MCSA Windows Server 2012 Complete Study Guide

William Panek, MCT, MCSE, is founder of Stellacon Corporation, a Microsoft Certified Gold Partner and a Certified Learning Solutions Provider, and leading training provider on the East Coast. He has written numerous Microsoft certification books, including MCTS: Microsoft Windows 7 Configuration Study Guide, 2nd Edition; MCTS: Windows Server 2008 Active Directory Configuration Study Guide; MCTS: Windows Server Network Infrastructure Configuration Study Guide; and MCTS: Windows Server 2008 R2 Complete Study Guide, all from Sybex.

Introduction xxxi Assessment Test xlvii Chapter 1 Installing and Configuring Windows Server 2012 1 Features and Advantages of Windows Server 2012 2 Planning the Windows Server 2012 Installation 4 Server Roles in Windows Server 2012 4 Migrating Roles and Features to Windows Server 2012 8 Deciding Which Windows Server 2012 Versions to Use 9 Deciding on Type of Installation 11 Installing Windows Server 2012 14 Using Windows Deployment Services 18 Configuring Remote Management 22 Windows Remote Management 22 Windows PowerShell 23 Understanding Features On Demand 27 Summary 28 Exam Essentials 29 Review Questions 30 Chapter 2 Domain Name System 33 Introducing DNS 35 The Form of an IP Address 36 Understanding Servers, Clients, and Resolvers 41 Understanding the DNS Process 42 Introducing DNS Database Zones 48 Understanding Primary Zones 49 Understanding Secondary Zones 50 Understanding Active Directory Integrated DNS 51 Understanding Stub Zones 53 GlobalName Zones 54 Zone Transfers and Replication 54 Advantages of DNS in Windows Server 2012 58 Background Zone Loading 58 Support for IPv6 Addresses 58 Support for Read-Only Domain Controllers 59 DNS Socket Pools 59 DNS Cache Locking 60 DNS Security Extensions (DNSSEC) 60 DNS Devolution 61 Record Weighting 61 Netmask Ordering 61 DnsUpdateProxy Group 62 Introducing DNS Record Types 62 Start of Authority (SOA) Records 62 Name Server (NS) Records 64 Host Record 64 Alias Record 65 Pointer (PTR) Record 65 Mail Exchanger (MX) Record 66 Service (SRV) Record 66 Configuring DNS 67 Installing DNS 67 Load Balancing with Round Robin 70 Configuring a Caching-Only Server 70 Setting Zone Properties 71 Configuring Zones for Dynamic Updates 75 Delegating Zones for DNS 77 DNS Forwarding 79 Manually Creating DNS Records 79 DNS Aging and Scavenging 81 Monitoring and Troubleshooting DNS 81 Monitoring DNS with the DNS Snap-In 81 Troubleshooting DNS 84 Summary 92 Exam Essentials 93 Review Questions 95 Chapter 3 Active Directory Planning and Installation 99 Verifying the File system 101 Resilient File System (ReFS) 101 NTFS 102 Verifying Network Connectivity 106 Basic Connectivity Tests 106 Tools and Techniques for Testing Network Configuration 107 Understanding Domain and Forest Functionality 109 About the Domain Functional Level 109 About Forest Functionality 111 Planning the Domain Structure 112 Installing Active Directory 113 Adprep 113 The Installation Process 114 Verifying Active Directory Installation 124 Using Event Viewer 124 Using Active Directory Administrative Tools 126 Testing from Clients 127 Creating and Configuring Application Data Partitions 129 Creating Application Data Partitions 129 Managing Replicas 131 Removing Replicas 132 Using ntdsutil to Manage Application Data Partitions 132 Configuring DNS Integration with Active Directory 134 Summary 137 Exam Essentials 137 Review Questions 139 Chapter 4 Administering Active Directory 143 An Overview of OUs 144 The Purpose of OUs 145 Benefits of OUs 146 Planning the OU Structure 146 Logical Grouping of Resources 146 