSCSI sessions and authentication
  

These technologies enhance storage efficiency and support flexible, network-based storage access.

Storage Replica

Storage Replica enables block-level replication of data between servers or clusters, providing disaster recovery and high availability.

Participants learn to:

• Configure synchronous and asynchronous replication
  
• Set up replication partnerships.
  
• Monitor replication status
  
• Use Storage Replica in stretch clusters for site resilience.
  

This module ensures data availability even during system failures or site outages.

Lab: Configuring File and Storage Services

The lab activities include:

• Implementing shared folders with proper permissions
  
• Setting up Storage Spaces and measuring performance
  
• Enabling and testing deduplication
  
• Configuring iSCSI and Storage Replica for failover
  

These exercises prepare learners to design and manage robust file and storage systems.

Module 10: Implementing Hybrid File Server Infrastructure

Azure Files is a cloud-based file share service accessible over the SMB protocol. It provides organizations with scalable, secure file storage without the need to maintain physical servers.

Covered topics:

• Creating Azure file shares
  
• Accessing file shares from Windows and Linux systems
  
• Enabling authentication using Azure AD or AD DS
  
• Configuring performance tiers for different workloads
  

Azure Files simplifies storage management while extending on-prem capabilities to the cloud.

Implementing Azure File Sync

Azure File Sync replicates data between Azure file shares and on-premises file servers, allowing local caching and central cloud storage. This module teaches administrators to:

• Install the Azure File Sync agent on local servers
  
• Register and configure sync groups.
  
• Manage cloud tiering to optimize local storage usage.
  
• Migrate from DFS Replication (DFSR) to Azure File Sync
  

With Azure File Sync, organizations can maintain fast local access while ensuring data is backed up and available across locations.

Lab: Deploying Azure File Sync

In this final lab, learners will:

• Set up a sync group and connect it to an Azure file share
  
• Enable cloud tiering to optimize disk usage.
  
• Replace DFSR-based replication with Azure File Sync.
  
• Test file synchronization and resolve sync errors
  

This lab demonstrates how to modernize file services using Azure’s hybrid capabilities.

Modules 7 through 10 address the networking and storage components essential to building and managing a modern hybrid Windows Server environment. From DNS and DHCP to file services and Azure File Sync, these modules provide administrators with the practical knowledge required to integrate, secure, and optimize infrastructure across local and cloud systems.

Together with the earlier modules, this completes the comprehensive training path for the Windows Server Hybrid Administrator role. Learners who complete the course will be well-prepared to take the AZ-800 exam and pursue a career supporting hybrid IT operations.

Final Thoughts

The Windows Server Hybrid Administrator course represents a vital step for IT professionals aiming to manage modern infrastructure environments that blend on-premises systems with cloud services. As organizations increasingly adopt hybrid models to gain scalability, security, and flexibility, the demand for professionals capable of administering both local and Azure-integrated environments continues to rise.

This course not only addresses core Windows Server competencies—such as Active Directory, virtualization, networking, and storage—but also expands into essential hybrid capabilities. From configuring identity synchronization with Azure AD to deploying Azure VMs and implementing Azure File Sync, participants gain comprehensive exposure to real-world tasks that define today’s administrator roles.

Each module is designed to build on foundational knowledge while introducing modern tools and best practices. Windows Admin Center, Azure Arc, and PowerShell provide scalable and efficient management solutions, allowing administrators to standardize control across hybrid and cloud-based systems. The inclusion of security-focused practices, such as Just Enough Administration, reflects current enterprise needs to protect infrastructure against rising threats.

By covering virtualization through Hyper-V and container orchestration with Kubernetes, the course ensures learners are not only maintaining infrastructure but also supporting the development and deployment of modern applications. It ties traditional IT operations to DevOps principles and cloud-native practices.

The hands-on labs throughout the course give participants practical, scenario-based experience. These exercises reinforce theoretical understanding and develop the confidence needed to troubleshoot, deploy, and secure systems across diverse environments.

Completing this course prepares learners for the AZ-800 exam, one half of the requirements for the Microsoft Certified: Windows Server Hybrid Administrator Associate credential. Earning this certification signifies proficiency in managing Windows Server across hybrid architectures—an increasingly critical skill set in both enterprise and mid-size organizations.

For IT professionals seeking to remain relevant, adaptable, and valuable in a rapidly changing industry, this course is more than just technical training. It’s a pathway into the future of systems administration, where hybrid, cloud-aware, and security-focused administrators will lead the next generation of IT operations.

Whether you’re looking to upskill, transition into a hybrid cloud role, or validate your experience through certification, this course provides the knowledge, tools, and practical foundation to support those goals.