Installing and configuring Windows server 2012 R2 : · PDF fileInstalling WindowsServer 2012...

Installing and ConfiguringWindows Server® 2012 R2

Exam 70-410

Craig Zacker

Wiley

Lesson 1: Installing Servers 1

Selecting a Windows Server 2012 R2

Edition 2

Supporting Server Roles 3

Supporting Server Virtualization 5

Server Licensing 5

Installing Windows Server 2012 R2 6

System Requirements 6

Performing a Clean Installation 8

Installing Third-Party Drivers 11

Working with Installation Partitions 12

Choosing Installation Options 12

Using Server Core 13

Server Core Defaults 14

Server Core Capabilities 14

Using the Minimal Server Interface 15

Using Features on Demand 16

Upgrading Servers 17

Upgrade Paths 18

Preparing to Upgrade 18

Performing an Upgrade Installation 19

Migrating Roles 20

Installing Windows Server

Migration Tools 21

Using Migration Guides 24

Skill Summary 25

Knowledge Assessment 25

Business Case Scenarios 28

Lesson 2: Configuring Servers 29

Completing Post-Installation Tasks 30

Using GUI Tools 30

Using Command-Line Tools 33

Converting Between GUI and Server Core 34

Configuring NIC Teaming 36

Using Roles, Features, and Services 40

Using Server Manager 40

Adding Roles and Features 41

Deploying Roles to VHDs 44

Configuring Services 46

Delegating Server Administration 47

Using Windows Powershell Desired State

Configuration 48

Skill Summary 49



Lesson 3: Configuring Local

Storage 53

Planning Server Storage 54

Determining the Number of Servers Needed 54

Estimating Storage Requirements 55

Selecting a Storage Technology 56

Selecting a Physical Disk Technology 56

Using External Drive Arrays 57

Planning for Storage Fault Tolerance 59

Using Disk Mirroring 59

Using RAID 60

Using Storage Spaces 61

Understanding Windows Disk

Settings 62

Selecting a Partition Style 62

Understanding Disk Types 63

Understanding Volume Types 64

Understanding File Systems 65

Working with Disks 65

Adding a New Physical Disk 66

Creating and Mounting VHDs 69

Creating a Storage Pool 71

Creating Virtual Disks 74

Creating a Simple Volume 78

Creating a Striped, Spanned, Mirrored, or

RAID-5 Volume 81

Extending and Shrinking Volumes and Disks 83

www.wiley.com/coIIege/microsoft or

call the MOAC Toll-Free Number: 1+(888) 764-7001 (U.S. & Canada only) xix

xx I Contents

Skill Summary 84


Business Case Scenario 87

Lesson 4: Configuring Fileand Share Access 88

Creating Folder Shares 89

Assigning Permissions 95

Understanding the Windows Permission

Architecture 96

Understanding Basic and Advanced Permissions 97

Allowing and Denying Permissions 98

Inheriting Permissions 99

Understanding Effective Access 101

Setting Share Permissions 102

Understanding NTFS Authorization 105

Assigning Basic NTFS Permissions 106

Assigning Advanced NTFS Permissions 108

Understanding Resource Ownership 110

Combining Share and NTFS Permissions 110

Configuring Volume Shadow Copies 111

Configuring NTFS Quotas 113

Configuring Work Folders 115

Skill Summary 115



Lesson 5: Configuring Print

and Document

Services 120

Deploying a Print Server 121

Understanding the Windows Print Architecture 121

Understanding Windows Printing 121

Windows Printing Flexibility 122

Sharing a Printer 126

Managing Printer Drivers 128

Using Remote Access Easy Print 129

Configuring Printer Security 130

Managing Documents 132

Managing Printers 134

Setting Printer Priorities 134

Scheduling Printer Access 135

Creating a Printer Pool 136

Using the Print and Document Services Role 138

Using the Print Management Console 139

Adding Print Servers 140

Viewing Printers 140

Managing Printers and Print Servers 141

