Introduction xxxi
Assessment Test xlvii
Chapter 1 Installing and Configuring Windows Server 2012 1
Features and Advantages of Windows Server 2012 2
Planning the Windows Server 2012 Installation 4
Server Roles in Windows Server 2012 4
Migrating Roles and Features to Windows Server 2012 8
Deciding Which Windows Server 2012 Versions to Use 9
Deciding on Type of Installation 11
Installing Windows Server 2012 14
Using Windows Deployment Services 18
Configuring Remote Management 22
Windows Remote Management 22
Windows PowerShell 23
Understanding Features On Demand 27
Summary 28
Exam Essentials 29
Review Questions 30
Chapter 2 Domain Name System 33
Introducing DNS 35
The Form of an IP Address 36
Understanding Servers, Clients, and Resolvers 41
Understanding the DNS Process 42
Introducing DNS Database Zones 48
Understanding Primary Zones 49
Understanding Secondary Zones 50
Understanding Active Directory Integrated DNS 51
Understanding Stub Zones 53
GlobalName Zones 54
Zone Transfers and Replication 54
Advantages of DNS in Windows Server 2012 58
Background Zone Loading 58
Support for IPv6 Addresses 58
Support for Read-Only Domain Controllers 59
DNS Socket Pools 59
DNS Cache Locking 60
DNS Security Extensions (DNSSEC) 60
DNS Devolution 61
Record Weighting 61
Netmask Ordering 61
DnsUpdateProxy Group 62
Introducing DNS Record Types 62
Start of Authority (SOA) Records 62
Name Server (NS) Records 64
Host Record 64
Alias Record 65
Pointer (PTR) Record 65
Mail Exchanger (MX) Record 66
Service (SRV) Record 66
Configuring DNS 67
Installing DNS 67
Load Balancing with Round Robin 70
Configuring a Caching-Only Server 70
Setting Zone Properties 71
Configuring Zones for Dynamic Updates 75
Delegating Zones for DNS 77
DNS Forwarding 79
Manually Creating DNS Records 79
DNS Aging and Scavenging 81
Monitoring and Troubleshooting DNS 81
Monitoring DNS with the DNS Snap-In 81
Troubleshooting DNS 84
Summary 92
Exam Essentials 93
Review Questions 95
Chapter 3 Active Directory Planning and Installation 99
Verifying the File system 101
Resilient File System (ReFS) 101
NTFS 102
Verifying Network Connectivity 106
Basic Connectivity Tests 106
Tools and Techniques for Testing Network Configuration 107
Understanding Domain and Forest Functionality 109
About the Domain Functional Level 109
About Forest Functionality 111
Planning the Domain Structure 112
Installing Active Directory 113
Adprep 113
The Installation Process 114
Verifying Active Directory Installation 124
Using Event Viewer 124
Using Active Directory Administrative Tools 126
Testing from Clients 127
Creating and Configuring Application Data Partitions 129
Creating Application Data Partitions 129
Managing Replicas 131
Removing Replicas 132
Using ntdsutil to Manage Application Data Partitions 132
Configuring DNS Integration with Active Directory 134
Summary 137
Exam Essentials 137
Review Questions 139
Chapter 4 Administering Active Directory 143
An Overview of OUs 144
The Purpose of OUs 145
Benefits of OUs 146
Planning the OU Structure 146
Logical Grouping of Resources 146
Understanding OU Inheritance 148
Delegating Administrative Control 149
Applying Group Policies 151
Creating OUs 151
Managing OUs 155
Moving, Deleting, and Renaming OUs 156
Administering Properties of OUs 157
Delegating Control of OUs 159
Troubleshooting OUs 163
Creating and Managing Active Directory Objects 163
Overview of Active Directory Objects 163
Managing Object Properties 171
Understanding Groups 174
Filtering and Advanced Active Directory Features 176
Moving, Renaming, and Deleting Active Directory Objects 177
Resetting an Existing Computer Account 179
Publishing Active Directory Objects 179
Making Active Directory Objects Available to Users 180
Publishing Printers 180
Publishing Shared Folders 182
Querying Active Directory 183
Using the Active Directory Administrative Center 184
Using the Command Prompt for Active Directory Configuration 185
Summary 187
Exam Essentials 187
Review Questions 189
Chapter 5 Managing Group Policy Objects 193
Introducing Group Policy 195
Understanding Group Policy Settings 196
The Security Settings Section of the GPO 199
Group Policy Objects 200
Group Policy Inheritance 201
Planning a Group Policy Strategy 202
Implementing Group Policy 203
Creating GPOs 203
Linking Existing GPOs to Active Directory 207
Managing Group Policy 207
Managing GPOs 207
Security Filtering of a Group Policy 209
