Administering Windows Server 2012 R2 Exam 70-411 Patrick Regan Wiley
Contents j Lesson 1: Deploying and Managing Server Images 1 Using Windows Deployment Services 2 Installing the Windows Deployment Services Role 2 Configuring the WDS Server 4 Performing the Initial Configuration of WDS 5 Configuring the WDS Properties 7 Starting WDS 8 Configuring the Custom DHCP Option 9 Configuring and Managing Boot, Install, and Discover Images 10 Adding Boot Images 11 Adding Image Files 12 Creating an Image File with WDS 13 Creating a Discover Image 15 Using Wdsutil 16 Managing WDS with Windows Powershell 18 Performing an Unattended Installation 19 Updating Images with Patches, Hotfixes, and Drivers 26 Installing Features for Offline Images 27 Configuring Driver Groups and Packages 27 Skill Summary 29 Assessment 29 Business Case Scenarios 32 Lesson 2: Implementing Patch Management 33 Understanding Windows Updates and Automatic Updates 34 Deploying Windows Server Update Services (WSUS) 37 Installing WSUS 39 Configuring WSUS 41 Configuring WSUS Synchronization 43 Configuring WSUS Computer Groups 47 Configuring Group Policies for Updates 49 Configuring Client-Side Targeting 50 Approving Updates 52 Managing Patch Management In Mixed Environments 56 Viewing Reports 57 Administrating WSUS with Commands 58 Troubleshooting Problems with Installing Updates 59 Understanding System Center Configuration Manager 60 Skill Summary 60 Assessment 61 Business Case Scenarios 64 Lesson 3: Monitoring Servers 65 Introducing the Microsoft Management Console (MMC) 66 Using Server Manager 68 Using Computer Management 69 Using the Services Console 69 Using Event Viewer 72 Understanding Logs and Events 73 Filtering Events 75 Adding a Task to an Event 75 Configuring Event Subscriptions 77 Using Reliability Monitor 79 Managing Performance 81 Using Task Manager 81 Using Resource Monitor 85 Using Performance Monitor 88 Using Common Performance Counters 90 Configuring Data Collector Sets (DCS) 91 Configuring Performance Alerts 92 Scheduling Performance Monitoring 93 Monitoring the Network 94 Using the netstat Command 95 Using Protocol Analyzers 96 Monitoring Virtual Machines (VMs) 101 Skill Summary 102 Assessment 103 Business Case Scenarios 106 XX
Contents xxi Lesson 4: Configuring Distributed File System (DFS) 107 Lesson 6: Configuring File Services and Disk Encryption 155 Using Distributed File System 107 Installing and Configuring DFS Namespace 108 Installing DFS Namespace 109 Configuring DFS Namespaces 110 Managing Referrals 114 Managing DFS Security 116 Installing and Configuring DFS Replication 116 Installing DFS Replication 117 Configuring DFS Replication Targets 117 Scheduling Replication 121 Configuring Remote Differential Compression 121 Configuring Staging 124 Cloning a DFS Database 125 Recovering DFS Databases 126 Optimizing DFS Replication 127 Configuring Fault Tolerance Using DFS 128 Skill Summary 128 Assessment 129 Business Case Scenarios 133 Lesson 5: Configuring Resource Manager (FSRM) 134 File Server Using File Server Resource Manager 134 Installing File Server Resource Manager 135 Using Quotas 136 Creating Quotas 136 Changing Quotas Templates 140 Monitoring Quota Use 141 Managing Files with File Screening 142 Creating File Groups 142 Creating a File Screen 143 Creating a File Screen Exception 144 Creating a File Screen Template 145 Using Storage Reports 146 Enabling SMTP 147 Configuring File Management Tasks 148 Skill Summary 150 Assessment 151 Business Case Scenarios 154 Securing Files 155 Encrypting Configuring EFS 157 Files with EFS 156 Using the Cipher Command 158 Sharing Files Protected with EFS with Others 159 Configuring EFS with Group Policies 159 Configuring the EFS Recovery Agent 160 Managing EFS Certificates 161 Encrypting Files with Bitlocker 163 Configuring Bitlocker Encryption 164 Configuring BitLockerTo Go 168 Bitlocker Pre-Provisioning 168 Configuring BitLocker Policies 169 Managing BitLocker Certificates 171 Configuring the Network Unlock Feature 171 Skill Summary 173 Assessment 173 Business Case Scenarios 176 Lesson 7: Configuring Advanced Audit Policies 177 Enabling and Configuring Auditing 177 Implementing Auditing Using Group Policies 178 Implementing an Audit Policy 179 Implementing Object Access Auditing Using Group Policies 180 Implementing Advanced Audit Policy Settings 183 Implementing Advanced Audit Policy Settings Using Group Policies 183 Removing Advanced Audit Policy Configuration 196 Implementing Auditing Using AuditPol.exe 196 Viewing Audit Events 198 Creating Expression-Based Audit Policies 199 Creating Removable Device Audit Policies 201 Skill Summary 202 Assessment 203 Business Case Scenarios 206