Deploying Printers with Group Policy 142

Skill Summary 143



Lesson 6: Configuring Servers for

Remote Management 148

Using Server Manager for Remote

Management 149

Adding Servers 150

Adding Workgroup Servers 151

Calibrating Server Manager Performance 152

Managing Non-Domain-Joined Servers 153

Managing Windows Server 2012 R2 Servers 153

Configuring WinRM 154

Configuring Windows Firewall 154

Managing Down-Level Servers 158

Using Remote Server Administration Tools 160

Configuring the Windows PowerShell Web Access

Gateway 161

Configuring a Test Installation 161

Working with Remote Servers 162

Skill Summary 163



Lesson 7: Creating and ConfiguringVirtual Machine

Settings 167

Virtualizing Servers 168

Virtualization Architectures 168

Hyper-V Implementations 169

Hyper-V Licensing 170

Hyper-V Hardware Limitations 170

Hyper-V Server 170

Installing Hyper-V 171

Using Hyper-V Manager 172

Creating a Virtual Machine 173

Creating Generation 1 and Generation 2 VMs 178

www.wiley.com/colIege/microsoft or

call the MOACToil-Free Number: 1+(888) 764-7001 (U.S. & Canada only)

Contents ] xxi

Installing an Operating System 179

Configuring Guest Integration Services 181

Using Enhanced Session Mode 182

Allocating Memory 183

Using Dynamic Memory 184

Configuring Smart Paging 186

Configuring Resource Metering 186

Using Remote FX 187

Skill Summary 188



Lesson 8: Creating and ConfiguringVirtual Machine

Storage 192

Working with Virtual Disks 193

Understanding Virtual Disk Formats 194

Creating Virtual Disks 194

Creating a Virtual Disk with a VM 194

Creating a New Virtual Disk 195

Adding Virtual Disks to Virtual

Machines 196

Creating Differencing Disks 198

Configuring Pass-Through Disks 199

Modifying Virtual Disks 199

Creating Checkpoints 202

Configuring Storage Qualityof Service 203

Connecting to a SAN 204

Understanding SAN Technologies 205

Using Fibre Channel 206

Connecting Virtual Machines to a SAN 206

Skill Summary 208



Lesson 9: Creating and ConfiguringVirtual Networks 212

Using Virtual Networking 213

Creating Virtual Switches 213

Creating the Default Virtual Switch 213

Creating a New Virtual Switch 215

Configuring MAC Addresses 218

Creating Virtual Network Adapters 219

Using Synthetic Adaptors and Emulated Adapters 221

Configuring Hardware Acceleration Settings 222

Configuring Advanced Network AdapterFeatures 223

Configuring NIC Teaming in a Virtual Network

Environment 223

Creating the NIC Team 224

Creating the Team Virtual Switch 224

Configuring a NIC Team Virtual Network

Adapter 225

Creating Virtual Network Configurations 226

Extending a Production Network into

Virtual Space 227

Creating an Isolated Network 227

Skill Summary 227



Lesson 10: Configuring IPv4 and IPv6

Addressing 231

Understanding IPv4 Addressing 232

IPv4 Classful Addressing 232

Classless Inter-Domain Routing 234

Public and Private IPv4 Addressing 235

IPv4 Subnetting 235

Supernetting 236

Assigning IPv4 Addresses 237

Manual IPv4 Address Configuration 237

Dynamic Host Configuration Protocol 239

Automatic Private IP Addressing (APIPA) 239

Understanding IPv6 Addressing 240

Introducing IPv6 240

Contracting IPv6 Addresses 241

Expressing IPv6 Network Addresses 241

IPv6 Address Types 241

Global Unicast Addresses 241

Link-Local Unicast Addresses 244

Unique Local Unicast Addresses 245

Special Addresses 245

Multicast Addresses 246

Anycast Addresses 246

Assigning IPv6 Addresses 247

Manual IPv6 Address Allocation 247

Stateless IPv6 Address Autoconfiguration 248

Dynamic Host Configuration Protocol v6 248

www.wiley.com/college/microsoft or

call the MOAC Toil-Free Number: 1+(888) 764-7001 (U.S. & Canada only)

