Installing and Configuring Windows Server® 2012 R2 Exam 70-410 Craig Zacker Wiley
Installing and ConfiguringWindows Server® 2012 R2
Exam 70-410
Craig Zacker
Wiley
Lesson 1: Installing Servers 1
Selecting a Windows Server 2012 R2
Edition 2
Supporting Server Roles 3
Supporting Server Virtualization 5
Server Licensing 5
Installing Windows Server 2012 R2 6
System Requirements 6
Performing a Clean Installation 8
Installing Third-Party Drivers 11
Working with Installation Partitions 12
Choosing Installation Options 12
Using Server Core 13
Server Core Defaults 14
Server Core Capabilities 14
Using the Minimal Server Interface 15
Using Features on Demand 16
Upgrading Servers 17
Upgrade Paths 18
Preparing to Upgrade 18
Performing an Upgrade Installation 19
Migrating Roles 20
Installing Windows Server
Migration Tools 21
Using Migration Guides 24
Skill Summary 25
Knowledge Assessment 25
Business Case Scenarios 28
Lesson 2: Configuring Servers 29
Completing Post-Installation Tasks 30
Using GUI Tools 30
Using Command-Line Tools 33
Converting Between GUI and Server Core 34
Configuring NIC Teaming 36
Using Roles, Features, and Services 40
Using Server Manager 40
Adding Roles and Features 41
Deploying Roles to VHDs 44
Configuring Services 46
Delegating Server Administration 47
Using Windows Powershell Desired State
Configuration 48
Skill Summary 49
Knowledge Assessment 49
Business Case Scenarios 52
Lesson 3: Configuring Local
Storage 53
Planning Server Storage 54
Determining the Number of Servers Needed 54
Estimating Storage Requirements 55
Selecting a Storage Technology 56
Selecting a Physical Disk Technology 56
Using External Drive Arrays 57
Planning for Storage Fault Tolerance 59
Using Disk Mirroring 59
Using RAID 60
Using Storage Spaces 61
Understanding Windows Disk
Settings 62
Selecting a Partition Style 62
Understanding Disk Types 63
Understanding Volume Types 64
Understanding File Systems 65
Working with Disks 65
Adding a New Physical Disk 66
Creating and Mounting VHDs 69
Creating a Storage Pool 71
Creating Virtual Disks 74
Creating a Simple Volume 78
Creating a Striped, Spanned, Mirrored, or
RAID-5 Volume 81
Extending and Shrinking Volumes and Disks 83
www.wiley.com/coIIege/microsoft or
call the MOAC Toll-Free Number: 1+(888) 764-7001 (U.S. & Canada only) xix
xx I Contents
Skill Summary 84
Knowledge Assessment 85
Business Case Scenario 87
Lesson 4: Configuring Fileand Share Access 88
Creating Folder Shares 89
Assigning Permissions 95
Understanding the Windows Permission
Architecture 96
Understanding Basic and Advanced Permissions 97
Allowing and Denying Permissions 98
Inheriting Permissions 99
Understanding Effective Access 101
Setting Share Permissions 102
Understanding NTFS Authorization 105
Assigning Basic NTFS Permissions 106
Assigning Advanced NTFS Permissions 108
Understanding Resource Ownership 110
Combining Share and NTFS Permissions 110
Configuring Volume Shadow Copies 111
Configuring NTFS Quotas 113
Configuring Work Folders 115
Skill Summary 115
Knowledge Assessment 116
Business Case Scenarios 119
Lesson 5: Configuring Print
and Document
Services 120
Deploying a Print Server 121
Understanding the Windows Print Architecture 121
Understanding Windows Printing 121
Windows Printing Flexibility 122
Sharing a Printer 126
Managing Printer Drivers 128
Using Remote Access Easy Print 129
Configuring Printer Security 130
Managing Documents 132
Managing Printers 134
Setting Printer Priorities 134
Scheduling Printer Access 135
Creating a Printer Pool 136
Using the Print and Document Services Role 138
Using the Print Management Console 139
Adding Print Servers 140
Viewing Printers 140
Managing Printers and Print Servers 141
Deploying Printers with Group Policy 142
Skill Summary 143
Knowledge Assessment 144
Business Case Scenarios 147