Delegating Administrative Control of GPOs 211
Controlling Inheritance and Filtering Group Policy 212
Assigning Script Policies 214
Understanding the Loopback Policy 215
Managing Network Configuration 216
Automatically Enrolling User and Computer Certificates in Group Policy 217
Redirecting Folders 219
Managing GPOs with Windows PowerShell Group Policy Cmdlets 221
Deploying Software through a GPO 222
The Software Management Life Cycle 223
The Windows Installer 224
Deploying Applications 228
Implementing Software Deployment 229
Preparing for Software Deployment 230
Software Restriction Policies 231
Using AppLocker 231
Group Policy Slow Link Detection 231
Publishing and Assigning Applications 232
Applying Software Updates 233
Verifying Software Installation 234
Configuring Automatic Updates in Group Policy 235
Configuring Software Deployment Settings 236
The Software Installation Properties Dialog Box 236
Removing Programs 239
Microsoft Windows Installer Settings 241
Troubleshooting Group Policies 242
RSoP in Logging Mode 243
RSoP in Planning Mode 246
Using the gpresult.exe Command 247
Summary 248
Exam Essentials 249
Review Questions 251
Chapter 6 Configuring Active Directory Infrastructure 255
Overview of Network Planning 256
The Three Types of Networks 257
Exploring Network Constraints 257
Overview of Active Directory Replication and Sites 258
Replicating Active Directory 259
Understanding Active Directory Site Concepts 259
Understanding Distributed File System Replication 263
Implementing Sites and Subnets 264
Creating Sites 266
Creating Subnets 268
Configuring Sites 270
Configuring Replication 271
Intrasite Replication 272
Intersite Replication 272
Configuring Server Topology 279
Using Universal Group Membership Caching 283
Monitoring and Troubleshooting Active Directory Replication 284
About System Monitor 284
Troubleshooting Replication 284
Reasons for Creating Multiple Domains 287
Reasons for Using Multiple Domains 287
Drawbacks of Multiple Domains 289
Creating Domain Trees and Forests 290
Planning Trees and Forests 290
The Promotion Process 294
Creating a Domain Tree 294
Joining a New Domain Tree to a Forest 300
Adding Additional Domain Controllers 300
Demoting a Domain Controller 301
Managing Multiple Domains 303
Managing Single-Master Operations 303
Forest Operations Masters 303
Domain Operations Masters 304
Assigning Single-Master Roles 304
Managing Trusts 305
Managing UPN Suffixes 310
Managing Global Catalog Servers 310
Managing Universal Group Membership Caching 312
Summary 313
Exam Essentials 314
Review Questions 317
Chapter 7 Configuring Active Directory Server Roles 321
Understanding Server Manager 323
Configuring Active Directory Certificate Services 324
Installing Active Directory Certificate Services 326
Enrolling User and Computer Certificates 333
Certificate Templates 335
Revoking Certificates 337
Configuring Additional CA Server Settings 340
What’s New in Windows Server 2012? 342
Understanding Active Directory Domain Services 342
Security Features Available for Domain Services 342
Features of Windows Server 2012 344
Active Directory Federation Services 346
Installing AD FS 346
Configuring AD FS 349
Active Directory Lightweight Directory Services 350
Installing AD LDS 350
Configuring AD LDS 351
Installing AD LDS on Server Core 354
Active Directory Rights Management Services 355
AD RMS Templates 360
Summary 360
Exam Essentials 361
Review Questions 362
Chapter 8 Using Virtualization in Windows Server 2012 365
Hyper-V Overview 367
What Is Virtualization? 367
Hyper-V Features 368
Hyper-V Architecture 370
Hyper-V Requirements 372
Hyper-V Installation and Configuration 373
Install the Hyper-V Role 373
Hyper-V in Server Manager 375
Using Hyper-V Manager 376
Configure Hyper-V Settings 377
Manage Virtual Switches 378
Managing Virtual Hard Disks 381
Configuring Virtual Machines 385
Creating and Managing Virtual Machines 385
Back Up and Restore Virtual Machines 392
Using Physical-to-Virtual (P2V) Conversion 397
Using Virtual-to-Virtual (V2V) Conversion 398
Summary 399
Exam Essentials 399
Review Questions 401
Chapter 9 Configuring TCP/IP 403
Understanding TCP/IP 404
Details of the TCP/IP Model 404
How TCP/IP Layers Communicate 405
Understanding Port Numbers 406
Understanding IP Addressing 407
The Hierarchical IP Addressing Scheme 407
Understanding Network Classes 409
Subnetting a Network 412
Implementing Subnetting 413
