Preparing for MCSA 70-743: Windows Server Complete Study Handbook

The 70-743 exam, titled Upgrading Your Skills to MCSA Windows Server 2016, was a Microsoft certification examination designed for IT professionals who already held the MCSA qualification on Windows Server 2012 and wanted to validate their knowledge of the newer platform. It served as an upgrade path rather than a full from-scratch certification, acknowledging that experienced server administrators brought substantial existing knowledge to the table and needed to demonstrate only the incremental skills specific to Windows Server 2016.

Although Microsoft retired this exam in January 2021 as part of its broader transition toward role-based certifications, the knowledge it covered remains deeply relevant to IT professionals working in Windows Server environments today. Many organizations still run Windows Server 2016 infrastructure, and the technical skills the exam validated including storage solutions, networking, hyper-converged infrastructure, containers, and identity services continue to be essential competencies for server administrators and infrastructure engineers across industries worldwide.

Why Study This Material

Studying the 70-743 material remains valuable even though the exam itself is no longer offered because the content represents a comprehensive and well-organized body of Windows Server 2016 knowledge that has direct applicability to real-world infrastructure work. The exam objectives provide a structured roadmap through the most important administrative and configuration capabilities of the platform, covering everything from basic installation and configuration through advanced features like Storage Spaces Direct, software-defined networking, and Nano Server deployment.

For professionals preparing for Microsoft's current Azure and hybrid infrastructure certifications, the Windows Server 2016 knowledge covered in the 70-743 curriculum provides essential foundational context. Many current certification paths including the AZ-800 and AZ-801 exams for Windows Server Hybrid Administrator Associate build directly on the concepts introduced in Windows Server 2016, making thorough study of the earlier material a productive investment for professionals positioning themselves for current credentials. The technical depth of this content also makes it genuinely useful for day-to-day infrastructure work regardless of certification goals.

Installation And Configuration Basics

The installation and configuration domain covers the foundational tasks of deploying Windows Server 2016 in various configurations and managing the server environment after initial setup. This includes installing Windows Server 2016 in Server Core, Desktop Experience, and Nano Server deployment options, each of which involves different management approaches and carries different resource requirements and attack surface implications. Server Core, which runs without a graphical user interface, is particularly emphasized because of its security and resource efficiency advantages in production environments.

Post-installation configuration tasks covered in this domain include configuring Windows Server roles and features using Server Manager and PowerShell, managing local users and groups, configuring network adapter settings, and establishing remote management through Windows Remote Management and Windows PowerShell remoting. Candidates need to be comfortable with both the graphical tools available in the Desktop Experience installation option and the command-line approaches required for Server Core administration, since many production environments favor Server Core specifically because of its reduced administrative overhead and smaller attack surface.

Storage Solutions Coverage

Storage is one of the most heavily updated areas in Windows Server 2016 compared to its predecessor, and the 70-743 exam reflects this by dedicating substantial coverage to new and enhanced storage capabilities. Storage Spaces Direct, which enables hyper-converged infrastructure by allowing servers to pool their locally attached storage into a shared storage fabric, is a major focus area that represents a significant architectural shift from traditional storage area network approaches. Candidates need to understand how Storage Spaces Direct works, how to deploy it, and how to configure storage pools, virtual disks, and storage tiers within that framework.

The storage domain also covers Storage Replica, which provides block-level, synchronous and asynchronous replication between servers or clusters for disaster recovery purposes. This feature was new in Windows Server 2016 and requires understanding of replication partnerships, log volumes, and the PowerShell commands used to configure and manage replication relationships. Data Deduplication enhancements, storage Quality of Service for virtualized environments, and the SMB 3.1.1 protocol improvements are also part of this domain, all of which require hands-on lab practice to understand how they behave in real deployment scenarios.

Hyper-V Virtualization Features

Hyper-V in Windows Server 2016 introduced a range of new capabilities that the 70-743 exam tests thoroughly. Shielded virtual machines, which protect virtual machine contents from inspection or modification by potentially compromised hypervisor administrators, represent one of the most architecturally significant new features. This technology involves the Host Guardian Service, which manages attestation and key protection, and requires candidates to understand the trust model it establishes and the configuration steps needed to deploy it in both trusted platform module and admin-trusted attestation modes.