Understanding OU Inheritance 148 Delegating Administrative Control 149 Applying Group Policies 151 Creating OUs 151 Managing OUs 155 Moving, Deleting, and Renaming OUs 156 Administering Properties of OUs 157 Delegating Control of OUs 159 Troubleshooting OUs 163 Creating and Managing Active Directory Objects 163 Overview of Active Directory Objects 163 Managing Object Properties 171 Understanding Groups 174 Filtering and Advanced Active Directory Features 176 Moving, Renaming, and Deleting Active Directory Objects 177 Resetting an Existing Computer Account 179 Publishing Active Directory Objects 179 Making Active Directory Objects Available to Users 180 Publishing Printers 180 Publishing Shared Folders 182 Querying Active Directory 183 Using the Active Directory Administrative Center 184 Using the Command Prompt for Active Directory Configuration 185 Summary 187 Exam Essentials 187 Review Questions 189 Chapter 5 Managing Group Policy Objects 193 Introducing Group Policy 195 Understanding Group Policy Settings 196 The Security Settings Section of the GPO 199 Group Policy Objects 200 Group Policy Inheritance 201 Planning a Group Policy Strategy 202 Implementing Group Policy 203 Creating GPOs 203 Linking Existing GPOs to Active Directory 207 Managing Group Policy 207 Managing GPOs 207 Security Filtering of a Group Policy 209 Delegating Administrative Control of GPOs 211 Controlling Inheritance and Filtering Group Policy 212 Assigning Script Policies 214 Understanding the Loopback Policy 215 Managing Network Configuration 216 Automatically Enrolling User and Computer Certificates in Group Policy 217 Redirecting Folders 219 Managing GPOs with Windows PowerShell Group Policy Cmdlets 221 Deploying Software through a GPO 222 The Software Management Life Cycle 223 The Windows Installer 224 Deploying Applications 228 Implementing Software Deployment 229 Preparing for Software Deployment 230 Software Restriction Policies 231 Using AppLocker 231 Group Policy Slow Link Detection 231 Publishing and Assigning Applications 232 Applying Software Updates 233 Verifying Software Installation 234 Configuring Automatic Updates in Group Policy 235 Configuring Software Deployment Settings 236 The Software Installation Properties Dialog Box 236 Removing Programs 239 Microsoft Windows Installer Settings 241 Troubleshooting Group Policies 242 RSoP in Logging Mode 243 RSoP in Planning Mode 246 Using the gpresult.exe Command 247 Summary 248 Exam Essentials 249 Review Questions 251 Chapter 6 Configuring Active Directory Infrastructure 255 Overview of Network Planning 256 The Three Types of Networks 257 Exploring Network Constraints 257 Overview of Active Directory Replication and Sites 258 Replicating Active Directory 259 Understanding Active Directory Site Concepts 259 Understanding Distributed File System Replication 263 Implementing Sites and Subnets 264 Creating Sites 266 Creating Subnets 268 Configuring Sites 270 Configuring Replication 271 Intrasite Replication 272 Intersite Replication 272 Configuring Server Topology 279 Using Universal Group Membership Caching 283 Monitoring and Troubleshooting Active Directory Replication 284 About System Monitor 284 Troubleshooting Replication 284 Reasons for Creating Multiple Domains 287 Reasons for Using Multiple Domains 287 Drawbacks of Multiple Domains 289 Creating Domain Trees and Forests 290 Planning Trees and Forests 290 The Promotion Process 294 Creating a Domain Tree 294 Joining a New Domain Tree to a Forest 300 Adding Additional Domain Controllers 300 Demoting a Domain Controller 301 Managing Multiple Domains 303 Managing Single-Master Operations 303 Forest