An Easier Way to Apply Subnetting 420
Applying Subnetting the Traditional Way 423
Working with Classless Inter-Domain Routing 431
Understanding IPv6 434
IPv6 History and Need 435
New and Improved IPv6 Concepts 435
IPv6 Addressing Concepts 438
IPv6 Integration/Migration 443
Understanding IP Address Management (IPAM) 447
Summary 452
Exam Essentials 452
Review Questions 453
Chapter 10 Managing DHCP 457
Overview of DHCP 458
Introducing the DORA Process 459
Advantages and Disadvantages of DHCP 460
Ipconfig Lease Options 461
Understanding Scope Details 462
Installing and Authorizing DHCP 464
Installing DHCP 464
Introducing the DHCP Snap-In 467
Authorizing DHCP for Active Directory 468
Creating and Managing DHCP Scopes 471
Creating a New Scope in IPv4 471
Creating a New Scope in IPv6 479
Changing Scope Properties (IPv4 and IPv6) 483
Changing Server Properties 484
Managing Reservations and Exclusions 487
Setting Scope Options for IPv4 490
Activating and Deactivating Scopes 493
Creating a Superscope for IPv4 493
Creating IPv4 Multicast Scopes 494
Integrating Dynamic DNS and IPv4 DHCP 497
Using Multiple DHCP Servers 499
Working with the DHCP Database Files 500
Summary 501
Exam Essentials 502
Review Questions 503
Chapter 11 Managing and Maintaining Servers 507
Configuring Windows Server Update Services 509
Windows Update 510
Windows Automatic Updates 511
Using Windows Server Update Services 512
Overview of Windows Server 2012 Performance Monitoring 524
Using Windows Server 2012 Performance Tools 526
Introducing Performance Monitor 527
Using Other Performance-Monitoring Tools 536
Summary 549
Exam Essentials 550
Review Questions 551
Chapter 12 Configuring Network Access 555
Understanding Routing 556
What Routing Does 556
How Routing Works 557
Routing in Windows Server 2012 567
Installing RRAS 568
Configuring IP Routing 573
Creating and Managing Interfaces 573
Setting IP Routing Properties 587
Managing Routing Protocols 589
Managing Static Routes 590
Configuring TCP/IP Packet Filters 592
Configuring VPN Packet Filters 595
PPTP Packet Filters 595
L2TP Packet Filters 597
Managing IP Routing 597
Using the routeprint Command 598
Troubleshooting IP Routing 598
Troubleshooting Example 599
Summary 601
Exam Essentials 601
Review Questions 603
Chapter 13 Understanding Security 607
Active Directory Security Overview 609
Understanding Security Principals 609
Managing Security and Permissions 619
Using ACLs and ACEs 620
Implementing Active Directory Security 622
Using User Templates 624
Delegating Control of Users and Groups 625
Understanding Dynamic Access Control 627
Using Group Policy for Security 627
Fine-Grained Password Policies 630
Understanding Smart Card Authentication 633
Preparing a Smart Card Certificate Enrollment Station 633
Configuring Group Policy Settings for Smart Cards 634
Understanding Security Configuration and Analysis Tools 635
Using the Security Configuration and Analysis Utility 635
Understanding the secedit.exe Command 636
Implementing an Audit Policy 637
Overview of Auditing 638
Implementing Auditing 638
Viewing Auditing Information 640
Using the Auditpol.exe Command 640
What’s New in Windows Server 2012 Auditing 641
Summary 642
Exam Essentials 643
Review Questions 644
Chapter 14 Managing File and Print Services 647
Understanding File Servers 649
Configuring File Servers 650
Sharing Folders 650
Making Active Directory Objects Available to Users 651
Configuring Offline Folders 653
Volume Shadow Copy Services (VSS) 656
Understanding Permissions 656
Share and Storage Management Console 663
Understanding File Server Resource Manager (FSRM) 664
Using BitLocker Drive Encryption 666
What’s New in BitLocker? 667
Windows 7 & 2008 R2 vs. Windows 8 & 2012 668
Understanding BranchCache 671
Distributed Cache Mode Requirements 672
Hosted Mode Requirements 674
BranchCache and PowerShell 676
What’s New in Windows Server 2012 BranchCache? 677
Configuring DirectAccess 678
DirectAccess vs. VPNs 678
Understanding How DirectAccess Works 679
Knowing the DirectAccess Infrastructure Requirements 679
Configuring Disk Quotas 680
Configuring Distributed File System 682
Advantages of DFS 683
Types of DFS 683
Remote Differential Compression (RDC) 685
Understanding Printing 686
Creating and Publishing Printers 686
Configuring Printers 688
Migrating Print Servers 693
Easy Print Driver 693
Summary 693
Exam Essentials 694
Review Questions 695