Discrete device assignment, which allows virtual machines to directly access physical hardware components like graphics processing units and network adapters with near-native performance, is another new Hyper-V capability covered in the exam. Production checkpoints, which create application-consistent snapshots suitable for use in production environments rather than just development and testing scenarios, and the Hyper-V container support introduced in Windows Server 2016 are also tested areas. Candidates preparing this domain need extensive hands-on lab experience because the scenario-based questions in this area assume genuine familiarity with how these features behave during configuration and troubleshooting.

Networking Enhancements Tested

Windows Server 2016 introduced significant networking enhancements, particularly in the area of software-defined networking, that the 70-743 exam covers in considerable depth. Network Controller, which provides a centralized management point for physical and virtual network infrastructure in software-defined environments, is a complex feature that requires candidates to understand its architecture, deployment requirements, and management interfaces. Software Load Balancer and RAS Gateway components of the software-defined networking stack are also tested at a conceptual and configuration level.

Traditional networking topics including DNS enhancements, DHCP failover and policy-based assignment, IPAM updates, and network adapter teaming continue to appear in the exam alongside the newer software-defined capabilities. Candidates need to be prepared for questions spanning the full range of networking content from routine administrative tasks to advanced software-defined networking concepts. High-performance networking features including RDMA-enabled network adapters, Switch Embedded Teaming, and Quality of Service policies for network traffic management round out a networking domain that requires both broad familiarity and targeted depth in the newer platform capabilities.

Identity Services Domain

Active Directory Domain Services administration forms a core part of the 70-743 exam content, with particular emphasis on features that were new or significantly enhanced in Windows Server 2016. Privileged Access Workstations, Just Enough Administration, and Just-In-Time Administration represent a set of related security capabilities for controlling and auditing administrative access to sensitive systems that candidates need to understand at both a conceptual and implementation level. These features reflect Microsoft's broader shift toward reducing the attack surface created by standing administrative privileges.

Active Directory Federation Services updates in Windows Server 2016, including enhanced support for modern authentication protocols and improved integration with Azure Active Directory, are also covered in the identity domain. Active Directory Certificate Services administration, Windows Server Update Services configuration, and the management of privileged access using the Microsoft Identity Manager-based Privileged Access Management solution complete the identity coverage. Candidates who have strong Active Directory experience from managing Windows Server 2012 environments will find much of this material builds naturally on existing knowledge, though the new security-focused features require dedicated study to grasp fully.

Remote Desktop Services

Remote Desktop Services received meaningful updates in Windows Server 2016 that the 70-743 exam tests as part of its broader coverage of server roles and features. The Remote Desktop role in Windows Server 2016 includes improvements to the Remote Desktop Web Access portal, enhanced support for RemoteFX graphics virtualization, and updated session management capabilities. Candidates need to understand how to deploy Remote Desktop Services in both session-based and virtual desktop infrastructure configurations and how to manage the various role services including Remote Desktop Session Host, Remote Desktop Connection Broker, Remote Desktop Web Access, and Remote Desktop Gateway.

Licensing configuration for Remote Desktop Services, including the management of Remote Desktop Services Client Access Licenses and the configuration of license servers, is a practical administrative topic that appears in exam questions. High availability configurations for Remote Desktop Services deployments, including clustered Remote Desktop Connection Broker configurations, are also tested. For candidates who manage environments where Remote Desktop Services provides application delivery or virtual desktop capabilities, this domain covers material that is directly applicable to their daily administrative responsibilities.

PowerShell And Automation

PowerShell is woven throughout the entire 70-743 exam because Windows Server 2016 administration, particularly in Server Core and Nano Server deployments, relies heavily on command-line management. Candidates are expected to be comfortable using PowerShell to perform virtually every administrative task covered in the exam, from configuring network adapters and managing storage spaces to deploying Hyper-V virtual machines and managing Active Directory objects. The exam includes scenario questions where knowing the correct PowerShell cmdlet or parameter is the difference between the right and wrong answer.

Windows PowerShell Desired State Configuration, which provides a declarative framework for defining and enforcing server configuration states, is a more advanced automation topic tested in the 70-743. Candidates need to understand how DSC configurations are written, compiled into MOF files, and applied to target nodes either through push or pull delivery modes. Just Enough Administration, which uses PowerShell session configurations to limit what commands specific users can run in remote PowerShell sessions, combines identity management and automation concepts in a way that reflects the increasingly important role PowerShell plays in both server administration and security control implementation.

