AZ-802 Study Guide: Building the Hybrid Foundation (Part 5): Onboarding Servers to Azure Arc

📖 AZ-802 Study Series: This is Part 5 of my hands-on lab series leading up to the Microsoft AZ-802 exam. To see the preceding steps, check out Part 4: Bridging On-Prem AD with Entra ID, Part 3: Automating Replica Domain Controller Promotion, Part 2: Automating Windows Server Lab Setup, and Part 1: Building a Multi-DC Active Directory Forest, or check out The Ultimate Guide to Windows Server Hybrid Administrator Associate (AZ-802) Study Guide for the complete roadmap.

If there's one topic that ties the entire Microsoft AZ-802 hybrid syllabus together, it's Azure Arc. Before you can patch a server with Azure Update Manager, stream its logs into Azure Monitor, apply a security baseline with Azure Policy, or protect it with Microsoft Defender for Cloud, the machine first has to exist inside the Azure control plane. Azure Arc is what puts it there.

Azure Arc projects your on-premises (or other-cloud) physical and virtual machines into Azure Resource Manager (ARM) as first-class resources with the type Microsoft.HybridCompute/machines. Once a server carries an Azure resource ID, the whole catalogue of native Azure governance and management services can target it — without moving the workload anywhere. That is why I am treating Arc as its own foundational part of this series: nearly everything that follows (Part 6 onward) depends on it.

In this guide we will automate onboarding for Windows and Linux hosts using a service principal, verify the connection, and then use the two capabilities the exam cares about most on top of Arc: device configuration via Azure Policy and VM extensions on non-Azure machines.

🎓 Exam Alignment (Azure Arc–enabled servers):

Onboarding and managing hybrid servers with Azure Arc sits in the "Manage Windows Server instances and workloads by using Azure services in a hybrid environment" objective of the AZ-802: Administering Windows Server Hybrid Infrastructure exam. Arc underpins three of the five bullets in that objective, so you must underst…