Lesson 6: Configuring Servers for
Remote Management 148
Using Server Manager for Remote
Management 149
Adding Servers 150
Adding Workgroup Servers 151
Calibrating Server Manager Performance 152
Managing Non-Domain-Joined Servers 153
Managing Windows Server 2012 R2 Servers 153
Configuring WinRM 154
Configuring Windows Firewall 154
Managing Down-Level Servers 158
Using Remote Server Administration Tools 160
Configuring the Windows PowerShell Web Access
Gateway 161
Configuring a Test Installation 161
Working with Remote Servers 162
Skill Summary 163
Knowledge Assessment 163
Business Case Scenarios 166
Lesson 7: Creating and ConfiguringVirtual Machine
Settings 167
Virtualizing Servers 168
Virtualization Architectures 168
Hyper-V Implementations 169
Hyper-V Licensing 170
Hyper-V Hardware Limitations 170
Hyper-V Server 170
Installing Hyper-V 171
Using Hyper-V Manager 172
Creating a Virtual Machine 173
Creating Generation 1 and Generation 2 VMs 178
www.wiley.com/colIege/microsoft or
call the MOACToil-Free Number: 1+(888) 764-7001 (U.S. & Canada only)
Contents ] xxi
Installing an Operating System 179
Configuring Guest Integration Services 181
Using Enhanced Session Mode 182
Allocating Memory 183
Using Dynamic Memory 184
Configuring Smart Paging 186
Configuring Resource Metering 186
Using Remote FX 187
Skill Summary 188
Knowledge Assessment 188
Business Case Scenarios 191
Lesson 8: Creating and ConfiguringVirtual Machine
Storage 192
Working with Virtual Disks 193
Understanding Virtual Disk Formats 194
Creating Virtual Disks 194
Creating a Virtual Disk with a VM 194
Creating a New Virtual Disk 195
Adding Virtual Disks to Virtual
Machines 196
Creating Differencing Disks 198
Configuring Pass-Through Disks 199
Modifying Virtual Disks 199
Creating Checkpoints 202
Configuring Storage Qualityof Service 203
Connecting to a SAN 204
Understanding SAN Technologies 205
Using Fibre Channel 206
Connecting Virtual Machines to a SAN 206
Skill Summary 208
Knowledge Assessment 209
Business Case Scenarios 211
Lesson 9: Creating and ConfiguringVirtual Networks 212
Using Virtual Networking 213
Creating Virtual Switches 213
Creating the Default Virtual Switch 213
Creating a New Virtual Switch 215
Configuring MAC Addresses 218
Creating Virtual Network Adapters 219
Using Synthetic Adaptors and Emulated Adapters 221
Configuring Hardware Acceleration Settings 222
Configuring Advanced Network AdapterFeatures 223
Configuring NIC Teaming in a Virtual Network
Environment 223
Creating the NIC Team 224
Creating the Team Virtual Switch 224
Configuring a NIC Team Virtual Network
Adapter 225
Creating Virtual Network Configurations 226
Extending a Production Network into
Virtual Space 227
Creating an Isolated Network 227
Skill Summary 227
Knowledge Assessment 228
Business Case Scenarios 230
Lesson 10: Configuring IPv4 and IPv6
Addressing 231
Understanding IPv4 Addressing 232
IPv4 Classful Addressing 232
Classless Inter-Domain Routing 234
Public and Private IPv4 Addressing 235
IPv4 Subnetting 235
Supernetting 236
Assigning IPv4 Addresses 237
Manual IPv4 Address Configuration 237
Dynamic Host Configuration Protocol 239
Automatic Private IP Addressing (APIPA) 239
Understanding IPv6 Addressing 240
Introducing IPv6 240
Contracting IPv6 Addresses 241
Expressing IPv6 Network Addresses 241
IPv6 Address Types 241
Global Unicast Addresses 241
Link-Local Unicast Addresses 244
Unique Local Unicast Addresses 245
Special Addresses 245
Multicast Addresses 246
Anycast Addresses 246
Assigning IPv6 Addresses 247
Manual IPv6 Address Allocation 247
Stateless IPv6 Address Autoconfiguration 248
Dynamic Host Configuration Protocol v6 248
www.wiley.com/college/microsoft or
call the MOAC Toil-Free Number: 1+(888) 764-7001 (U.S. & Canada only)
xxii i Contents
Planning an IP Transition 249
Using a Dual IP Stack 249
