Installing and Configuring Windows Server 2012 R2

Transcription

1 Installing and Configuring Windows Server 2012 R2 Exam Craig Zacker Wiley

2 Lesson 1: Installing Servers 1 Selecting a Windows Server 2012 R2 Edition 2 Supporting Server Roles 3 Supporting Server Virtualization 5 Server Licensing 5 Installing Windows Server 2012 R2 6 System Requirements 6 Performing a Clean Installation 8 Installing Third-Party Drivers 11 Working with Installation Partitions 12 Choosing Installation Options 12 Using Server Core 13 Server Core Defaults 14 Server Core Capabilities 14 Using the Minimal Server Interface 15 Using Features on Demand 16 Upgrading Servers 17 Upgrade Paths 18 Preparing to Upgrade 18 Performing an Upgrade Installation 19 Migrating Roles 20 Installing Windows Server Migration Tools 21 Using Migration Guides 24 Skill Summary 25 Assessment 25 Business Case Scenarios 28 Lesson 2: Configuring Completing Using GUI Tools 30 Post-Installation Tasks 30 Using Command-Line Tools 33 Converting Between GUI and Server Core 34 Configuring NIC Teaming 36 Using Roles, Features, and Services 40 Servers 29 Using Server Manager 40 Adding Roles and Features 41 Deploying Roles to VHDs 44 Configuring Services 46 Delegating Server Administration 47 Using Configuration 48 Windows Powershell Desired State Skill Summary 49 Assessment 49 Business Case Scenarios 52 Lesson 3: Configuring Local Storage 53 Planning Server Storage 54 Determining the Number of Servers Needed 54 Estimating Storage Requirements 55 Selecting a Storage Technology 56 Selecting a Physical Disk Technology 56 Using External Drive Arrays 57 Planning for Storage Fault Tolerance 59 Using Disk Mirroring 59 Using RAID 60 Using Storage Spaces 61 Understanding Windows Disk Settings 62 Selecting a Partition Style 62 Understanding Disk Types 63 Understanding Volume Types 64 Understanding File Systems 65 Working with Disks 65 Adding a New Physical Disk 66 Creating and Mounting VHDs 69 Creating a Storage Pool 71 Creating Virtual Disks 74 Creating a Simple Volume 78 Creating a Striped, Spanned, Mirrored, or RAID-5 Volume 81 Extending and Shrinking Volumes and Disks 83 or call the MOAC Toll-Free Number: 1+(888) (U.S. & Canada only) xix

3 xx I Contents Skill Summary 84 Assessment 85 Business Case Scenario 87 Lesson 4: Configuring File and Share Access 88 Creating Folder Shares 89 Assigning Permissions 95 Understanding the Windows Permission Architecture 96 Understanding Basic and Advanced Permissions 97 Allowing and Denying Permissions 98 Inheriting Permissions 99 Understanding Effective Access 101 Setting Share Permissions 102 Understanding NTFS Authorization 105 Assigning Basic NTFS Permissions 106 Assigning Advanced NTFS Permissions 108 Understanding Resource Ownership 110 Combining Share and NTFS Permissions 110 Configuring Volume Shadow Copies 111 Configuring NTFS Quotas 113 Configuring Skill Summary 115 Work Folders 115 Assessment 116 Business Case Scenarios 119 Lesson 5: Configuring Print and Document Services 120 Deploying a Print Server 121 Understanding the Windows Print Architecture 121 Understanding Windows Printing 121 Windows Printing Flexibility 122 Sharing a Printer 126 Managing Printer Drivers 128 Using Remote Access Easy Print 129 Configuring Printer Security 130 Managing Documents 132 Managing Printers 134 Setting Printer Priorities 134 Scheduling Printer Access 135 Creating a Printer Pool 136 Using the Print and Document Services Role 138 Using the Print Management Console 139 Adding Print Servers 140 Viewing Printers 140 Managing Printers and Print Servers 141 Deploying Printers with Group Policy 142 Skill Summary 143 Assessment 144 Business Case Scenarios 147 Lesson 6: Configuring Servers for Remote Management 148 Using Server Manager for Remote Management 149 Adding Servers 150 Adding Workgroup Servers 151 Calibrating Server Manager Performance 152 Managing Non-Domain-Joined Servers 153 Windows Server 2012 R2 Servers 153 Managing Configuring WinRM 154 Configuring Windows Firewall 154 Managing Down-Level Servers 158 Using Remote Server Administration Tools 160 Configuring the Windows PowerShell Web Access Gateway 161 Configuring a Test Installation 161 Working with Remote Servers 162 Skill Summary 163 Assessment 163 Business Case Scenarios 166 Lesson 7: Virtualizing Servers 168 Virtualization Architectures 168 Hyper-V Implementations 169 Hyper-V Licensing 170 Creating and Configuring Virtual Machine Settings 167 Hyper-V Hardware Limitations 170 Hyper-V Server 170 Installing Hyper-V 171 Using Hyper-V Manager 172 Creating a Virtual Machine 173 Creating Generation 1 and Generation 2 VMs or

