Training Guide · Configuring Advanced Windows Server 2012 Services by Thomas, Orin -- Read -- Imperial Library of Trantor

Index

Training Guide: Configuring Advanced Windows Server 2012 Services Introduction

System requirements

Hardware and software requirements

Virtualization hardware requirements Software requirements

Virtual machine setup instructions Acknowledgments Errata & book support We want to hear from you Stay in touch

1. Advanced Active Directory infrastructure

Before you begin Lesson 1: Configuring domains and forests

Multidomain Active Directory environments

Domain trees Intra-forest authentication Domain functional levels

Windows Server 2003 Functional Level Windows Server 2008 Functional Level Windows Server 2008 R2 Functional Level Windows Server 2012 Functional Level

Forest functional levels

Multiforest Active Directory environments Upgrading existing domains and forests User Principal Name (UPN) suffixes Lesson summary Lesson review

Lesson 2: Configuring trusts

Trusts

Trust transitivity Trust direction Forest trusts Configuring selective authentication External Trusts Shortcut trusts Realm trusts Netdom.exe

SID filtering Name suffix routing Lesson summary Lesson review

Practice exercises

Exercise 1: Prepare a domain controller to host a child domain with a contiguous namespace Exercise 2: Create a child domain with a noncontiguous namespace Exercise 3: Prepare domain controller to host the wingtiptoys.com tree in the contoso.com forest Exercise 4: Promote domain controller for new tree in contoso.com forest Exercise 5: Prepare a domain controller to host a new forest Exercise 6: Create new forest Exercise 7: Prepare to configure a forest trust relationship Exercise 8: Begin creating a forest trust relationship Exercise 9: Complete the creation of the forest trust relationship between contoso.com and margiestravel.com Exercise 10: Configure name suffix routing Exercise 11: Configure selective authentication Exercise 12: Configure additional UPN suffixes Exercise 13: Configure a shortcut trust

Suggested practice exercises Answers

Lesson 1 Lesson 2

2. Active Directory sites and replication

Before you begin Lesson 1: Configuring sites

Configure sites and subnets

Creating sites Creating subnets Creating site links Creating site link bridges

Manage SRV record registration Moving domain controllers Lesson summary Lesson review

Lesson 2: Active Directory replication

Active directory partitions Understanding multi-master replication

Knowledge consistency checker (KCC) Store and forward replication Conflict resolution

RODC replication Configure RODC password replication Monitor and manage replication Repadmin Upgrade SYSVOL replication Lesson summary Lesson review

Practice exercises

Exercise 1: Create Active Directory sites Exercise 2: Create Active Directory subnets Exercise 3: Create site links Exercise 4: Modify site link cost and replication schedule Exercise 5: Configure MEL-DC as an additional domain controller Exercise 6: Verify site placement and trigger replication Exercise 7: Configure ADL-DC as an RODC Exercise 8: Configure RODC replication Exercise 9: View account passwords replicated to ADL-DC Exercise 10: Monitor replication with repadmin Exercise 11: Remove the RODC and reset accounts

Suggested practice exercises Answers

Lesson 1 Lesson 2

3. Advanced DHCP and DNS

Before you begin Lesson 1: Implement an advanced DNS solution

DNSSEC DNS event logs GlobalNames Zones Advanced DNS options

DNS socket pool DNS cache locking DNS recursion Netmask ordering

Delegated administration Lesson summary Lesson review

Lesson 2: Implement an advanced DHCP solution

Superscopes Multicast scopes Split scopes Name Protection DHCP failover Lesson summary Lesson review

Lesson 3: Deploy and manage IPAM

Introduction to IPAM Deploy IPAM Configure server discovery Managing the IP address space IP address tracking IPAM administration Lesson summary Lesson review

Practice exercises

Exercise 1: Configure MEL-DC Exercise 2: Configure DNSSEC Exercise 3: Configure the name resolution policy Exercise 4: Increase the size of the DNS socket pool Exercise 5: Modify DNS Cache Locking Exercise 6: Create and manage a GlobalNames Zone Exercise 7: Configure and view the DNS Event Log Exercise 8: Verify netmask ordering and disable recursion Exercise 9: Install and activate the DHCP role Exercise 10: Create a DHCP superscope Exercise 11: Create a split scope Exercise 12: Configure DHCP Name Protection Exercise 13: Create new multicast scopes Exercise 14: Configure DHCP failover Exercise 15: Install the IPAM feature Exercise 16: Configure IPAM GPOs and server discovery Exercise 17: Configure servers to be managed by IPAM Exercise 18: Manage servers using IPAM Exercise 19: Use IPAM to create a DHCP scope Exercise 20: Use IPAM to manage IP addresses