Operations Masters 303 Domain Operations Masters 304 Assigning Single-Master Roles 304 Managing Trusts 305 Managing UPN Suffixes 310 Managing Global Catalog Servers 310 Managing Universal Group Membership Caching 312 Summary 313 Exam Essentials 314 Review Questions 317 Chapter 7 Configuring Active Directory Server Roles 321 Understanding Server Manager 323 Configuring Active Directory Certificate Services 324 Installing Active Directory Certificate Services 326 Enrolling User and Computer Certificates 333 Certificate Templates 335 Revoking Certificates 337 Configuring Additional CA Server Settings 340 What s New in Windows Server 2012? 342 Understanding Active Directory Domain Services 342 Security Features Available for Domain Services 342 Features of Windows Server 2012 344 Active Directory Federation Services 346 Installing AD FS 346 Configuring AD FS 349 Active Directory Lightweight Directory Services 350 Installing AD LDS 350 Configuring AD LDS 351 Installing AD LDS on Server Core 354 Active Directory Rights Management Services 355 AD RMS Templates 360 Summary 360 Exam Essentials 361 Review Questions 362 Chapter 8 Using Virtualization in Windows Server 2012 365 Hyper-V Overview 367 What Is Virtualization? 367 Hyper-V Features 368 Hyper-V Architecture 370 Hyper-V Requirements 372 Hyper-V Installation and Configuration 373 Install the Hyper-V Role 373 Hyper-V in Server Manager 375 Using Hyper-V Manager 376 Configure Hyper-V Settings 377 Manage Virtual Switches 378 Managing Virtual Hard Disks 381 Configuring Virtual Machines 385 Creating and Managing Virtual Machines 385 Back Up and Restore Virtual Machines 392 Using Physical-to-Virtual (P2V) Conversion 397 Using Virtual-to-Virtual (V2V) Conversion 398 Summary 399 Exam Essentials 399 Review Questions 401 Chapter 9 Configuring TCP/IP 403 Understanding TCP/IP 404 Details of the TCP/IP Model 404 How TCP/IP Layers Communicate 405 Understanding Port Numbers 406 Understanding IP Addressing 407 The Hierarchical IP Addressing Scheme 407 Understanding Network Classes 409 Subnetting a Network 412 Implementing Subnetting 413 An Easier Way to Apply Subnetting 420 Applying Subnetting the Traditional Way 423 Working with Classless Inter-Domain Routing 431 Understanding IPv6 434 IPv6 History and Need 435 New and Improved IPv6 Concepts 435 IPv6 Addressing Concepts 438 IPv6 Integration/Migration 443 Understanding IP Address Management (IPAM) 447 Summary 452 Exam Essentials 452 Review Questions 453 Chapter 10 Managing DHCP 457 Overview of DHCP 458 Introducing the DORA Process 459 Advantages and Disadvantages of DHCP 460 Ipconfig Lease Options 461 Understanding Scope Details 462 Installing and Authorizing DHCP 464 Installing DHCP 464 Introducing the DHCP Snap-In 467 Authorizing DHCP for Active Directory 468 Creating and Managing DHCP Scopes 471 Creating a New Scope in IPv4 471 Creating a New Scope in IPv6 479 Changing Scope Properties (IPv4 and IPv6) 483 Changing Server Properties 484 Managing Reservations and Exclusions 487 Setting Scope Options for IPv4 490 Activating and Deactivating Scopes 493 Creating a Superscope for IPv4 493 Creating IPv4 Multicast Scopes 494 Integrating Dynamic DNS and IPv4 DHCP 497 Using Multiple DHCP Servers 499 Working with the DHCP Database Files 500 Summary 501 Exam Essentials 502 Review Questions 503 Chapter 11 Managing and Maintaining Servers 507 Configuring Windows Server Update Services 509 Windows Update 510 Windows Automatic Updates 511 Using Windows Server Update Services 512 Overview of Windows Server 2012 Performance Monitoring 524 Using Windows Server 2012 Performance Tools 526 Introducing Performance