4 ] Contents xxi Installing an Operating System 179 Configuring Guest Integration Services 181 Using Enhanced Session Mode 182 Allocating Memory 183 Using Dynamic Memory 184 Configuring Smart Paging 186 Configuring Resource Metering 186 Using Remote FX 187 Skill Summary 188 Assessment 188 Business Case Scenarios 191 Lesson 8: Creating and Configuring Virtual Machine Storage 192 Working with Virtual Disks 193 Understanding Virtual Disk Formats 194 Creating Virtual Disks 194 Creating a Virtual Disk with a VM 194 Creating a New Virtual Disk 195 Adding Virtual Disks to Virtual Machines 196 Creating Differencing Disks 198 Configuring Pass-Through Disks 199 Modifying Virtual Disks 199 Creating Checkpoints 202 Configuring Storage Quality of Service 203 Connecting to a SAN 204 Understanding SAN Technologies 205 Using Fibre Channel 206 Connecting Virtual Machines to a SAN 206 Skill Summary 208 Assessment 209 Business Case Scenarios 211 Lesson 9: Creating and Configuring Virtual Networks 212 Using Virtual Networking 213 Creating Virtual Switches 213 Creating the Default Virtual Switch 213 Creating a New Virtual Switch 215 Configuring MAC Addresses 218 Creating Virtual Network Adapters 219 Using Synthetic Adaptors and Emulated Adapters 221 Configuring Hardware Acceleration Settings 222 Configuring Advanced Network Adapter Features 223 Configuring NIC Teaming in a Virtual Network Environment 223 Creating the NIC Team 224 Creating the Team Virtual Switch 224 Configuring a NIC Team Virtual Network Adapter 225 Creating Virtual Network Configurations 226 Extending a Production Network into Virtual Space 227 Creating an Isolated Network 227 Skill Summary 227 Assessment 228 Business Case Scenarios 230 Lesson 10: Configuring IPv4 and IPv6 Addressing 231 Understanding IPv4 Addressing 232 IPv4 Classful Addressing 232 Classless Inter-Domain Routing 234 Public and Private IPv4 Addressing 235 IPv4 Subnetting 235 Supernetting 236 Assigning IPv4 Addresses 237 Manual IPv4 Address Configuration 237 Dynamic Host Configuration Protocol 239 Automatic Private IP Addressing (APIPA) 239 Understanding IPv6 Addressing 240 Introducing IPv6 240 Contracting IPv6 Addresses 241 Expressing IPv6 Network Addresses 241 IPv6 Address Types 241 Global Unicast Addresses 241 Link-Local Unicast Addresses 244 Unique Local Unicast Addresses 245 Special Addresses 245 Multicast Addresses 246 Anycast Addresses 246 Assigning IPv6 Addresses 247 Manual IPv6 Address Allocation 247 Stateless IPv6 Address Autoconfiguration 248 Dynamic Host Configuration Protocol v or