Chapter 15 Managing Remote Access Services 699
Overview of Dial-Up Networking 700
What DUN Does 701
How DUN Works 701
Overview of Virtual Private Networks 705
What VPNs Do 705
VPNs and Windows Server 2012 706
How VPNs Work 706
Configuring Your Remote Access Server 710
Configuring PPP Options 710
Installing a VPN 714
How VPN Works 714
Enabling RRAS as a VPN 715
Configuring a VPN 715
Configuring VPN Ports 715
Troubleshooting VPNs 716
Managing Your Remote Access Server 718
Managing Remote Users with a RADIUS Server 718
Monitoring Overall Activity 719
Controlling Remote Access Logging 719
Reviewing the Remote Access Event Log 722
Monitoring Ports and Port Activity 722
Configuring a RAS or VPN Client 723
The General Tab 724
The Options Tab 725
The Security Tab 726
The Networking Tab 729
The Sharing Tab 730
Overview of Wireless Access 730
Configuring Wireless Access 731
Remote Access Security 732
User Authentication 733
Connection Security 734
Access Control 735
Configuring User Access 736
Setting Up User Profiles 736
Using Network Access Policies 738
Using Remote Access Profiles 744
Setting Up a VPN Network Access Policy 749
Configuring Security 751
Controlling Server Security 751
Configuring Network Access Protection 754
Summary 755
Exam Essentials 755
Review Questions 757
Chapter 16 Configuring High Availability in Windows Server 2012 761
Components of High Availability 762
Achieving High Availability 763
High Availability Foundation 764
Achieving High Availability with Failover Clustering 765
Failover Clustering Requirements 767
Cluster Quorum 768
Validating a Cluster Configuration 770
Creating a Cluster 775
Clustered Application Settings 779
Resource Properties 783
Windows Server 2012 Clustering Features 786
Achieving High Availability with Network Load Balancing 787
How Does Network Load Balancing Work? 787
Creating an NLB Cluster 788
Modifying Cluster Properties 789
Managing NLB Clusters 790
NIC Teaming 791
Summary 791
Exam Essentials 791
Review Questions 792
Chapter 17 Configuring File and Storage Services 795
Storage in Windows Server 2012 796
Initializing Disks 796
Working with Basic and Dynamic Disks 797
Working with Volume Sets 799
Redundant Array of Independent Disks 800
Mount Points 804
Microsoft MPIO 805
iSCSI 808
Internet Storage Name Service 810
Fibre Channel 813
Network Attached Storage 814
Virtual Disk Service 814
Configuring Windows Firewall Options 816
Summary 825
Exam Essentials 825
Review Questions 826
Chapter 18 Implementing Disaster Recovery 829
Protecting the System 830
Backup and Recovery of Active Directory 831
Overview of the Windows Server 2012 Backup Utility 833
Setting Up an Active Directory Backup 837
Restoring Active Directory 841
Active Directory Recycle Bin 842
Restartable Active Directory 843
Offline Maintenance 843
Monitoring Replication 845
Using the ADSI Editor 846
Wbadmin Command Line Utility 846
Understanding Shadow Copies 847
VssAdmin Command 849
Data Protection Manager 850
Using Advanced Boot Options 850
Starting in Safe Mode 851
Enabling Boot Logging 852
Using Other Advanced Boot Options Menu Modes 854
Windows Recovery Environment 855
Using the Startup Repair Tool 856
Summary 857
Exam Essentials 857
Review Questions 858
Appendix A Answers to Review Questions 861
Chapter 1: Installing and Configuring Windows Server 2012 862
Chapter 2: Domain Name System 862
Chapter 3: Active Directory Planning and Installation 863
Chapter 4: Administering Active Directory 864
Chapter 5: Managing Group Policy Objects 865
Chapter 6: Configuring Active Directory Infrastructure 866
Chapter 7: Configuring Active Directory Server Roles 867
Chapter 8: Using Virtualization in Windows Server 2012 868
Chapter 9: Configuring TCP/IP 869
Chapter 10: Managing DHCP 871
Chapter 11: Managing and Maintaining Servers 873
Chapter 12: Configuring Network Access 874
Chapter 13: Understanding Security 875
Chapter 14: Managing File and Print Services 876
Chapter 15: Managing Remote Access Services 877
Chapter 16: Configuring High Availability in Windows Server 2012 878
Chapter 17: Configuring File and Storage Services 879
Chapter 18: Implementing Disaster Recovery 880
Appendix B About the Additional Study Tools 881
Additional Study Tools 882
Sybex Test Engine 882
Electronic Flashcards 882
Videos 882
PDF of Glossary of Terms 882
Adobe Reader 883
System Requirements 883
Using the Study Tools 883
Troubleshooting 883
Customer Care 884
Index 885