xxii Contents Lesson 8: Configuring DNS Zones 207 Lesson 10: Configuring Routing 254 VPN and Understanding DNS 208 Understanding DNS Names and Zones 209 Understanding the Address Resolution Mechanism 211 Configuring and Managing DNS Zones 212 Installing DNS 213 Configuring Primary and Secondary Zones 214 Configuring Active Directory-Integrated Zones 218 Configuring Zone Delegation 219 Configuring Stub Zones 221 Configuring Caching-Only Servers 222 Configuring Forwarding and Conditional Forwarding 222 Configuring Zone Transfers 224 Understanding Full and Incremental Transfers 225 Configuring Notify Settings 225 Using the Dnscmd Command to Manage Zones 226 Skill Summary 227 Assessment 228 Business Case Scenarios 231 Lesson 9: Configuring DNS Records 232 Configuring DNS Record Types 233 Creating and Configuring DNS Resource Records 233 Start of Authority (SOA) Records 234 Name Server (NS) Records 235 Host (A and AAAA) Records 236 Canonical Name (CNAME) Records 236 Pointer (PTR) Records 237 Mail Exchanger (MX) Records 237 Service Location (SRV) Records 238 Configuring Record Options 239 Configuring Round Robin 241 Configuring Secure Dynamic Updates 242 Configuring Zone Scavenging 242 Using the DNSCMD Command to Manage Resource Records 244 Troubleshooting DNS Problems 245 Skill Summary 249 Assessment 250 Business Case Scenarios 253 The Remote Access Role 255 Installing and Configuring the Remote Access Role 255 Installing Routing and Remote Access 255 Configuring Routing and Remote Access 257 Configuring RRAS for Dial-Up Remote Access 258 Configuring VPN Settings 261 Configuring the VPN Connection on the Server 263 Creating a VPN Connection on a Client 265 VPN Reconnect 267 Configuring Split Tunneling 267 Configuring Remote Dial-In Settings for Users 268 Troubleshooting Remote Access Problems 269 Implementing NAT 271 Disabling Routing and Remote Access 272 Configuring Routing 272 Managing Static Routes 274 Configuring RIP 276 Configuring Demand-Dial Routing 277 Configuring the DHCP Relay Agent 277 Configuring Web Application Proxy in Passthrough Mode 278 Skill Summary 281 Assessment 282 Business Case Scenarios 285 Lesson 11; Configuring Direct Access 286 Understanding DirectAccess 286 Looking at the DirectAccess Connection Process 287 Understanding DirectAccess Requirements 288 Understanding DirectAccess Server Requirements 288 Understanding DirectAccess Client Requirements 289 Running the DirectAccess Getting Started Wizard 289 Running the Remote Access Setup Wizard 290 Implementing Client Configuration 293 Implementing DirectAccess Server 295 Implementing Infrastructure Servers 296 Configuring the Application Servers 299 Preparing for DirectAccess Deployment 299 Configuring DNS for DirectAccess 300 Configuring Certificates for DirectAccess 300 Troubleshooting DirectAccess 305 Skill Summary 306 Assessment 307 Business Case Scenarios 311
Contents xxiii Lesson 12: Configuring a Network Policy Server 312 Configuring a Network Policy Server Infrastructure 312 Installing and Configuring a RADIUS Server 314 Configuring Multiple RADIUS Server Infrastructures 316 Configuring RADIUS Clients 318 Configuring NPS Templates 324 Configuring RADIUS Accounting 326 Understanding NPS Authentication Methods 330 Using Password-Based Authentication 330 Using Certificates for Authentication 331 Skill Summary 333 Assessment 334 Business Case Scenarios 337 Lesson 13: Configuring NPS Policies 338 Managing NPS Policies 338 Configuring Connection Request Policies 339 Configuring Network Policies 344 Multilink and Bandwidth Allocation 347 IP Filters 348 Encryption 348 IP Addressing 349 Managing NPS Templates 350 Exporting and Importing Templates 350 Exporting and Importing the NPS Configuration Including NPS Policies 352 Skill Summary 353 Assessment 354 Business Case Scenarios 357 Lesson 14: Configuring Network Access Protection (NAP) 358 Using Network Access Protection (NAP) 359 Installing Network Access Protection 361 Configuring NAP Enforcement 363 Configuring NAP Enforcement for DHCP 363 Configuring NAP Enforcement for VPN 370 Configuring System Health Validators 371 Configuring Health Policies 372 Configuring Isolation and Remediation 375 Configuring NAP Client Settings 376 Skill Summary 377 Assessment 378 Business Case Scenarios 382 