Containers And Nano Server

Windows Server 2016 was the first version of Windows Server to include native container support, making containers a new and significant domain in the 70-743 exam. Windows Server Containers, which share the host operating system kernel while isolating application processes through namespace and resource isolation, and Hyper-V Containers, which run each container instance inside a lightweight Hyper-V virtual machine for stronger isolation guarantees, represent two distinct container deployment options with different security and performance characteristics that candidates need to understand.

Docker integration with Windows Server 2016 containers is tested including container image management, container networking, and the use of Docker commands to deploy and manage containerized applications. Nano Server, which is the minimal installation option introduced in Windows Server 2016 as a target platform for cloud-native workloads and container hosting, has a unique management model that relies entirely on remote management because it has no local interactive interface. Candidates need to understand how to deploy Nano Server, manage it remotely, and use it as a container host, recognizing its specific strengths and limitations compared to Server Core and the full Desktop Experience installation.

High Availability Concepts

High availability is a critical requirement for production Windows Server environments, and the 70-743 exam tests multiple approaches to eliminating single points of failure across different server workloads. Windows Server Failover Clustering, which enables groups of servers to work together so that if one fails another can take over its workloads with minimal interruption, is a foundational high availability technology covered extensively in the exam. Candidates need to understand cluster quorum models, cluster-aware updating, storage configurations for clustered workloads, and the failover behavior of different clustered roles.

Network Load Balancing provides a complementary approach to high availability for stateless workloads by distributing client connections across multiple servers and allowing the cluster to continue serving requests when individual nodes fail or are taken offline for maintenance. Storage Spaces Direct clusters, which combine the hyper-converged storage capabilities introduced in Windows Server 2016 with Failover Clustering, represent a converged high availability architecture that the exam tests as both a storage and clustering topic. Understanding how to size, deploy, and manage these converged clusters requires both conceptual understanding of the architecture and hands-on familiarity with the PowerShell-based management tools used in production deployments.

Security Feature Updates

Windows Server 2016 introduced a substantially enhanced security posture compared to Windows Server 2012, and the 70-743 exam reflects this through dedicated coverage of new and updated security features. Control Flow Guard, Credential Guard, Device Guard, and Windows Defender integration represent a layered approach to platform security that candidates need to understand at both a functional and configuration level. Credential Guard, which uses virtualization-based security to isolate credential storage from the main operating system, is particularly significant because it addresses one of the most commonly exploited attack vectors in Windows environments.

The Shielded VM fabric and Host Guardian Service discussed in the Hyper-V domain also fit within the broader security narrative of Windows Server 2016, reflecting Microsoft's approach to extending hardware-rooted security protections into the virtualization layer. Security compliance tools including the Security Compliance Toolkit and the capabilities available through Windows Defender Advanced Threat Protection integration with Windows Server 2016 are also covered. Candidates preparing the security domain should focus on understanding not just what each security feature does but also what specific threat or attack scenario it is designed to address, because exam questions frequently test this threat-to-control reasoning.

Study Resource Selection

Choosing the right study resources for 70-743 preparation involves balancing official Microsoft materials with third-party content that may present the same information in a more accessible format. The official Microsoft Press exam reference book for 70-743, written by Craig Zacker, provides comprehensive coverage of all exam objectives and is structured to align directly with what the exam tests. This book is the most authoritative third-party study resource and should form the backbone of any serious preparation effort for candidates who have access to it.

Microsoft's own documentation on TechNet and the Microsoft Docs platform provides detailed technical reference material for every feature and technology covered in the exam, and it is available free online. While this documentation is not organized specifically for exam preparation, it provides the depth of technical detail needed to answer scenario-based questions that require genuine understanding rather than surface-level familiarity. Video training courses from providers including Pluralsight, CBT Nuggets, and LinkedIn Learning offer structured video-based alternatives for candidates who learn more effectively through watching demonstrations than through reading, and the hands-on labs accompanying these courses provide essential practice opportunities.

Lab Environment Setup

Setting up an effective lab environment is perhaps the single most important preparation step for the 70-743 exam because so much of the exam content tests knowledge that can only be genuinely understood through direct hands-on experience. A basic lab environment for Windows Server 2016 study requires at least one physical or virtual host running Windows Server 2016, though a more complete lab with multiple servers allows practice with clustering, replication, and software-defined networking features that require at least two machines. Virtualization platforms including Hyper-V, VMware Workstation, and VirtualBox can host multiple Windows Server 2016 virtual machines on a single physical computer with adequate resources.

