MCSE: Core Infrastructure

I have this MCSE — where should I go now?

Where can this take me today? Windows Server and hybrid infrastructure usually preserve the most existing knowledge. Choose a direction from your recent work, then follow the detailed learning path below.

Your strongest background	Closest modern pathway	What to add next
Windows Server, domains and Hyper-V	Windows Server / hybrid	Current server skills, Azure Arc and hybrid management
Azure and platform operations	Azure administration · AZ-104	Azure permissions, networking and repeatable deployments
AD, federation and privileged access	Identity · SC-300	Entra, Conditional Access and governance; SC-200 for threat investigation
Infrastructure design	Azure architecture · AZ-305	Azure administration first, then governance and workload design
VMM, datacenter fabric and scripting	Hybrid platforms / DevOps	Modern platform operations; delivery and development skills for AZ-400

These are editorial recommendations based on skills overlap, not official MCSE conversions. For a networking specialization, see the Azure network engineer path.

What was this certification?

Microsoft Certified Solutions Expert: Core Infrastructure, commonly displayed as MCSE: Core Infrastructure, belonged to the Microsoft Certified Solutions Expert family. It combined a Windows Server MCSA foundation with an additional infrastructure elective. The title was not “MCSE 2016”: it accepted both Windows Server 2012 and Windows Server 2016 prerequisite qualifications. It should also be distinguished from the earlier Microsoft Certified Systems Engineer family. Microsoft programme announcement; Microsoft Support requirement clarification.

The qualification therefore tells you something concrete about a holder’s foundation, but the elective and subsequent work experience are needed to understand the specialization. Someone who passed the security elective did not necessarily study the same advanced material as someone who chose the software-defined datacenter elective.

Introduction, changes and retirement

Date	Historical event
24 September 2018	Microsoft announced the role-based programme and the coming Core Infrastructure route. H1
1 January 2019	Core Infrastructure became the Windows Server–based route following MCSE: Cloud Platform & Infrastructure. The broader programme also directed candidates toward Azure role-based certifications. H1
10 January 2019	Microsoft clarified that existing Cloud Platform & Infrastructure holders would keep their earned title; it would not automatically be exchanged for Core Infrastructure or duplicated on their transcripts. H1
28 February / 26 March 2020	Microsoft announced retirement of the remaining MCSA, MCSD and MCSE exams, then extended the deadline from 30 June 2020 to 31 January 2021. H3
October 2020	Microsoft Support clarified the two prerequisite choices and the requirement to pass one of five electives. H2
31 January 2021	The remaining route closed to new candidates with the programme’s retirement. H3

Predecessor relationship: Core Infrastructure continued the Windows Server side of MCSE: Cloud Platform & Infrastructure. This was a programme transition, not a statement that the two qualifications had identical requirements. Earlier MCSE: Server Infrastructure is related through exams 70-413 and 70-414; that older qualification required both, whereas the final Core Infrastructure rule allowed either as its single elective. Microsoft announcement; Microsoft Press 70-413 introduction.

Later model: Microsoft moved to role-based credentials. The modern routes below are recommendations based on skills overlap; Core Infrastructure does not convert automatically into any of them. Retirement announcement.

What happened to existing holders?

Retirement stopped new awards; it did not undo an earned qualification. Microsoft states that MCSE credentials do not expire. Its policy treats placement in the transcript’s Active section separately from the qualification itself; use your Microsoft record for your individual award history. Microsoft credential policy.

On a CV, give the exact title and year earned, then show recent relevant work. The qualification documents what you achieved; current administration, design or security work demonstrates how you use that knowledge today.

Historical certification requirements

The award rule: one prerequisite AND one elective

The October 2020 Microsoft Support clarification states the rule as:

(MCSA: Windows Server 2012 OR MCSA: Windows Server 2016) AND one of 70-413, 70-414, 70-537, 70-744 or 70-745.

An MCSA alone was insufficient; one MCSE elective was required. This is the documented October 2020 rule. Earlier award routes and source limitations are covered in the historical notes. Microsoft Support clarification.