xxii i Contents

Planning an IP Transition 249

Using a Dual IP Stack 249

Tunneling 250

Configuring Tunnels Manually 250

Configuring Tunnels Automatically 251

Skill Summary 253



Lesson 11: Deploying and

Configuring the DHCPService 257

Understanding DHCP 258

DHCP Message Types 259

DHCP Communications 259

DHCP Lease Negotiation 260

DHCP Lease Renewal 261

Deploying a DHCP Server 262

Creating a Scope 263

Configuring DHCP Options 267

Creating a Reservation 268

Using PXE 269

Using PXE with WDS 269

Deploying a DHCP Relay Agent 270

Skill Summary 273



Lesson 12: Deploying and

Configuring the DNS

Service 278

Understanding the DNS Architecture 279

Creating a DNS Standard 279

DNS Naming 280

Understanding The DNS Domain Hierarchy 281

Top-Level Domains 281

Second-Level Domains 282

Subdomains 283

Understanding DNS Communications 283

Comprehending DNS Server Caching 286

Negative Caching 286

Cache Data Persistence 287

Understanding DNS Referrals and Queries 288

Using DNS Forwarders 288

Understanding Reverse Name Resolution 289

Designing a DNS Deployment 291

Resolving Internet Names 291

Hosting Internet Domains 292

Hosting Active Directory Domains 292

Integrating DHCP and DNS 293

Creating Internet Domains 293

Deploying a DNS Server 294

Creating Zones 294

Using Active Directory-Integrated Zones 296

Creating an Active Directory Zone 296

Creating Resource Records 297

Configuring DNS Server Settings 301

Configuring Active Directory DNS

Replication 301

Configuring Root Hints 301

Skill Summary 302



Lesson 13: Installing DomainControllers 307

Introducing Active Directory 308

Understanding Active Directory Architecture 308

Understanding Objects and Attributes 308

Understanding Domains 309

Zooming In: Organizational Units 309

Zooming In: Groups 310

Zooming Out: Domain Trees 310

Zooming Out: Forests 311

Introducing the Global Catalog 311

Understanding Functional Levels 311

Deploying Active Directory Domain Services 312

Installing the Active Directory Domain Services Role 312

Creating a New Forest 314

Adding a Domain Controller to an Existing Domain 316

Creating a New Child Domain in a Forest 319

Installing AD DS on Server Core 321

Using Install from Media (IFM) 323

Upgrading Active Directory Domain Services 324

Deploying Active Directory laas on Windows Azure 325

Removing a Domain Controller 325

Configuring the Global Catalog 327

Troubleshooting DNS SRV Registration Failure 328

www.wiley.com/coIlege/microsoft or

call the MOAC Toll-Free Number: 1+(888) 764-7001 (U.S. & Canada only)

Contents j xxiii

Skill Summary 329



Lesson 14: Creating and ManagingActive Directory Users

and Computers 334

Creating User Objects 335

Understanding User Creation Tools 336

Creating Single Users 336

Using Dsadd.exe 340

Using Windows PowerShell 341

Creating User Templates 341

Creating Multiple Users 343

Using CSVDE.exe 343

Using LDIFDE.exe 344

Using Windows PowerShell 344

Creating Computer Objects 345

Creating Computer Objects Using Active DirectoryUsers and Computers 346

Creating Computer Objects with Active DirectoryAdministrative Center 347

Creating Computer Objects Using Dsadd.exe 347

Managing Active Directory Objects 348

Managing Multiple Users 349

Joining Computers to a Domain 350

Joining a Domain Using Netdom.exe 350

Creating Computer Objects While Joining 351

Joining a Domain While Offline 351

Managing Disabled Accounts 352

Skill Summary 352



Lesson 15: Creating and ManagingActive Directory Groupsand OrganizationalUnits 357