5 xxii i Contents Planning an IP Transition 249 Using a Dual IP Stack 249 Tunneling 250 Configuring Tunnels Manually 250 Configuring Tunnels Automatically 251 Skill Summary 253 Assessment 254 Business Case Scenarios 256 Lesson 11: Understanding DHCP Message Types 259 Deploying and Configuring the DHCP Service 257 DHCP 258 DHCP Communications 259 DHCP Lease Negotiation 260 DHCP Lease Renewal 261 Deploying a DHCP Server 262 Creating a Scope 263 Configuring DHCP Options 267 Creating a Reservation 268 Using PXE 269 Using PXE with WDS 269 Deploying a DHCP Relay Agent 270 Skill Summary 273 Assessment 274 Business Case Scenarios 277 Lesson 12: Deploying and Configuring the DNS Service 278 Understanding the DNS Architecture 279 Creating a DNS Standard 279 DNS Naming 280 Understanding The DNS Domain Hierarchy 281 Top-Level Domains 281 Second-Level Domains 282 Subdomains 283 Understanding DNS Communications 283 Comprehending DNS Server Caching 286 Negative Caching 286 Cache Data Persistence 287 Understanding DNS Referrals and Queries 288 Using DNS Forwarders 288 Understanding Reverse Name Resolution 289 Designing a DNS Deployment 291 Resolving Internet Names 291 Hosting Internet Domains 292 Hosting Active Directory Domains 292 Integrating DHCP and DNS 293 Creating Internet Domains 293 Deploying Creating Zones 294 a DNS Server 294 Using Active Directory-Integrated Zones 296 Creating an Active Directory Zone 296 Creating Resource Records 297 Configuring DNS Server Settings 301 Configuring Active Directory DNS Replication 301 Configuring Root Hints 301 Skill Summary 302 Assessment 303 Business Case Scenarios 306 Lesson 13: Installing Domain Controllers 307 Introducing Active Directory 308 Understanding Active Directory Architecture 308 Understanding Objects and Attributes 308 Understanding Domains 309 Zooming In: Organizational Units 309 Zooming In: Groups 310 Zooming Out: Domain Trees 310 Zooming Out: Forests 311 Introducing the Global Catalog 311 Understanding Functional Levels 311 Deploying Active Directory Domain Services 312 Installing the Active Directory Domain Services Role 312 Creating a New Forest 314 Adding a Domain Controller to an Existing Domain 316 Creating a New Child Domain in a Forest 319 Installing AD DS on Server Core 321 Using Install from Media (IFM) 323 Upgrading Active Directory Domain Services 324 Deploying Active Directory laas on Windows Azure 325 Removing a Domain Controller 325 Configuring the Global Catalog 327 Troubleshooting DNS SRV Registration Failure or call the MOAC Toll-Free Number: 1+(888) (U.S. & Canada only)

