Microsoft Retired MS-900 and Replaced It with AB-900 — Here's What Actually Changed



On March 31, 2026, Microsoft quietly retired the MS-900 exam, the Microsoft 365 Fundamentals certification that had been the standard entry point into the Microsoft ecosystem for years. In its place came something new: the AB-900, officially titled Microsoft 365 Copilot and Agent Administration Fundamentals.

Most people assumed it was a light rebrand. It is not.

These two certifications share roughly 20 to 25% of their content. The rest is completely new territory — AI governance, agent lifecycle management, Microsoft Purview at depth, and Copilot administration tools that did not even exist when MS-900 was relevant. If you are planning your certification path and have been treating AB-900 like a refreshed MS-900 with a new number, you need to course-correct now.

This article breaks down exactly what changed, what stayed, where the difficulty gap sits, and what it means for your career in 2026.

Why Microsoft Killed the MS-900

Before getting into the differences, it helps to understand the reason behind the change.

MS-900 was launched in an era where knowing what Microsoft 365 includes was a legitimate differentiator. Organizations were still figuring out whether to migrate to the cloud, what Teams was for, and how Exchange Online worked. The exam reflected that reality — wide, shallow, and vocabulary-heavy.

By 2025, that landscape had shifted entirely. Most enterprise IT environments already ran on Microsoft 365. The gap organizations started noticing was not "does someone know what SharePoint is" — it was "does anyone on our team know how to govern Copilot, manage AI agents, or prevent sensitive data from leaking through an LLM interface?"

Microsoft's response was to retire the old credential and build something that addresses the actual problem. The AB-900 is that response.

What MS-900 Actually Covered

Let's be direct about what the MS-900 was.

It covered Microsoft 365 at a surface level: productivity apps, collaboration tools (Teams, SharePoint, Exchange), licensing tiers, the general idea of security and compliance, and how Microsoft's cloud services compare to on-premises setups. The security content was light — you needed to know what Microsoft Defender was, not how to configure it. Compliance coverage was minimal. There were no labs, no scenario depth, and no coverage of anything related to AI.

MS-900 was genuinely useful for one thing: helping someone new to IT vocabulary get a structured overview of the Microsoft ecosystem. As a career signal, it was limited. Hiring managers in 2023–2025 increasingly saw it as a checkbox, not a differentiator.

What AB-900 Actually Covers

The AB-900 exam is built around three domains:

Domain 1: Core Microsoft 365 Services and Administration (30–35%) This is the familiar ground — user management, licensing, admin center navigation, and identity basics. The difference from MS-900 is the depth. Where MS-900 asked whether you recognized that licensing tiers exist, AB-900 asks what each license tier includes, which admin center handles which function, and how Entra ID fits into the identity picture. Zero Trust concepts appear here. That was nowhere near MS-900 content.

Domain 2: Data Protection and Governance for Microsoft 365 and Copilot (35–40%) This is the domain that changes everything. It covers Microsoft Purview, data loss prevention (DLP), sensitivity labels, compliance tools, and — critically — how all of that applies specifically to Copilot environments. This is about controlling what data Copilot can access, preventing sensitive information from surfacing in AI-generated outputs, monitoring for risk, and understanding Data Security Posture Management (DSPM) for AI.

At nearly 40% of the exam weight, this domain is the heaviest. MS-900 had almost no equivalent. It mentioned compliance in a general way. AB-900 requires you to know which tool does what, when to reach for DLP versus sensitivity labels, and what governance looks like when an AI model is in the middle of the data flow.

Domain 3: Copilot and Agent Administration (25–30%) This domain has no MS-900 equivalent. It covers building, publishing, testing, and retiring AI agents in Microsoft Copilot Studio. Managing access and approvals for agents. Understanding the difference between agent types — Researcher, Analyst, and Custom agents serve distinct purposes, and the exam distinguishes between them clearly. Monitoring usage. Handling the 24-hour delay between assigning a Copilot license and the feature becoming available to users (something that catches people in real deployments all the time).

This is entirely new territory for most working M365 admins.

Read More: Microsoft AB-900 Guide

The Side-by-Side Breakdown

Here is the honest comparison between what MS-900 tested and what AB-900 tests:

Area

MS-900

AB-900

M365 Core Services

Covered (surface level)

Covered (more precise)

Admin Center Navigation

Basic recognition

Functional depth

Licensing and Pricing

Covered

Covered

Identity and Authentication

Basic

Deeper (Entra, Zero Trust)

Security and Compliance

Surface level

Significantly heavier (Purview)

Copilot Administration

Not present

Core domain (25–30%)

Agent Lifecycle Management

Not present

Core domain (25–30%)

DSPM for AI

Not present

Tested

Power Platform Admin Center

Not present

Tested

Data Loss Prevention depth

Not present

Tested

The content overlap between the two exams sits at around 20–25%. If you passed MS-900 in 2024 and plan to sit AB-900 with minimal additional study, you are likely walking into an exam where 75–80% of the content is new to you.

The Difficulty Gap Is Real

MS-900 had a reputation as an accessible entry point. Most candidates with moderate Microsoft 365 familiarity could pass it in a couple of weeks of focused study.