Microsoft offers evaluation editions of Windows Server 2016 that are available for free download from the Microsoft Evaluation Center and are licensed for 180-day evaluation use, making it possible to build a fully functional lab environment without any software licensing cost. Azure virtual machines provide an alternative lab platform for candidates who prefer cloud-based practice, and Microsoft Azure credits available through certain Microsoft programs and subscriptions can make this approach cost-effective. Regardless of whether your lab runs on physical hardware, local virtualization, or cloud virtual machines, the key is having an environment where you can freely experiment, make mistakes, break things, and rebuild configurations without consequences, because that freedom to experiment is what accelerates learning most effectively.

Practice Exam Strategy

Practice exams serve a critical role in 70-743 preparation by revealing which domains and topic areas require additional study before the real exam. The most effective approach to practice exams is not to take them as early as possible to assess baseline knowledge but to work through them strategically after completing initial content study in each domain, using the results to direct additional focused review before moving on. Taking a practice exam on a domain you have not yet studied simply wastes questions from a limited pool without producing actionable feedback.

Reputable practice exam providers for the 70-743 include MeasureUp, which offers the official Microsoft practice exams, as well as Transcender and Whizlabs. When reviewing practice exam results, spending time understanding why wrong answers are wrong and why right answers are right is more valuable than simply noting your score and moving on. Questions you got right through elimination or guessing deserve the same careful review as questions you got wrong, because understanding the reasoning behind correct answers deepens comprehension in ways that simply knowing the answer does not. Tracking performance by domain across multiple practice exam sessions lets you see whether your weak areas are improving over time and tells you where to focus additional study in the final preparation period.

Exam Day Preparation

On the day of the exam, arriving at the testing center with a clear head and a practiced routine matters as much as the study you have done in the preceding weeks. Reading each question carefully and paying attention to qualifying words like always, never, most appropriate, and least privilege helps you avoid the traps built into questions that have multiple plausible answers but only one best answer given the specific scenario described. Scenario-based questions in the 70-743 often include contextual details that determine which of several technically valid options is the correct choice for the specific situation presented.

Time management during the exam requires maintaining a pace that allows you to reach all questions without rushing, while also flagging difficult questions for review rather than spending excessive time on any single item. The 70-743 allows candidates to flag questions and return to them before submitting the exam, and using this feature strategically prevents a single difficult question from consuming time that would be better spent on subsequent questions you can answer confidently. Arriving at the testing center early, completing the check-in process without rushing, and spending a few minutes before the exam starts to settle your focus rather than cramming additional material sets the right mental tone for the performance the exam demands.

Final Thoughts

The MCSA 70-743 exam and its associated curriculum represent a comprehensive technical education in Windows Server 2016 that remains valuable long after the exam's retirement from Microsoft's active certification catalog. The technologies it covers including Storage Spaces Direct, Shielded VMs, software-defined networking, containers, and enhanced Active Directory security features are present in production environments around the world and will remain relevant for years as organizations continue to operate and maintain Windows Server 2016 infrastructure alongside newer platforms.

For professionals who studied and passed the 70-743 before its retirement, the knowledge gained represents a durable technical asset that translates directly into capability with current Microsoft infrastructure technologies. For those who are studying the material now to build foundational knowledge for current certifications or to improve their practical infrastructure skills, the curriculum provides a well-organized and technically rigorous path through one of Microsoft's most capable server platforms.

What makes the 70-743 study material particularly enduring in its relevance is that Windows Server 2016 was a platform that introduced genuinely transformative capabilities rather than simply refining existing ones. The architectural shifts it brought in hyper-converged infrastructure, virtualization-based security, and software-defined networking have shaped how enterprise infrastructure is designed and deployed for the years that followed its release, and those architectural patterns continue to influence current platform choices and deployment decisions. Professionals who understand Windows Server 2016 deeply have a meaningful advantage in contexts where legacy systems need to be maintained, migrated, or integrated with newer platforms. The study habits developed while preparing for a rigorous technical exam like the 70-743 are themselves valuable, training you to approach complex technical material systematically, verify your knowledge through hands-on practice rather than passive reading, and assess your readiness honestly through structured testing before committing to a high-stakes evaluation. Those habits serve well across an entire career of continuous learning in a field that demands it, making the investment in thorough preparation worthwhile far beyond any single credential or exam outcome.