6 Contents j xxiii Skill Summary 329 Assessment 330 Business Case Scenarios 333 Lesson 14: Creating and Managing Active Directory Users and Computers 334 Creating User Objects 335 Understanding User Creation Tools 336 Creating Single Users 336 Using Dsadd.exe 340 Using Windows PowerShell 341 Creating User Templates 341 Creating Multiple Users 343 Using CSVDE.exe 343 Using LDIFDE.exe 344 Using Windows PowerShell 344 Creating Computer Objects 345 Creating Computer Objects Using Active Directory Users and Computers 346 Creating Computer Objects with Active Directory Administrative Center 347 Creating Computer Objects Using Dsadd.exe 347 Managing Active Directory Objects 348 Managing Multiple Users 349 Joining Computers to a Domain 350 Joining a Domain Using Netdom.exe 350 Creating Computer Objects While Joining 351 Joining a Domain While Offline 351 Managing Disabled Accounts 352 Skill Summary 352 Assessment 353 Business Case Scenarios 356 Lesson 15: Creating and Managing Active Directory Groups and Organizational Units 357 Working with Organizational Units 358 Creating OUs 358 Using OUs to Delegate Active Directory Management Tasks 360 Working with Groups 362 Understanding Group Types 363 Understanding Group Scopes 364 Domain Local Groups 364 Global Groups 364 Universal Groups 364 Working with Default Groups 365 Nesting Groups 365 Using Special Identities 367 Creating Groups 367 Creating Groups from the Command Line 369 Managing Group Memberships 369 Managing Group Membership Using Group Policy 370 Managing Group Objects with Dsmod.exe 372 Converting Groups 372 Deleting a Group 373 Skill Summary 374 Assessment 374 Business Case Scenarios 377 Lesson 16: Creating Group Policy Objects 379 Introducing Group Policy 380 Understanding Group Policy Objects 381 Local GPOs 381 Domain GPOs 382 Starter GPOs 382 Viewing Group Policy Templates 382 Configuring a Central Store 383 Using the Group Policy Management Console 383 Creating and Linking Nonlocal GPOs 384 Using Security Filtering 386 Understanding Group Policy Processing 387 Processing Multiple GPOs 388 Applying GPO Settings 388 Configuring Exceptions to GPO Processing 389 Managing Starter GPOs 390 Configuring Group Policy Settings 391 Policy Explanations 392 Understanding Policy States 392 Searching Policies 393 Creating Multiple Local GPOs 394 Skill Summary 397 Assessment 397 Business Case Scenarios or

7 xxiv Contents j Lesson 17; Configuring Security Policies 401 Configuring Security Policies Using Group Policy 402 Defining Local Policies 403 Planning and Configuring an Audit Policy 403 Assigning User Rights 409 Configuring Security Options 409 Customizing Event Log Policies 411 Understanding Restricted Groups 412 Using Security Templates 413 Using the Security Templates Console 413 Planning a Security Template Strategy 414 Creating Security Templates 414 Working with Security Template Settings 415 Importing Security Templates into GPOs 415 Maintaining and Optimizing Group Policy 415 Manually Refreshing Group Policy 416 Configuring Local Users and Groups 416 Using the User Accounts Control Panel 417 Creating a New Local User Account 417 Using the Local Users and Groups Snap-In 419 Creating a Local Group 420 Configuring User Account Control 421 Performing Administrative Tasks 421 Using Secure Desktop 422 Configuring User Account Control Settings 423 Skill Summary 424 Assessment 424 Business Case Scenarios 428 Lesson 18: Configuring Application Restricted Policies 429 Installing Software with Group Policy 430 Repackaging Software 430 Deploying Software Using Group Policy 431 Assigning an Application to a User or Computer 432 Publishing an Application 432 Configuring Software Restriction Policies 436 Enforcing Restrictions 436 Configuring Software Restriction Rules 437 Hash Rules 438 Certificate Rules 439 Path Rules 439 Network Zone Rules 439 Using Multiple Rules 439 Configuring Properties 440 Enforcement 440 Software Restriction Designated File Types 440 Trusted Publishers 440 Using AppLocker 441 Understanding Rule Types 442 Creating Default Rules 443 Creating Rules Automatically 444 Creating Rules Manually 445 Skill Summary 446 Assessment 447 Business Case Scenarios 450 Lesson 19: Configuring Windows Firewall 452 Building a Firewall 453 Understanding Windows Firewall Settings 453 Working with Windows Firewall 454 Using Panel 456 the Windows Firewall Control Customizing Settings 457 Allowing Applications 458 Using the Windows Firewall with Advanced Security Console 459 Configuring Profile Settings 460 Creating Rules 461 Importing and Exporting Rules 464 Creating Rules Using Group Policy 465 Using Filters 465 Creating Connection Security Rules 466 Skill Summary 468 Assessment 469 Business Case Scenarios 472 Appendix A 473 Index or