Windows Server 2012 R2 Essentials & Configuration by Stanek, William R. -- Read -- Imperial Library of Trantor

Index

Windows Server 2012 R2 Essentials & Configuration Acknowledgments Introduction

Who is this book for? How this book is organized Conventions used in this book Other resources Errata and book support We want to hear from you Stay in touch

1. Windows Server 2012 R2 administration

Windows Server 2012 R2 and Windows 8.1 Getting to know Windows Server 2012 R2

Introducing Windows Server 2012 R2 Working with Windows Server 2012 R2

Power management options Networking tools and protocols

Understanding networking options Working with networking protocols

Domain controllers, member servers, and domain services

Working with Active Directory Using read-only domain controllers Using restartable Active Directory Domain Services

Name-resolution services

Using Domain Name System Using Windows Internet Name Service Using Link-Local Multicast Name Resolution

Frequently used tools

Windows PowerShell Windows Remote Management

Enabling and using WinRM Configuring WinRM

2. Deploying Windows Server 2012 R2

Server roles, role services, and features for Windows Server 2012 R2 Full-server, minimal-interface, and Server Core installations

Navigating Server Core

Installing Windows Server 2012 R2

Performing a clean installation Performing an upgrade installation Performing additional administration tasks during installation

Using the command line during installation Forcing disk partition removal during installation Loading disk device drivers during installation Creating, formatting, deleting, and extending disk partitions during installation

Creating Disk Partitions During Installation Formatting Disk Partitions During Installation Deleting Disk Partitions During Installation Extending Disk Partitions During Installation

Changing the installation type

Converting full-server and minimal-interface installations Converting Server Core installations

3. Managing Windows servers

Managing roles, role services, and features

Performing initial configuration tasks Navigating Server Manager essentials and binaries Managing your servers remotely Connecting to and working with remote servers Adding and removing roles, role services, and features

Managing system properties

Configuring server name and domain membership Configuring driver installation options Configuring memory and performance options

Setting Windows performance Setting application performance Configuring virtual memory Configuring Data Execution Prevention

Using and Configuring Dep Adding and Removing Programs as Exceptions

Understanding DEP compatibility Configuring system and user environment variables

Creating an Environment Variable Editing an Environment Variable Deleting an Environment Variable

Configuring system startup and recovery

Setting Startup Options Setting Recovery Options

4. Monitoring services, processes, and events

Managing applications, processes, and performance

Getting started with Task Manager Viewing and working with processes Administering processes Viewing system services Viewing and managing system performance

CPU usage: the basics Memory usage: the basics Network usage: the basics

Viewing and managing remote user sessions

Managing system services

Navigating services in Server Manager Navigating services in Computer Management Starting, stopping, and pausing services Configuring service startup Configuring service logon Configuring service recovery Disabling unnecessary services Troubleshooting services

Event logging and viewing

Accessing events in Server Manager Accessing events in Event Viewer Filtering event logs Setting event log options Clearing event logs Archiving event logs

Archive log file types Creating log archives Viewing log archives

5. Optimizing system performance

Preparing for monitoring

Creating a monitoring plan Using the monitoring consoles Choosing counters to monitor

Performance logging

Creating and managing data collector sets Collecting performance counter data Collecting performance trace data Collecting configuration data Viewing data collector reports Configuring performance counter alerts

Tuning system performance

Monitoring and tuning memory usage Monitoring and tuning processor usage Monitoring and tuning disk I/O Monitoring and tuning network bandwidth and connectivity

6. Automating administrative tasks, policies, and procedures

Understanding group policies

Group Policy essentials In what order are multiple policies applied? When are group policies applied? Group Policy requirements and version compatibility

Navigating Group Policy changes Managing local group policies

Local Group Policy objects Accessing the top-level local policy settings Local Group Policy object settings Accessing administrator, nonadministrator, and user-specific local Group Policy

Managing site, domain, and organizational unit policies

Understanding domain and default policies Using the Group Policy Management Console Getting to know the policy editor Using administrative templates to set policies Creating and linking GPOs Creating and using starter GPOs Delegating privileges for Group Policy management Blocking, overriding, and disabling policies

Maintaining and troubleshooting Group Policy

Refreshing Group Policy Configuring the refresh interval Modeling Group Policy for planning purposes Copying, pasting, and importing policy objects Backing up and restoring policy objects Determining current Group Policy settings and refresh status Disabling an unused part of Group Policy Changing policy processing preferences Configuring slow-link detection Removing links and deleting GPOs Troubleshooting Group Policy Fixing default Group Policy objects

7. Using Active Directory

Introducing Active Directory

Active Directory and DNS Read-only domain controller deployment Features introduced with Windows Server 2008 R2 Features introduced with Windows Server 2012

Working with domain structures

Understanding domains Understanding domain forests and domain trees Understanding organizational units Understanding sites and subnets