Prerequisite certification choices

The standard exam routes to the two eligible MCSAs were:

Prerequisite	Required exams for the standard route
MCSA: Windows Server 2012	70-410 — Installing and Configuring Windows Server 2012; 70-411 — Administering Windows Server 2012; 70-412 — Configuring Advanced Windows Server 2012 Services. Standard three-exam route; dated substitutions and eligible upgrades are documented on the MCSA page. Microsoft Press
MCSA: Windows Server 2016	70-740 — Installation, Storage, and Compute with Windows Server 2016; 70-741 — Networking with Windows Server 2016; 70-742 — Identity with Windows Server 2016. All three for the standard route. Microsoft Press

These are MCSA prerequisite exams, not additional Core Infrastructure electives. A new candidate using either standard MCSA route would therefore complete three foundation exams plus one MCSE elective.

Upgrade-route distinction: 70-417 — Upgrading Your Skills to MCSA Windows Server 2012 was an alternative for eligible previously certified professionals, including the Windows Server 2008 MCSA/MCITP Server Administrator audience documented by Microsoft Press. 70-743 — Upgrading Your Skills to MCSA: Windows Server 2016 was a separate MCSA upgrade exam. Neither was one of the five MCSE electives. Passing an upgrade exam should not be interpreted as a standalone MCSE award. Eligibility depended on the prior qualification held. 70-417 introduction; 70-743 reference.

Qualifying MCSE electives

Choose one, after satisfying the prerequisite:

Exam number	Official exam title in the final requirement list
70-413	Designing and Implementing a Server Infrastructure
70-414	Implementing an Advanced Server Infrastructure
70-537	Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack Hub
70-744	Securing Windows Server 2016
70-745	Implementing a Software-Defined Datacenter

Source: Microsoft Support’s October 2020 clarification. Microsoft’s programme retirement notice uses Microsoft Azure Stack without “Hub” in the 70-537 title; retain that historical naming variant when interpreting an old transcript or document. Retirement exam list.

If you earned the credential through an earlier route, use your dated transcript to identify your exams. Exam retirement did not necessarily remove credit for an existing pass.

Technologies and skills covered

The shared Windows Server foundation

The MCSA component established a base in Windows Server deployment, server roles, networking, directory services, storage and virtualization. Relevant technologies included AD DS, Group Policy, DNS, DHCP, Hyper-V, file services and recovery. Windows Server 2012-era material was updated for 2012 R2; a 2012 prerequisite does not mean the holder earned the 2016 MCSA. Microsoft Press 2012/R2 objectives; Windows Server 2016 exam references.

PowerShell knowledge is particularly valuable when interpreting a holder’s operational experience, but the level of automation expertise should be established from their work and exam objectives rather than assumed from the MCSE acronym.

What the elective added

Your elective	What it tells us about the area assessed
70-413	Infrastructure design on Windows Server 2012/R2: deployment, network services/access, and logical and physical Active Directory design. This is a useful starting point for discussing site topology, naming, access boundaries and infrastructure decisions. Microsoft Press
70-414	Advanced infrastructure, with an identity/access component covering certificate authorities and certificate lifecycle, federation with AD FS, and AD RMS. A holder who worked in these areas brings PKI and federation knowledge that a basic cloud course will not replace. Microsoft objectives
70-537	Operating a hybrid cloud using Microsoft Azure Stack/Stack Hub. Treat this as a distinct platform-operations specialization; do not infer that it certified general Azure administration or every Windows Server security topic. Microsoft requirement list
70-744	Server hardening and privileged access, including guarded virtualization, JIT/JEA administration, privileged workstations, LAPS and threat detection. The objective document names Advanced Threat Analytics and Operations Management Suite, which require separate modernization review today. Microsoft objectives
70-745	Windows Server 2016 with System Center 2016 Virtual Machine Manager: datacenter fabric, software-defined compute/storage/networking, tenant workloads, containers, SCOM monitoring and continuity. This is particularly relevant to virtualization and platform operations. Microsoft objectives

Do not read this as a checklist every holder completed. The foundation was shared; these elective areas were alternatives. Your actual elective, prerequisite generation and work since certification determine which modern path is most direct.

What remains relevant today

The closest continuation for many holders is Windows Server and hybrid infrastructure, because it retains the same kind of work: directory administration, name resolution, virtualization, permissions, storage and troubleshooting. Microsoft’s current Windows Server objectives still include AD DS, Group Policy, Hyper-V, DNS, DHCP and file services. Those subjects have not disappeared because the MCSE exams retired. AZ-802 objectives.