AB-900 is labeled "Fundamentals" by Microsoft, which leads people to underestimate it. The format is similar — 40 to 60 multiple-choice questions, 45 minutes, a passing score of 700 out of 1000. No labs, no coding. But the surface area is considerably wider, and some of it — particularly Purview and agent administration — is genuinely unfamiliar ground for most M365 admins.

A few specific places where candidates struggle:

Purview overconfidence. Knowing that DLP and sensitivity labels exist is not the same as knowing which one applies in a given scenario. The exam tests application, not recognition. Experienced admins who have worked around Purview without going deep often find this domain harder than they expected.

Agent type confusion. Researcher, Analyst, and Custom agents in Copilot Studio have distinct use cases. Mixing them up costs points. This content is covered in Microsoft Learn resources, but it requires hands-on exploration to stick.

The licensing timing trap. There is a 24-hour delay between assigning a Microsoft 365 Copilot license and the feature becoming available to a user. It sounds trivial, but questions around troubleshooting access issues hinge on knowing this.

Question weighting. Questions are weighted by difficulty, not counted equally. Candidates who know the easy topics well but skim the harder domains are penalized more than they expect.

Who AB-900 Is Actually For

The MS-900 was for almost anyone entering Microsoft 365 territory. It was broad enough to be a fit across roles. AB-900 has a clearer target audience.

Microsoft 365 Administrators are the primary audience. Organizations rolling out Copilot at scale need admins who understand how to configure access, manage governance settings, and monitor AI usage. That is exactly what AB-900 validates.

IT Helpdesk and Support Analysts are increasingly fielding Copilot-related tickets — access issues, unexpected behavior, data exposure questions. Understanding the admin layer makes these professionals substantially more useful, and AB-900 formalizes that understanding.

Early-career IT professionals building a certification foundation will find AB-900 covers more relevant ground than MS-900 ever did for the current market. The skills it validates are not going away.

Compliance and Governance Analysts will find the Purview depth directly applicable to their daily work, especially around DLP policies and AI data security posture.

What AB-900 is not for: anyone expecting Azure coverage. The exam lives entirely inside the Microsoft 365 ecosystem — Exchange Online, SharePoint, Teams, Entra, Purview, Copilot Studio. If you came expecting Azure AI content, that is a different exam entirely.

The Broader Context: Microsoft's 2026 Certification Overhaul

AB-900 did not arrive in isolation. It is part of a larger structural shift Microsoft made across its entire certification catalog in 2026.

In total, 4 new certifications launched in the AB series (AB-900, AB-730, AB-731, AB-100), 11+ certifications were retired or scheduled for retirement, and several major exams — AZ-204, AI-102, AZ-500 — were replaced with AI-first alternatives.

The pattern is consistent across every change. Microsoft is drawing a line between professionals who know its products and professionals who can put those products to work with AI at the center. The certifications that survived or were replaced are the ones that now answer the latter question.

MS-900 answered the former. That is why it is gone.

Exam Logistics: AB-900 vs MS-900

Both exams follow similar logistics. The AB-900 costs $165 USD (pricing varies by region). It is available online and in-person through Pearson VUE, same as MS-900 was. No prerequisites are required. Like all Fundamentals-level Microsoft certifications, it does not expire once earned — a permanent credential.

The exam itself runs 40 to 60 questions in 45 minutes. That is roughly one question per minute with a small margin. The pass mark is 700 out of 1000.

Preparation resources are free through Microsoft Learn. The official AB-900 study guide and the AB-900T00-A course (Introduction to Microsoft 365 and AI Administration) are the starting points. For practice under timed conditions, Dumpsgate's AB-900 practice questions are worth using in the final preparation stretch.

What This Means for Your Certification Strategy

If you already hold the MS-900, your credential remains on your transcript permanently. It does not disappear because it was retired. But in 2026, its relevance as a career signal has dropped further, simply because the AB-900 now exists and covers substantially more ground.

If you were planning to sit the MS-900 and the retirement caught you off guard, your study materials are largely not transferable. The foundation content overlaps, but the Purview depth, the agent administration domain, and the governance content are genuinely new preparation requirements.

The honest advice: start with the official Microsoft Learn study guide, allocate more time to Domain 2 (Purview and governance) than the percentage suggests, get hands-on time in a Microsoft 365 tenant before exam day, and treat the agent administration domain as new material even if you have years of M365 experience.

AB-900 is not harder in the sense of requiring deep specialization. It is broader. And the breadth is the point — because managing Microsoft 365 in 2026 genuinely requires knowing all of it.

Quick Reference: AB-900 Key Facts

  • Exam Code: AB-900

  • Full Name: Microsoft 365 Copilot and Agent Administration Fundamentals

  • Questions: 40–60

  • Duration: 45 minutes

  • Pass Score: 700/1000

  • Cost: $165 USD

  • Expires: Never (Fundamentals-level credential)

  • Prerequisites: None

  • Replaced: MS-900 (retired March 31, 2026)

  • Content overlap with MS-900: ~20–25%

Look Further: Microsoft Certification Updates 2026: What’s New, What’s Retiring, and Which Exams Replace Them

Comments