Suggested practice exercises Answers Lesson 1

Lesson 2 Lesson 3

4. Active Directory Certificate Services

Before you begin Lesson 1: Install and configure Active Directory Certificate Services

Installing certificate authorities

Active Directory Certificate Services role services CA hierarchies Enterprise root CA Enterprise subordinate CA Standalone root CA Standalone subordinate CA Hardware security module

CRL Distribution Points Online responders Administrative role separation CA backup and recovery Lesson summary Lesson review

Lesson 2: Manage certificates

Certificate templates Certificate revocation Certificate renewal Autoenrollment Key archiving and recovery Lesson summary Lesson review

Practice exercises

Exercise 1: Deploy and configure an enterprise root CA Exercise 2: Deploy an enterprise subordinate CA Exercise 3: Install a standalone subordinate CA Exercise 4: Configure a standalone CA Exercise 5: Configure a CRL Distribution Point Exercise 6: Configure an online responder Exercise 7: Configure administrative role separation Exercise 8: Configure a key recovery agent certificate template Exercise 9: Request a key recovery agent certificate Exercise 10: Configure Key Recovery Exercise 11: Configure a certificate template for autoenrollment and key recovery Exercise 12: Configure group policy to support autoenrollment, credential roaming, and automatic renewal Exercise 13: Configure a certificate template to support private key archival and recovery and reenroll all certificate holders Exercise 14: Perform certificate revocation Exercise 15: Perform certificate recovery

Suggested practice exercises Answers

Lesson 1 Lesson 2

5. Backup and recovery

Before you begin Lesson 1: Configure and manage backups

Windows Server Backup

Backup locations Windows Server Backup PowerShell cmdlets Backing up data with Windows Server Backup

Windows Azure Backup

Preparing for Windows Azure Backup Backing up data to Windows Azure Backup

Role- and application-specific backups Vssadmin System restore points Data Protection Manager Lesson summary Lesson review

Lesson 2: Recover servers

Restore from backups

Restore to an alternative location Restore from Windows Azure Backup

Recover servers using Windows Recovery Environment Safe Mode and Last Known Good Configuration Configure the Boot Configuration Data store Lesson summary Lesson review

Practice exercises

Exercise 1: Prepare MEL-DC and CBR-DC for exercises Exercise 2: Install Windows Server Backup Exercise 3: Configure CBR-DC for local backup Exercise 4: Perform a backup to a local volume Exercise 5: Perform a backup over the network Exercise 6: Use Vssadmin Exercise 7: Perform a full volume recovery using Windows Server Backup Exercise 8: Prepare for Windows Recovery Environment Exercise 9: Perform full server recovery over the network Exercise 10: Boot into Safe Mode Exercise 11: Modify Boot Configuration Data store Exercise 12: Configure a standalone computer for use with Windows Azure Backup Exercise 13: Configure Windows Azure Backup Exercise 14: Backup data to Windows Azure Backup Exercise 15: Restore data from Windows Azure Backup

Suggested practice exercises Answers

Lesson 1 Lesson 2

6. Advanced file services and storage

Before you begin Lesson 1: Advanced file services

File screens Quotas Server for NFS BranchCache

Hosted Cache Server Configuration BranchCache for Network File Server Client configuration

File classification File access auditing Lesson summary Lesson review

Lesson 2: Configure and optimize storage

iSCSI target and initiator iSNS server Thin provisioning and trim Features on Demand Lesson summary Lesson review

Practice exercises

Exercise 1: Prepare MEL-DC and ADL-DC Exercise 2: Deploy FSRM Exercise 3 Configure quota templates and quotas Exercise 4: Create file groups, file screen templates, apply file screens, and apply file screen exceptions Exercise 5: Configure file classification Exercise 6: Verify the classification Exercise 7: Configure file access auditing Exercise 8: Create and assign an iSCSI target Exercise 9: Connect to an iSCSI target Exercise 10: Create a new storage pool and thin provisioned virtual disk Exercise 11: Install the iSNS server and register the initiator Exercise 12: Remove feature files Exercise 13: Configure BranchCache policies Exercise 14: Deploy BranchCache on Windows Server 2012

Suggested practice exercises Answers

Lesson 1 Lesson 2

7. High availability

Before you begin Lesson 1: Configure and manage failover clustering

Failover clustering Cluster Quorum Modes Cluster storage and cluster shared volumes

Cluster networks

Cluster-Aware Updating Migrating and upgrading clusters Failover and preference settings Continuously available shares Lesson summary Lesson review

Lesson 2: Network Load Balancing

Network Load Balancing Network Load Balancing prerequisites NLB cluster operation modes Managing cluster hosts Port rules Filtering and affinity Upgrading an NLB cluster New NLB PowerShell cmdlets Lesson summary Lesson review