Your strongest transferable asset may be understanding dependencies: why DNS affects domain authentication, how permissions are evaluated, what replication failures look like, and why a successful backup is not the same as a tested recovery. Bring that experience forward, then learn the new management and service models. A 70-744 holder may preserve more existing knowledge through identity or infrastructure security than through an unrelated application-development track; a 70-745 holder may find hybrid platform operations the nearer fit. These are editorial recommendations, conditional on actual experience.

What has changed

Operating-system lifecycle: Windows Server 2012 R2 is beyond ordinary extended support; Extended Security Updates are a separate programme. Windows Server 2016 is in its later support lifecycle. Maintaining these estates and preparing a supported migration are different from learning today’s default deployment approach. Consult Microsoft’s version-specific dates when planning. 2012 R2 lifecycle; 2016 lifecycle.
Identity control planes: AD DS remains useful. Microsoft Entra ID adds cloud identity, application access and governance; it is not simply a hosted domain controller. Existing OU/GPO, Kerberos or LDAP designs cannot be copied wholesale into Entra. Microsoft comparison.
Cloud operations: hosting a Windows VM in Azure adds resource scopes, Azure permissions, managed networking, platform monitoring and consumption costs. Guest OS administration is only one part of the role. AZ-104 objectives.
Management and security tooling: study today’s Windows Admin Center, Azure Arc, Azure Update Manager and Defender-based capabilities alongside your server skills. Old screenshots and product bundles such as OMS/ATA are not a current operating procedure. Modern hybrid role; historical security objectives.

For a 70-744 security specialist, three specific updates matter:

Advanced Threat Analytics → Microsoft Defender for Identity: ATA reached end of extended support on 13 January 2026. Microsoft recommends migration to Defender for Identity, which uses on-premises directory signals with a cloud service. Learn its sensor prerequisites and investigation workflow; existing ATA alert data is not automatically imported. Microsoft migration guidance.
Legacy Microsoft LAPS → Windows LAPS: local administrator password management remains the task, but Windows LAPS is a separate native implementation with additional AD encryption and Entra backup capabilities. Match the design to supported OS versions and device join state. Microsoft LAPS overview.
MMA/OMS Log Analytics agent → Azure Monitor Agent: the cloud Log Analytics agent retired in August 2024. Modern collection uses data collection rules; update-management dependencies need their own migration assessment. This does not mean every SCOM-only agent has the same retirement rule. Microsoft monitoring migration guidance.

How these skills map to Microsoft today

These are technology correspondences and skills overlaps, not official certification equivalencies. Some technologies continue directly; others solve a related problem through a different service.

Historical knowledge	Modern correspondence and the important boundary
AD DS users, groups, delegation, GPO	Continue using AD DS for domain services. Add Entra identity lifecycle, Conditional Access and privileged roles for cloud access. Entra is not a drop-in OU/GPO replacement. M5
AD FS, certificate-based trust, application access	Federation and PKI concepts remain useful. Learn Entra application integration and modern authentication, then assess each application’s migration needs. M5; M7
DNS, DHCP, IPAM, network access	Preserve TCP/IP and name-resolution skills; add Azure virtual networks, hybrid connectivity, private access and network security. Azure resource networking is not administered like a Windows DHCP server. M10
Hyper-V, clustering, VMM and SDDC	Continue with modern Windows virtualization where appropriate. Learn Azure VM operations; investigate Azure Local for suitable on-premises requirements. Azure Local uses Azure Arc management and is not the same product as the Azure Stack Hub named in 70-537. M2; M12
File shares, storage and continuity	Build on permissions, storage and recovery knowledge with Azure Files/File Sync and current hybrid migration and recovery capabilities. Test each service’s recovery behaviour rather than assume an old design transfers unchanged. M2; M3
Server hardening, privileged administration and auditing	Keep least privilege and investigation skills; add current server security controls, Entra governance, and cloud threat detection according to your role. M3; M7; M8
PowerShell and server deployment automation	Extend scripting into version-controlled infrastructure, Bicep/ARM deployment, pipelines and workload identities. A useful script is a foundation for this work, not proof of complete DevOps expertise. M4; M11

Where do I go from here?

MCSEDirectory’s recommendation: start with your prerequisite, elective and most recent work. For a holder whose experience centres on Windows Server, AD DS, Group Policy, DNS, DHCP, Hyper-V and PowerShell, updating server knowledge and adding hybrid administration usually preserves the largest share of existing expertise. Azure, identity, networking and architecture are meaningful branches from that foundation—not mandatory steps everyone must take.