Tunneling 250
Configuring Tunnels Manually 250
Configuring Tunnels Automatically 251
Skill Summary 253
Knowledge Assessment 254
Business Case Scenarios 256
Lesson 11: Deploying and
Configuring the DHCPService 257
Understanding DHCP 258
DHCP Message Types 259
DHCP Communications 259
DHCP Lease Negotiation 260
DHCP Lease Renewal 261
Deploying a DHCP Server 262
Creating a Scope 263
Configuring DHCP Options 267
Creating a Reservation 268
Using PXE 269
Using PXE with WDS 269
Deploying a DHCP Relay Agent 270
Skill Summary 273
Knowledge Assessment 274
Business Case Scenarios 277
Lesson 12: Deploying and
Configuring the DNS
Service 278
Understanding the DNS Architecture 279
Creating a DNS Standard 279
DNS Naming 280
Understanding The DNS Domain Hierarchy 281
Top-Level Domains 281
Second-Level Domains 282
Subdomains 283
Understanding DNS Communications 283
Comprehending DNS Server Caching 286
Negative Caching 286
Cache Data Persistence 287
Understanding DNS Referrals and Queries 288
Using DNS Forwarders 288
Understanding Reverse Name Resolution 289
Designing a DNS Deployment 291
Resolving Internet Names 291
Hosting Internet Domains 292
Hosting Active Directory Domains 292
Integrating DHCP and DNS 293
Creating Internet Domains 293
Deploying a DNS Server 294
Creating Zones 294
Using Active Directory-Integrated Zones 296
Creating an Active Directory Zone 296
Creating Resource Records 297
Configuring DNS Server Settings 301
Configuring Active Directory DNS
Replication 301
Configuring Root Hints 301
Skill Summary 302
Knowledge Assessment 303
Business Case Scenarios 306
Lesson 13: Installing DomainControllers 307
Introducing Active Directory 308
Understanding Active Directory Architecture 308
Understanding Objects and Attributes 308
Understanding Domains 309
Zooming In: Organizational Units 309
Zooming In: Groups 310
Zooming Out: Domain Trees 310
Zooming Out: Forests 311
Introducing the Global Catalog 311
Understanding Functional Levels 311
Deploying Active Directory Domain Services 312
Installing the Active Directory Domain Services Role 312
Creating a New Forest 314
Adding a Domain Controller to an Existing Domain 316
Creating a New Child Domain in a Forest 319
Installing AD DS on Server Core 321
Using Install from Media (IFM) 323
Upgrading Active Directory Domain Services 324
Deploying Active Directory laas on Windows Azure 325
Removing a Domain Controller 325
Configuring the Global Catalog 327
Troubleshooting DNS SRV Registration Failure 328
www.wiley.com/coIlege/microsoft or
call the MOAC Toll-Free Number: 1+(888) 764-7001 (U.S. & Canada only)
Contents j xxiii
Skill Summary 329
Knowledge Assessment 330
Business Case Scenarios 333
Lesson 14: Creating and ManagingActive Directory Users
and Computers 334
Creating User Objects 335
Understanding User Creation Tools 336
Creating Single Users 336
Using Dsadd.exe 340
Using Windows PowerShell 341
Creating User Templates 341
Creating Multiple Users 343
Using CSVDE.exe 343
Using LDIFDE.exe 344
Using Windows PowerShell 344
Creating Computer Objects 345
Creating Computer Objects Using Active DirectoryUsers and Computers 346
Creating Computer Objects with Active DirectoryAdministrative Center 347
Creating Computer Objects Using Dsadd.exe 347
Managing Active Directory Objects 348
Managing Multiple Users 349
Joining Computers to a Domain 350
Joining a Domain Using Netdom.exe 350
Creating Computer Objects While Joining 351
Joining a Domain While Offline 351
Managing Disabled Accounts 352
Skill Summary 352
Knowledge Assessment 353
Business Case Scenarios 356
Lesson 15: Creating and ManagingActive Directory Groupsand OrganizationalUnits 357
Working with Organizational Units 358
Creating OUs 358
Using OUs to Delegate Active DirectoryManagement Tasks 360
Working with Groups 362
Understanding Group Types 363
