Skip to content
Back to course
ExpertHalf day to full dayInstructor visible

Final Contoso enterprise capstone

The learner must assess Contoso, identify risks, design target architecture, plan migration, implement selected controls, troubleshoot injected issues, and submit the final package.

Business context

This is the paying-student demo: a real architect deliverable, not a basic admin class.

Technical objective

Complete the final architecture deck/report, run technical checks, and pass the certification-style assessment.

Student instructions

  1. 1Review all previous artifacts and injected capstone issues.
  2. 2Finalize current-state assessment, risk register, target architecture, migration roadmap, monitoring model, RCA, and executive summary.
  3. 3Run lab validation and simulated tenant checks.
  4. 4Submit the package for AI and instructor feedback.
  5. 5Take the final assessment for certificate-ready completion.

Troubleshooting

  • If a validation fails, isolate whether it is a live pod check, simulated tenant check, or documentation rubric check.

Cleanup

  • Export completion report.
  • Teardown the course pod after artifacts are saved.
Launch flow

Provisioning readiness

Pending
Waiting for launch

Click Launch lab to start the provisioning flow and watch each stage complete.

0%
  1. Request accepted
  2. Capacity reserved
  3. Templates queued
  4. Validation running
  5. Workspace ready
ad-dns-healthy
Pending
m365-simulated-tenant-ready
Pending
m365-migration-plan-complete
Pending
m365-architecture-package-complete
Pending

Required templates

  • Domain Controller template - defined
  • Windows Server 2022 base - defined
  • Windows 11 client - defined
  • Microsoft 365 simulated tenant layer - defined

Validation checks

  • AD DS and DNS healthy: Directory services, DNS, and LDAP checks pass inside the tenant network.
  • Simulated M365 tenant ready: The simulated tenant layer exposes users, groups, licensing, Exchange, Teams, SharePoint, OneDrive, Intune, compliance, and service-health scenarios.
  • Tenant migration plan complete: Plan includes discovery, identity coexistence, domain consolidation, mailbox and collaboration migration, cutover, rollback, communications, and hypercare.
  • Architecture package complete: Final package includes current state, risk register, target architecture, identity design, governance model, migration roadmap, monitoring model, RCA, and executive summary.

Expected result

Final package satisfies technical, governance, migration, operations, and executive-readiness rubrics.

Reset policy: Student can reset to the clean capstone snapshot; instructor can re-inject break/fix scenarios. Teardown policy: Automatic teardown at TTL expiry with manual instructor override for cohorts.