Practice exercises

Exercise 1: Prepare ADL-DC, MEL-DC, and CBR-DC for exercises Exercise 2: Install the Network Load Balancing feature on ADL-DC, CBR-DC, and MEL-DC Exercise 3: Create a three-node NLB cluster Exercise 4: Configure port rules and affinity Exercise 5: Remove an NLB cluster Exercise 6: Create shared storage for failover clustering Exercise 7: Connect potential cluster nodes to shared storage Exercise 8: Install failover cluster features Exercise 9: Validate cluster configuration Exercise 10: Create a two-node failover cluster Exercise 11: Add a cluster node Exercise 12: Change the quorum configuration Exercise 13: Install and configure a highly available file server Exercise 14: Configure a highly available file share Exercise 15: Configure failover settings, failback settings, and move node Exercise 16: Simulate unplanned failure Exercise 17: Cluster-Aware Updating

Suggested practice exercises Answers

Lesson 1 Lesson 2

8. Virtual machine and site resilience

Before you begin Lesson 1: Virtual machine movement

Virtual machine failover clustering Shared Nothing Hyper-V Live Migration Storage Migration Virtual machine import and export Lesson summary Lesson review

Lesson 2: Site-level fault tolerance

Hyper-V Replica

Configuring Hyper-V Replica Planned failover Unplanned failover

Hyper-V Replica Broker

Multisite clustering Lesson summary Lesson review

Practice exercises

Exercise 1: Install the Hyper-V role on MEL-HV-1 and MEL-HV-2 Exercise 2: Configure identical virtual switches on MEL-HV-1 and MEL-HV-2 Exercise 3: Prepare servers for live migration Exercise 4: Prepare servers for replication Exercise 5: Create two virtual machines on MEL-HV-1 Exercise 6: Configure TEST-ONE for replication Exercise 7: View replication health and perform planned failover of TEST-ONE to MEL-HV-2 Exercise 8: Configure Hyper-V to support live migration Exercise 9: Perform live migration of TEST-TWO Exercise 10: vPerform storage migration Exercise 11: Perform a virtual machine export Exercise 12: Import a copy of a virtual machine Exercise 13: Perform an unplanned failover Exercise 14: Enable reverse replication

Suggested practice exercises Answers

Lesson 1 Lesson 2

9. DAC and AD RMS

Before you begin Lesson 1: Implement Dynamic Access Control (DAC)

Introduction to Dynamic Access Control Configuring group policy to support DAC Configuring user and device claims Configuring resource properties Central access rules Central access policies Staging Access Denied Assistance Lesson summary Lesson review

Lesson 2: Install and configure Active Directory Rights Management Services (AD RMS)

Installing AD RMS AD RMS certificates and licenses AD RMS templates AD RMS Administrators and Super Users Trusted user and publishing domains Exclusion policies Apply AD RMS templates automatically Lesson summary Lesson review

Practice exercises

Exercise 1: Prepare MEL-DC and ADL-DC Exercise 2: Enable group policy support for DAC Exercise 3: Create users and groups Exercise 4: Configure user and device claims Exercise 5: Configure Resource Properties Exercise 6: Prepare server for file classification Exercise 7: Create a file classification rule Exercise 8: Run and verify the file classification Exercise 9: Create central access rules Exercise 10: Create a central access policy Exercise 11: Configure Access Denied Assistance Exercise 12: Configure staging Exercise 13: Prepare infrastructure for an AD RMS deployment Exercise 14: Install and configure the AD RMS server role Exercise 15: Create the AD RMS Super Users group Exercise 16: Create AD RMS templates Exercise 17: Configure template distribution Exercise 18: Configure application exclusions Exercise 19: Apply RMS templates using file classification

Suggested practice exercises Answers

Lesson 1 Lesson 2

10. Active Directory Federation Services

Before you begin Lesson 1: Implement Active Directory Federation Services

AD FS Components Claims, claim rules, and attribute stores Claims provider Relying party Relying party trust Claims provider trust Configuring certificate relationship Attribute stores Claims rules

Relying party trust claims rules Claims provider trust claim rules

Configure AD FS proxy Lesson summary Lesson review

Practice exercises

Exercise 1: Prepare separate forests Exercise 2: Configure DNS forwarding Exercise 3: Deploy AD CS in each forest Exercise 4: Prepare SYD-DC for certificate publication Exercise 5: Prepare MEL-DC for certificate publication Exercise 6: Configure CA trust in each forest Exercise 7: Acquire certificates for each server. Exercise 8: Deploy AD FS in each forest Exercise 9: Configure relying party trust Exercise 10: Configure Claims Provider Trust Exercise 11: Prepare claim data Exercise 12: Configure Claim Rules

Suggested practice exercises Answers

Lesson 1

A. About the author Index About the Author Copyright

← Prev
Back
Next →

← Prev
Back
Next →