Lesson 15: Configuring Service Authentication 383 Configuring Service Authentication 384 Understanding NTLM Authentication 384 Managing Kerberos 384 Managing Service Principal Configuring Kerberos Delegation 388 Names 386 Managing Service Accounts 388 Creating and Configuring Service Accounts 389 Creating and Configuring Managed Service Accounts 390 Creating and Configuring Group Managed Service Accounts 393 Configuring Virtual Accounts 393 Skill Summary 394 Assessment 395 Business Case Scenarios 398 Lesson 16: Understanding Configuring Domain Controllers 399 Domain Controllers 399 Managing Global Catalogs and Configuring Universal Group Membership Caching 401 Managing Operations Masters 403 Viewing the Operations Masters Role Holders 405 Transferring the Operations Masters Role 407 Seizing the Operations Masters Role 409 Installing and Configuring an RODC 410 Cloning a Domain Controller 413 Skill Summary 416 Assessment 417 Business Case Scenarios 420
xxiv Contents Lesson 17: Maintaining Active Directory 421 Automating User Account Management 422 Backing Up and Restoring Active Directory 424 Understanding the Active Directory Database, SYSVOL, and System State 424 Using Windows Backup 426 Performing a Backup of Active Directory and SYSVOL 427 Performing an Active Directory Restore 428 Configuring Active Directory Snapshots 431 Performing Object- and Container-Level Recovery 433 Configuring and Restoring Objects by Using the Active Directory Recycle Bin 435 Managing Active Directory Offline 438 Optimizing an Active Directory Database 439 Cleaning Up Skill Summary 442 Metadata 441 Assessment 443 Business Case Scenarios 446 Lesson 18: Configuring Account Policies 447 Working with Account Policies 447 Configuring Domain User Password Policy 449 Understanding Strong Passwords 449 Configuring Password Policy Settings 449 Configuring Account Lockout Settings 451 Configuring and Applying Password Settings Objects 452 Configuring Local User Password Policy 455 Delegating Password Settings Management 455 Configuring Kerberos Policy Settings 457 Skill Summary 458 Assessment 458 Business Case Scenarios 461 Lesson 19: Configuring Group Policy Processing 462 Understanding Group Policy Processing 462 Configuring Processing Order and Precedence 463 Understanding Group Policy Inheritance 463 Managing Group Policy Links 466 Using Filtering with Group Policies 467 Configuring Blocking of Inheritance 467 Configuring Enforced Policies 467 Configuring Security Filtering and WMI Filtering 468 Using Security Filtering 468 Using WMI Filtering 470 Configuring Loopback Processing 472 Configuring Client-Side Extension Behavior 473 Looking at GPOs and Disconnected Computers 474 Configuring and Managing Slow-Link Processing and Group Policy Caching 474 Forcing Group Policy Update 475 Troubleshooting GPOs 476 Skill Summary 479 Assessment 480 Business Case Scenarios 483 Lesson 20: Configuring Group Policy Settings 484 Configuring Group Policy Settings 485 Performing Software Installation Using Group Policy 486 Assigning or Publishing a Package 487 Redeploying an Application 490 Uninstalling a Package 490 Using Folder Redirection 491 Using Scripts with Group Policy 494 Using Administrative Templates 496 Managing Administrative Templates 496 Creating a Central Store 498 Using Security Templates 499 Using Custom Administrative Template Files 503 Converting Administrative Templates Using ADMX Migrator 504 Configuring Property Filters for Administrative Templates 505 Skill Summary 506 Assessment 507 Business Case Scenarios 510 Lesson 21: Managing Group Policy Objects 511 Managing Group Policy Objects 511 Backing Up and Restoring GPOs 512 Using a Migration Table 514
Contents 1 xxv Resetting the Default GPOs 516 Delegating Group Policy Management 516 Skill Summary 518 Assessment 519 Business Case Scenarios 522 Lesson 22: Configuring Group Policy Preferences 523 Configuring Control Panel Settings 530 Configuring Printer Settings 530 Configuring Custom Registry Settings 531 Configuring Power Options 532 Configuring Internet Explorer Settings 533 Configuring Item-Level Targeting 534 Skill Summary 535 Assessment 536 Business Case Scenarios 539 Using Group Policy Preferences 523 Configuring Preference Settings 524 Configuring Windows Settings 526 Configuring Network Drive Mappings 526 Performing File and Folder Deployment 527 Performing Shortcut Deployment 529 Appendix A 540 Index 542 call the MOAC Toil-Free Number; 1+(888) 764-7001 (U.S. & Canada only)