Monitor 527 Using Other Performance-Monitoring Tools 536 Summary 549 Exam Essentials 550 Review Questions 551 Chapter 12 Configuring Network Access 555 Understanding Routing 556 What Routing Does 556 How Routing Works 557 Routing in Windows Server 2012 567 Installing RRAS 568 Configuring IP Routing 573 Creating and Managing Interfaces 573 Setting IP Routing Properties 587 Managing Routing Protocols 589 Managing Static Routes 590 Configuring TCP/IP Packet Filters 592 Configuring VPN Packet Filters 595 PPTP Packet Filters 595 L2TP Packet Filters 597 Managing IP Routing 597 Using the routeprint Command 598 Troubleshooting IP Routing 598 Troubleshooting Example 599 Summary 601 Exam Essentials 601 Review Questions 603 Chapter 13 Understanding Security 607 Active Directory Security Overview 609 Understanding Security Principals 609 Managing Security and Permissions 619 Using ACLs and ACEs 620 Implementing Active Directory Security 622 Using User Templates 624 Delegating Control of Users and Groups 625 Understanding Dynamic Access Control 627 Using Group Policy for Security 627 Fine-Grained Password Policies 630 Understanding Smart Card Authentication 633 Preparing a Smart Card Certificate Enrollment Station 633 Configuring Group Policy Settings for Smart Cards 634 Understanding Security Configuration and Analysis Tools 635 Using the Security Configuration and Analysis Utility 635 Understanding the secedit.exe Command 636 Implementing an Audit Policy 637 Overview of Auditing 638 Implementing Auditing 638 Viewing Auditing Information 640 Using the Auditpol.exe Command 640 What s New in Windows Server 2012 Auditing 641 Summary 642 Exam Essentials 643 Review Questions 644 Chapter 14 Managing File and Print Services 647 Understanding File Servers 649 Configuring File Servers 650 Sharing Folders 650 Making Active Directory Objects Available to Users 651 Configuring Offline Folders 653 Volume Shadow Copy Services (VSS) 656 Understanding Permissions 656 Share and Storage Management Console 663 Understanding File Server Resource Manager (FSRM) 664 Using BitLocker Drive Encryption 666 What s New in BitLocker? 667 Windows 7 & 2008 R2 vs. Windows 8 & 2012 668 Understanding BranchCache 671 Distributed Cache Mode Requirements 672 Hosted Mode Requirements 674 BranchCache and PowerShell 676 What s New in Windows Server 2012 BranchCache? 677 Configuring DirectAccess 678 DirectAccess vs. VPNs 678 Understanding How DirectAccess Works 679 Knowing the DirectAccess Infrastructure Requirements 679 Configuring Disk Quotas 680 Configuring Distributed File System 682 Advantages of DFS 683 Types of DFS 683 Remote Differential Compression (RDC) 685 Understanding Printing 686 Creating and Publishing Printers 686 Configuring Printers 688 Migrating Print Servers 693 Easy Print Driver 693 Summary 693 Exam Essentials 694 Review Questions 695 Chapter 15 Managing Remote Access Services 699 Overview of Dial-Up Networking 700 What DUN Does 701 How DUN Works 701 Overview of Virtual Private Networks 705 What VPNs Do 705 VPNs and Windows Server 2012 706 How VPNs Work 706 Configuring Your Remote Access Server 710 Configuring PPP Options 710 Installing a VPN 714 How VPN Works 714 Enabling RRAS as a VPN 715 Configuring a VPN 715 Configuring VPN Ports 715 Troubleshooting VPNs 716 Managing Your Remote Access Server 718 Managing Remote Users with a RADIUS Server 718 Monitoring Overall Activity 719 Controlling Remote Access Logging 719 Reviewing the Remote Access Event Log 722 Monitoring Ports and Port Activity 722 Configuring a RAS or VPN Client 723 The General Tab 724 The Options Tab 725 The Security Tab 726 The Networking