Working with Organizational Units 358

Creating OUs 358

Using OUs to Delegate Active DirectoryManagement Tasks 360

Working with Groups 362

Understanding Group Types 363

Understanding Group Scopes 364

Domain Local Groups 364

Global Groups 364

Universal Groups 364

Working with Default Groups 365

Nesting Groups 365

Using Special Identities 367

Creating Groups 367

Creating Groups from the Command Line 369

Managing Group Memberships 369

Managing Group Membership Using Group Policy 370

Managing Group Objects with Dsmod.exe 372

Converting Groups 372

Deleting a Group 373

Skill Summary 374



Lesson 16: Creating Group PolicyObjects 379

Introducing Group Policy 380

Understanding Group Policy Objects 381

Local GPOs 381

Domain GPOs 382

Starter GPOs 382

Viewing Group Policy Templates 382

Configuring a Central Store 383

Using the Group Policy Management Console 383

Creating and Linking Nonlocal GPOs 384

Using Security Filtering 386

Understanding Group Policy Processing 387

Processing Multiple GPOs 388

Applying GPO Settings 388

Configuring Exceptions to GPO Processing 389

Managing Starter GPOs 390

Configuring Group Policy Settings 391

Policy Explanations 392

Understanding Policy States 392

Searching Policies 393

Creating Multiple Local GPOs 394

Skill Summary 397




call the MOAC Toil-Free Number: 1+(888) 764-7001 (U.S. & Canada only)

xxiv j Contents

Lesson 17; Configuring SecurityPolicies 401

Configuring Security Policies Using GroupPolicy 402

Defining Local Policies 403

Planning and Configuring an Audit Policy 403

Assigning User Rights 409

Configuring Security Options 409

Customizing Event Log Policies 411

Understanding Restricted Groups 412

Using Security Templates 413

Using the Security Templates Console 413

Planning a Security Template Strategy 414

Creating Security Templates 414

Working with Security Template Settings 415

Importing Security Templates into GPOs 415

Maintaining and Optimizing Group Policy 415

Manually Refreshing Group Policy 416

Configuring Local Users and Groups 416

Using the User Accounts Control Panel 417

Creating a New Local User Account 417

Using the Local Users and Groups Snap-In 419

Creating a Local Group 420

Configuring User Account Control 421

Performing Administrative Tasks 421

Using Secure Desktop 422

Configuring User Account Control Settings 423

Skill Summary 424



Lesson 18: Configuring ApplicationRestricted Policies 429

Installing Software with Group Policy 430

Repackaging Software 430

Deploying Software Using Group Policy 431

Assigning an Application to a User or Computer 432

Publishing an Application 432

Configuring Software Restriction Policies 436

Enforcing Restrictions 436

Configuring Software Restriction Rules 437

Hash Rules 438

Certificate Rules 439

Path Rules 439

Network Zone Rules 439

Using Multiple Rules 439

Configuring Software Restriction

Properties 440

Enforcement 440

Designated File Types 440

Trusted Publishers 440

Using AppLocker 441

Understanding Rule Types 442

Creating Default Rules 443

Creating Rules Automatically 444

Creating Rules Manually 445

Skill Summary 446



Lesson 19: Configuring WindowsFirewall 452

Building a Firewall 453

Understanding Windows Firewall

Settings 453

Working with Windows Firewall 454

Using the Windows Firewall Control

Panel 456

Customizing Settings 457

Allowing Applications 458

Using the Windows Firewall with Advanced

Security Console 459

Configuring Profile Settings 460

Creating Rules 461

Importing and Exporting Rules 464

Creating Rules Using Group

Policy 465

Using Filters 465

Creating Connection Security Rules 466

Skill Summary 468



Appendix A 473

Index 474


call the MOACToil-Free Number: 1+(888) 764-7001 (U.S. & Canada only)

Installing and configuring Windows server 2012 R2 : · PDF fileInstalling WindowsServer 2012...

Documents

Transcript of Installing and configuring Windows server 2012 R2 : · PDF fileInstalling WindowsServer 2012...