Current exam transition — checked 7 September 2026: Microsoft now lists Microsoft Certified: Windows Server Administrator Associate, with AZ-802 — Administering Windows Server. Its page says AZ-800 and AZ-801 retire on 30 September 2026. The older Hybrid Administrator page still displays the two-exam route. For a new learning plan, use the current AZ-802 objectives and check booking availability; if already preparing for AZ-800/AZ-801, verify the transition and deadline before choosing to finish. This is a transition within the modern Windows Server programme, not an MCSE upgrade entitlement. Current credential; AZ-802 study guide; older hybrid page.

If you remained a Windows Server administrator

Closest modern pathway: Windows Server/hybrid administration; relevant credential: Windows Server Administrator Associate. Natural roles include Windows Server administrator and hybrid infrastructure engineer.

Your MCSA foundation—and especially work behind 70-413, 70-414 or 70-745—gives you a basis in domain services, networking and infrastructure operation. Refresh it against the current server objectives, then add the hybrid management tools your estate uses. The gap is often connecting familiar servers to modern management, security and monitoring services, not relearning what a domain or virtual machine is. Current Windows Server objectives; hybrid administration role.

Suggested learning path: assess a supported Windows Server version → refresh AD DS/GPO and Hyper-V administration → learn Windows Admin Center and Azure Arc onboarding → add update, monitoring and recovery procedures. In a lab, onboard a test server to Arc, establish an update and alerting process, then recover a deliberately removed test service or file. Record which permissions and services made the recovery possible. This exercise is our suggested evidence of the transition, not a Microsoft exam requirement.

If you moved into cloud infrastructure

Relevant current certification: Azure Administrator Associate, associated with AZ-104 — Microsoft Azure Administrator. Natural roles include Azure administrator and cloud infrastructure engineer.

Use server, storage and network troubleshooting as your starting point. If 70-537 was your elective, platform operations may feel familiar, but establish which Azure public-cloud tasks you have actually performed. Learn subscriptions and resource groups, Azure RBAC, Entra integration, virtual networks, storage options and monitoring; practise Bicep or ARM alongside PowerShell. These are concrete additions to guest OS administration. AZ-104 study guide.

Suggested learning path: build a small resource structure → deploy a Windows workload and its network from source-controlled configuration → apply limited administration permissions → collect diagnostics → test backup/recovery and inspect cost. Explain the difference between access to the Azure resource and access inside Windows. Move toward the exam after those distinctions are routine. Microsoft’s role description and objectives.

If Active Directory, federation or security was your strongest area

Relevant current certification: Identity and Access Administrator Associate, associated with SC-300 — Microsoft Identity and Access Administrator. This is a close editorial fit for directory-focused holders and for 70-414/70-744 specialists who worked with identity or privileged access.

Retain your understanding of authentication, trust and delegation. Add Entra tenants and roles, hybrid identity, application identities, Conditional Access and governance. Do not equate an AD group membership model with every Azure or Entra permission model. AD/Entra comparison; SC-300 objectives.

Suggested learning path: compare AD DS and Entra responsibilities → test a limited hybrid identity scenario → integrate a test application → introduce Conditional Access in report-only mode → practise privileged role activation and review sign-in evidence. This builds toward identity administration or identity engineering while using your existing directory knowledge. Identity administrator role; SC-300 study guide.

If the part of 70-744 you used most was auditing and investigating threats, consider the different Security Operations Analyst Associate direction, associated with SC-200 — Microsoft Security Operations Analyst. The gaps include KQL, Microsoft Sentinel, Defender XDR and incident triage. A useful next exercise is to investigate a benign test alert, correlate the available events, and explain an appropriate response. Server hardening and security operations overlap, but they are not the same job. Microsoft security operations role.

If you want to move toward architecture

Relevant current certification: Azure Solutions Architect Expert. Microsoft requires Azure Administrator Associate plus AZ-305 — Designing Microsoft Azure Infrastructure Solutions; the MCSE does not satisfy that prerequisite.