Working with Active Directory domains

Using computers with Active Directory Working with domain functional levels

Using the Windows Server 2003 functional level Using the Windows Server 2008 functional level Using the Windows Server 2008 R2 functional level Using the Windows Server 2012 functional level Using the Windows Server 2012 R2 functional level

Raising or lowering domain and forest functionality

Understanding the directory structure

Exploring the data store Exploring global catalogs Universal group membership caching Replication and Active Directory Active Directory and LDAP Understanding operations master roles

Using the Active Directory Recycle Bin

Preparing schema for the Recycle Bin Recovering deleted objects

Using Ldp.exe for basic recovery Using Windows PowerShell for basic and advanced recovery Using the enhanced Recycle Bin for recovery

8. Core Active Directory administration

Tools for managing Active Directory

Active Directory administration tools Active Directory command-line tools Active Directory support tools Using Active Directory Users And Computers Active Directory Administrative Center and Windows PowerShell

Managing computer accounts

Creating computer accounts on a workstation or server Creating computer accounts in Active Directory Administrative Center Creating computer accounts in Active Directory Users And Computers Viewing and editing computer account properties Deleting, disabling, and enabling computer accounts Resetting locked computer accounts Moving computer accounts Managing computers Joining a computer to a domain or workgroup Using offline domain join

Managing domain controllers, roles, and catalogs

Installing and demoting domain controllers Viewing and transferring domainwide roles Viewing and transferring the domain naming master role Viewing and transferring schema master roles Transferring roles by using the command line Seizing roles by using the command line Configuring global catalogs Configuring universal group membership caching

Managing organizational units

Creating organizational units Viewing and editing organizational unit properties Renaming and deleting organizational units Moving organizational units

Managing sites

Creating sites Creating subnets Associating domain controllers with sites Configuring site links Configuring site link bridges

Maintaining Active Directory

Using ADSI Edit Examining intersite topology

Troubleshooting Active Directory

9. Creating user and group accounts

Windows Server security model

Authentication protocols Access controls Claims-based access controls Central access policies

Differences between user and group accounts

User accounts

Logon names, passwords, and public certificates Security identifiers and user accounts

Group accounts

Group types Group scope Security identifiers and group accounts When to use domain local, global, and universal groups

Default user accounts and groups

Built-in user accounts Predefined user accounts

Administrator account Guest account

Built-in and predefined groups Implicit groups and special identities

Account capabilities

Privileges Logon rights Built-in capabilities for groups in Active Directory

Using default group accounts

Groups used by administrators Implicit groups and identities

User account setup and organization

Account naming policies

Rules for display names Rules for logon names Naming schemes

Password and account policies

Using secure passwords Setting account policies

Configuring account policies

Configuring password policies

Enforce Password History Maximum Password Age Minimum Password Age Minimum Password Length Password Must Meet Complexity Requirements Store Passwords Using Reversible Encryption

Configuring account lockout policies

Account Lockout Threshold Account Lockout Duration Reset Account Lockout Counter After

Configuring Kerberos policies

Enforce User Logon Restrictions Maximum Lifetime Maximum Tolerance

Configuring authentication policies

Configuring user rights policies

Configuring global user rights Configuring local user rights

Adding a user account

Creating domain user accounts Creating local user accounts

Adding a group account

Creating a global group Creating a local group and assigning members

Handling global group membership

Managing individual membership Managing multiple memberships in a group Setting the primary group for users and computers

Implementing managed accounts

Creating and using managed service accounts Configuring services to use managed service accounts Removing managed service accounts Moving managed service accounts Using virtual accounts

10. Managing existing user and group accounts

Managing user contact information

Setting contact information Searching for users and groups in Active Directory

Configuring the user’s environment settings

System environment variables Logon scripts Assigning home directories

Setting account options and restrictions

Managing logon hours

Configuring logon hours Enforcing logon hours

Setting permitted logon workstations Setting dial-in and VPN privileges Setting account security options

Managing user profiles

Local, roaming, and mandatory profiles

Working with roaming and mandatory profiles Restricting roaming profiles Creating local profiles Creating roaming profiles Creating mandatory profiles

Using the System utility to manage local profiles

Creating a profile manually Copying an existing profile to a new user account Copying or restoring a profile Deleting a local profile and assigning a new one Changing the profile type

Updating user and group accounts

Renaming user and group accounts Copying domain user accounts Importing and exporting accounts Deleting user and group accounts Changing and resetting passwords Enabling user accounts

Account disabled Account locked out Account expired

Managing multiple user accounts

Setting profiles for multiple accounts Setting logon hours for multiple accounts Setting permitted logon workstations for multiple accounts Setting logon, password, and expiration properties for multiple accounts

Troubleshooting logon problems Viewing and setting Active Directory permissions

A. About the author Index About the Author Copyright

← Prev
Back
Next →

← Prev
Back
Next →