Tab 729 The Sharing Tab 730 Overview of Wireless Access 730 Configuring Wireless Access 731 Remote Access Security 732 User Authentication 733 Connection Security 734 Access Control 735 Configuring User Access 736 Setting Up User Profiles 736 Using Network Access Policies 738 Using Remote Access Profiles 744 Setting Up a VPN Network Access Policy 749 Configuring Security 751 Controlling Server Security 751 Configuring Network Access Protection 754 Summary 755 Exam Essentials 755 Review Questions 757 Chapter 16 Configuring High Availability in Windows Server 2012 761 Components of High Availability 762 Achieving High Availability 763 High Availability Foundation 764 Achieving High Availability with Failover Clustering 765 Failover Clustering Requirements 767 Cluster Quorum 768 Validating a Cluster Configuration 770 Creating a Cluster 775 Clustered Application Settings 779 Resource Properties 783 Windows Server 2012 Clustering Features 786 Achieving High Availability with Network Load Balancing 787 How Does Network Load Balancing Work? 787 Creating an NLB Cluster 788 Modifying Cluster Properties 789 Managing NLB Clusters 790 NIC Teaming 791 Summary 791 Exam Essentials 791 Review Questions 792 Chapter 17 Configuring File and Storage Services 795 Storage in Windows Server 2012 796 Initializing Disks 796 Working with Basic and Dynamic Disks 797 Working with Volume Sets 799 Redundant Array of Independent Disks 800 Mount Points 804 Microsoft MPIO 805 iSCSI 808 Internet Storage Name Service 810 Fibre Channel 813 Network Attached Storage 814 Virtual Disk Service 814 Configuring Windows Firewall Options 816 Summary 825 Exam Essentials 825 Review Questions 826 Chapter 18 Implementing Disaster Recovery 829 Protecting the System 830 Backup and Recovery of Active Directory 831 Overview of the Windows Server 2012 Backup Utility 833 Setting Up an Active Directory Backup 837 Restoring Active Directory 841 Active Directory Recycle Bin 842 Restartable Active Directory 843 Offline Maintenance 843 Monitoring Replication 845 Using the ADSI Editor 846 Wbadmin Command Line Utility 846 Understanding Shadow Copies 847 VssAdmin Command 849 Data Protection Manager 850 Using Advanced Boot Options 850 Starting in Safe Mode 851 Enabling Boot Logging 852 Using Other Advanced Boot Options Menu Modes 854 Windows Recovery Environment 855 Using the Startup Repair Tool 856 Summary 857 Exam Essentials 857 Review Questions 858 Appendix A Answers to Review Questions 861 Chapter 1: Installing and Configuring Windows Server 2012 862 Chapter 2: Domain Name System 862 Chapter 3: Active Directory Planning and Installation 863 Chapter 4: Administering Active Directory 864 Chapter 5: Managing Group Policy Objects 865 Chapter 6: Configuring Active Directory Infrastructure 866 Chapter 7: Configuring Active Directory Server Roles 867 Chapter 8: Using Virtualization in Windows Server 2012 868 Chapter 9: Configuring TCP/IP 869 Chapter 10: Managing DHCP 871 Chapter 11: Managing and Maintaining Servers 873 Chapter 12: Configuring Network Access 874 Chapter 13: Understanding Security 875 Chapter 14: Managing File and Print Services 876 Chapter 15: Managing Remote Access Services 877 Chapter 16: Configuring High Availability in Windows Server 2012 878 Chapter 17: Configuring File and Storage Services 879 Chapter 18: Implementing Disaster Recovery 880 Appendix B About the Additional Study Tools 881 Additional Study Tools 882 Sybex Test Engine 882 Electronic Flashcards 882 Videos 882 PDF of Glossary of Terms 882 Adobe Reader 883 System Requirements 883 Using the Study Tools 883 Troubleshooting 883 Customer Care 884 Index 885