70-413 design work and 70-414/70-745 experience with infrastructure choices can be valuable foundations. Add hands-on Azure administration, governance, cost tradeoffs, cloud networking, managed data services and business continuity design. Architecture requires explaining how decisions interact and satisfying a workload’s requirements, not simply replacing a server diagram with Azure icons. Microsoft explicitly expects breadth across operations and experience with Azure administration, development and DevOps. Architect requirements.

Suggested learning path: close AZ-104-level operational gaps → study the Azure Well-Architected Framework and Cloud Adoption Framework linked from Microsoft’s architect page → design two alternatives for a familiar workload. Compare identity, connectivity, recovery objectives, failure domains and ongoing cost. Present the tradeoffs and migration sequence before using AZ-305 as a learning checkpoint. This route fits someone seeking cloud/hybrid solution design rather than a direct continuation of day-to-day server administration.

If networking was your strongest area

Relevant current certification: Azure Network Engineer Associate, associated with AZ-700 — Designing and Implementing Microsoft Azure Networking Solutions. This is a potential specialization for holders whose MCSA or 70-413 work centred on DNS, addressing, routing and remote access.

Learn Azure connectivity, private service access, application delivery and network security. Bring the habit of tracing resolution and packet flow, then learn the Azure-specific controls. Microsoft network engineer role.

Suggested learning path: acquire basic Azure resource administration → build two connected virtual networks → test DNS resolution across a hybrid boundary → add private service access → diagnose an intentionally broken route or filtering rule. Document the traffic path rather than just the portal settings. This supports a cloud network engineer direction and can also strengthen a hybrid administrator’s current role.

If virtualization and automation became your main work

For a 70-745/VMM specialist, first decide whether you want to operate platforms or build delivery systems. Modern Windows virtualization, Azure VM operation and an evaluation of Azure Local may preserve more existing platform expertise. Azure Local is an option to investigate against workload and hardware requirements, not a blanket replacement for every VMM deployment. Azure Local overview.

If your aim is DevOps or platform automation, consider DevOps Engineer Expert, associated with AZ-400 — Designing and Implementing Microsoft DevOps Solutions, using the currently available Azure Administrator Associate prerequisite route. Microsoft expects both administration and development experience, with strength in at least one, plus GitHub and Azure DevOps familiarity. PowerShell alone does not cover that scope. Microsoft DevOps requirements.

Suggested learning path: put a small deployment in Git → implement repeatable infrastructure configuration → add validation and a deployment pipeline → use an appropriate workload identity → demonstrate rollback and useful monitoring. Learn how application delivery and operational ownership meet. This fits an infrastructure professional who wants to work with developers on reliable delivery.

These are editorial choices, not a ladder of required exams. Microsoft 365, endpoint management, data and development can be good destinations when your work has moved there, but Core Infrastructure alone is not evidence that you covered Exchange, SharePoint, SQL development or application programming. Do not discard a strong infrastructure background just to follow a generic certification chart.

Prerequisites: MCSA: Windows Server 2012 and MCSA: Windows Server 2016. The exact exam routes are listed above.
Historical relationships: MCSE: Cloud Platform & Infrastructure preceded this route; MCSE: Server Infrastructure shared exams 70-413 and 70-414 but required both.
Exam references: 70-413 and the 2012 foundation, 70-414 objectives, 70-537 requirement listing, 70-744 objectives, 70-745 objectives, 2016 foundation exams, and the 70-417 / 70-743 MCSA upgrade routes.
Modern choices: use the credential and study-guide links in each detailed pathway for Microsoft’s current requirements.

Sources and methodology

Historical requirements come from Microsoft programme notices, Microsoft Support and Microsoft Press exam references. Modern credential requirements come from Microsoft Learn; pathway choices and suggested exercises are MCSEDirectory’s editorial analysis. Modern guidance checked: 7 September 2026.

Historical scope and source notes

The five-elective table describes the October 2020 rule, not every route available since 2019. Earlier eligibility periods for 70-473/70-475, full upgrade eligibility and retrospective exam-credit rules remain unconfirmed. Microsoft’s earlier scheduled retirement for 70-537 also differs from later programme notices. 2019 notices; July update; final programme notice.

The requirement clarification is a named Microsoft Community Support response, last updated 8 October 2020. It and the 70-414 objectives were available through indexed excerpts when their original URLs could not be retrieved. Detailed objective versions for 70-537 have not been established. These limits do not imply that an unlisted route was unavailable.

At a glance