Understanding Group Scopes 364
Domain Local Groups 364
Global Groups 364
Universal Groups 364
Working with Default Groups 365
Nesting Groups 365
Using Special Identities 367
Creating Groups 367
Creating Groups from the Command Line 369
Managing Group Memberships 369
Managing Group Membership Using Group Policy 370
Managing Group Objects with Dsmod.exe 372
Converting Groups 372
Deleting a Group 373
Skill Summary 374
Knowledge Assessment 374
Business Case Scenarios 377
Lesson 16: Creating Group PolicyObjects 379
Introducing Group Policy 380
Understanding Group Policy Objects 381
Local GPOs 381
Domain GPOs 382
Starter GPOs 382
Viewing Group Policy Templates 382
Configuring a Central Store 383
Using the Group Policy Management Console 383
Creating and Linking Nonlocal GPOs 384
Using Security Filtering 386
Understanding Group Policy Processing 387
Processing Multiple GPOs 388
Applying GPO Settings 388
Configuring Exceptions to GPO Processing 389
Managing Starter GPOs 390
Configuring Group Policy Settings 391
Policy Explanations 392
Understanding Policy States 392
Searching Policies 393
Creating Multiple Local GPOs 394
Skill Summary 397
Knowledge Assessment 397
Business Case Scenarios 400
www.wiley.com/college/microsoft or
call the MOAC Toil-Free Number: 1+(888) 764-7001 (U.S. & Canada only)
xxiv j Contents
Lesson 17; Configuring SecurityPolicies 401
Configuring Security Policies Using GroupPolicy 402
Defining Local Policies 403
Planning and Configuring an Audit Policy 403
Assigning User Rights 409
Configuring Security Options 409
Customizing Event Log Policies 411
Understanding Restricted Groups 412
Using Security Templates 413
Using the Security Templates Console 413
Planning a Security Template Strategy 414
Creating Security Templates 414
Working with Security Template Settings 415
Importing Security Templates into GPOs 415
Maintaining and Optimizing Group Policy 415
Manually Refreshing Group Policy 416
Configuring Local Users and Groups 416
Using the User Accounts Control Panel 417
Creating a New Local User Account 417
Using the Local Users and Groups Snap-In 419
Creating a Local Group 420
Configuring User Account Control 421
Performing Administrative Tasks 421
Using Secure Desktop 422
Configuring User Account Control Settings 423
Skill Summary 424
Knowledge Assessment 424
Business Case Scenarios 428
Lesson 18: Configuring ApplicationRestricted Policies 429
Installing Software with Group Policy 430
Repackaging Software 430
Deploying Software Using Group Policy 431
Assigning an Application to a User or Computer 432
Publishing an Application 432
Configuring Software Restriction Policies 436
Enforcing Restrictions 436
Configuring Software Restriction Rules 437
Hash Rules 438
Certificate Rules 439
Path Rules 439
Network Zone Rules 439
Using Multiple Rules 439
Configuring Software Restriction
Properties 440
Enforcement 440
Designated File Types 440
Trusted Publishers 440
Using AppLocker 441
Understanding Rule Types 442
Creating Default Rules 443
Creating Rules Automatically 444
Creating Rules Manually 445
Skill Summary 446
Knowledge Assessment 447
Business Case Scenarios 450
Lesson 19: Configuring WindowsFirewall 452
Building a Firewall 453
Understanding Windows Firewall
Settings 453
Working with Windows Firewall 454
Using the Windows Firewall Control
Panel 456
Customizing Settings 457
Allowing Applications 458
Using the Windows Firewall with Advanced
Security Console 459
Configuring Profile Settings 460
Creating Rules 461
Importing and Exporting Rules 464
Creating Rules Using Group
Policy 465
Using Filters 465
Creating Connection Security Rules 466
Skill Summary 468
Knowledge Assessment 469
Business Case Scenarios 472
Appendix A 473
Index 474
www.wiley.com/college/microsoft or
call the MOACToil-Free Number: 1+(888) 764-7001 (U.S. & Canada only)