Microsoft retired AZ-800<\/a>, AZ-801<\/a>, and the Windows Server Hybrid Administrator Associate certification on September 30, 2026. Unlike some other 2026 certification changes, Microsoft\u2019s retirement listing does not identify one direct replacement exam for the combined Windows Server hybrid credential.<\/p>\n That does not mean Windows Server hybrid administration has become irrelevant. The work has been redistributed across Azure administration, identity, security, Azure Arc, and task-focused Applied Skills. For administrators who spent years operating Active Directory, Hyper-V, failover clustering, Windows Server networking, and Azure-connected servers, the better question is which parts of the role they still own and which current credential validates those responsibilities.<\/p>\n The two-exam path covered a broad job: administering Windows Server on premises and in Azure, connecting hybrid systems, managing identity, security, networking, storage, monitoring, high availability, and disaster recovery. Microsoft\u2019s own exam pages emphasized tools such as Windows Admin Center, PowerShell, Azure Arc, Azure Policy, Azure Monitor, Update Manager, Defender for Identity, and Defender for Cloud.<\/p>\n Those technologies did not retire with the exams. What retired was the bundled certification path. A candidate should therefore stop using the AZ-800\/801 objective lists as a current scheduling plan while preserving the practical knowledge underneath them.<\/p>\n That absence is important because Windows Server hybrid work spans several current role boundaries. One administrator may spend most of the week on Active Directory and Group Policy, another on Azure-hosted infrastructure, another on Arc-enabled servers and policy, and another on identity or security architecture. Replacing AZ-800 and AZ-801 with a single invented \u201cnext exam\u201d would hide those differences. The better transition is to map the retired certification domains to the responsibilities that remain in your environment.<\/p>\n Some Microsoft retirements came with a named successor. AZ-204 moved to AI-200, AZ-500 moved to SC-500, and AI-102 moved to AI-103. The Windows Server Hybrid Administrator retirement is different. Microsoft lists the retirement date but does not name one exam that inherits the entire role.<\/p>\n That matters because it prevents false certainty. Do not invent a successor simply because another Azure exam seems nearby. The modern path is role-based and modular: use a current Azure administrator credential for cloud operations, identity credentials for directory and access work, security credentials for protection and architecture, and Applied Skills for focused Windows Server tasks.<\/p>\n Many Windows Server administrators still own AD DS, Group Policy, domain controllers, DNS, service accounts, and hybrid identity. Microsoft currently offers an Applied Skills credential for administering Active Directory Domain Services, which validates hands-on tasks such as domain-controller management, topology, directory objects, Group Policy, and AD DS security.<\/p>\n That task-focused direction fits the way hybrid environments are operated today. Deep Active Directory skills remain useful even when the certification framework changes. Practical knowledge such as Active Directory PowerShell administration<\/a> still matters because automation and repeatability are essential in large directory environments.<\/p>\n Arc does not turn every server into an Azure virtual machine. It creates a management and governance plane for servers that remain on-premises or in other clouds. That distinction helps teams choose the right labs: onboarding machines, assigning policy, collecting inventory, applying security recommendations, managing extensions, and understanding connectivity requirements are more useful than pretending that hybrid management is simply a lift-and-shift exercise. The server stays where it is; the management model becomes more consistent.<\/p>\n The hybrid story increasingly uses Azure Arc to represent on-premises and other-cloud servers as Azure resources. Once connected, those machines can participate in Azure Policy, monitoring, update management, Defender for Cloud, inventory, and other cloud-native management workflows.<\/p>\n That changes the administrator\u2019s mental model. Hybrid no longer means maintaining two completely separate tool chains and occasionally synchronizing them. The goal is to bring consistent governance and security to servers wherever they run while respecting the operational constraints of local infrastructure.<\/p>\n Arc also introduces a new administrative boundary. The connected-machine agent, extensions, Azure role assignments, onboarding credentials, and policy assignments all become part of the security design. A server can be perfectly hardened locally and still be exposed to risky cloud-side administration if Arc permissions or extension controls are weak.<\/p>\n Practice the entire lifecycle: onboard a server, organize it with resource groups and tags, apply policy, collect monitoring data, manage updates, and remove the server cleanly. Hybrid administration is easier to understand when Arc is treated as an operating model rather than as a one-time registration step.<\/p>\n If your responsibilities now include subscriptions, virtual machines, networking, storage, identity integration, monitoring, backup, and governance in Azure, AZ-104<\/a> is a natural current credential. It does not replace the Windows Server depth of AZ-800\/801, but it validates the Azure control plane that hybrid administrators increasingly use.<\/p>\n This is a role-boundary decision. A Windows Server specialist who only touches Azure Arc occasionally may not need a broad Azure administrator certification. An administrator responsible for both datacenter and Azure infrastructure often does, because the cloud side of the hybrid architecture becomes a first-class operating environment.<\/p>\n Hybrid identity specialists should also keep the boundary between on-premises directory services and cloud identity explicit. Synchronization, authentication methods, privileged administration, application access, and recovery can fail in different places. Build diagrams and failure scenarios that show which system is authoritative for a decision. That habit is more useful than memorizing a retired exam sequence.<\/p>\n For teams where federation, synchronization, Conditional Access, access governance, privileged access, and Microsoft Entra are the core concerns, SC-300<\/a> may be more relevant than another infrastructure exam. The old hybrid administrator path touched identity, but modern identity security has become a specialization of its own.<\/p>\n This is especially true in organizations moving from traditional domain-centric access toward cloud-first identity. AD DS still matters, yet the security policy that controls SaaS, Azure, and modern applications is increasingly expressed through Microsoft Entra. Administrators who bridge those worlds need to understand both.<\/p>\n These skills are especially durable because outages do not respect certification retirements. DNS, replication, authentication, clustering, storage, backups, network reachability, time synchronization, certificates, and dependency mapping still determine whether a hybrid service works. A modern study plan should therefore preserve hands-on fault isolation. Use Azure-native monitoring and governance where appropriate, but keep the ability to diagnose the Windows Server layer when a cloud dashboard only tells you that something downstream is unhealthy.<\/p>\n Failover clustering, replication, backup, storage, DNS, and network troubleshooting remain part of running Windows Server well. The absence of a current two-exam certification does not reduce the operational consequences of getting those systems wrong.<\/p>\nAZ-800 and AZ-801 are now historical targets<\/h3>\n
There is no single one-for-one replacement credential<\/h3>\n
Active Directory remains a durable hybrid skill<\/h3>\n
Azure Arc is the bridge for servers that stay outside Azure<\/h3>\n
Use AZ-104 when Azure administration is the center of the job<\/h3>\n
Use SC-300 when hybrid identity is the hardest part<\/h3>\n
Keep high availability, disaster recovery, and troubleshooting skills<\/h3>\n