AZ-800 Administering Windows Server Hybrid Core Infrastructure Exam

Prepare and Install the Azure Connected Machine Agent

To manage on-premises servers and cloud resources together, you deploy the Azure Connected Machine Agent. This agent enables your servers to connect to Azure Arc, creating a hybrid environment that extends Azure management beyond the cloud. With Azure Arc, you get a unified view of your infrastructure, making it easier to apply policies and monitor health. By installing this agent, you bridge traditional servers with Azure’s powerful management tools.

Before installation, you must check several prerequisites. First, assess your operating system for compatibility with the agent. You also need a Log Analytics workspace in Azure to collect telemetry from your machines, which may incur ingestion and retention costs. Ensure you have permission to manage the workspace and that user accounts hold the correct Azure AD roles. Finally, verify network connectivity over TCP port 443 so the agent can communicate with Azure services.

Network and authentication requirements are critical for a smooth setup. Your machines must reach Azure Monitor endpoints, and you have three main connectivity options:

• Public Internet: Easiest but less secure.
• Log Analytics Gateway: Provides an intermediary for environments with strict outbound rules.
• Hybrid Networking Solutions: Uses VPN or ExpressRoute for private connections.
  For authentication, grant appropriate Azure AD roles and resource permissions. Enabling system-assigned managed identities on your servers simplifies credential management and boosts security.

The actual installation is straightforward using automated tools. Choose either PowerShell or Azure CLI scripts to deploy the agent. After running the deployment commands, monitor the registration process in the Azure portal. Confirm that your servers appear under Azure Arc and check their health status to ensure connectivity and correct configuration.

Once the agent is running, complete these post-installation tasks. Assign roles to users and services so they can manage the connected machines. Use Azure Policy to enforce compliance by automatically applying configuration baselines. Finally, scale your deployment by applying these steps to more servers or automating the process with scripts.

Conclusion
Installing the Azure Connected Machine Agent for Azure Arc involves preparing your environment, ensuring network and authentication requirements, and using PowerShell or Azure CLI for deployment. By meeting prerequisites and following post-installation tasks, you create a secure, unified management platform for your hybrid infrastructure. This process strengthens control, compliance, and visibility across on-premises and cloud resources.