Mastering Windows Server 2016

Brian Svidergol holds many industry certifications and builds Microsoft infrastructure and cloud solutions with Exchange Server, Active Directory, Microsoft Azure, Office 365, and related technologies. Vladimir Meloski is an MVP on Office Servers and Services, MCT and consultant, providing unified communications and infrastructure solutions based on Microsoft Exchange Server, Skype for Business, Office 365, and Windows Server. Byron Wright, owner of BTW Technology Solutions, has been a consultant, author, and instructor for 20 years, specializing in Windows Server, Active Directory, Office 365, and Exchange Server. Santos Martinez is a Microsoft Premier Field Engineer who has worked with SCCM since it was known as SMS. Doug Bassett is a Windows legend who, starting with the launch of Windows 3.0, has taught tens of thousands of IT pros how to efficiently setup, optimize, and troubleshoot Windows environments.

Introduction xxiii

Chapter 1 Windows Server 2016 Installation and Management 1

Windows Server 2016 Editions and Licensing 1

Processor Core-Based Licensing 3

Client Access Licenses 3

Licensing Programs 3

Other Editions of Windows Server 2016 4

Installing Windows Server 2016 4

Installation Steps 5

Post-Installation Configuration 9

Activation 10

Automating the Installation of Windows Server 2016 11

Sysprep and Imaging 12

Windows System Image Manager 14

Windows Deployment Services 16

Microsoft Deployment Toolkit 19

Deployment Solutions for Virtualization 19

Common Management Tools 20

Overview of Server Manager 21

Computer Management 24

Device Manager 24

Task Scheduler 25

Monitoring and Troubleshooting Tools 27

Event Viewer 28

Task Manager 29

Resource Monitor 30

Performance Monitor 32

The Bottom Line 33

Chapter 2 PowerShell 35

What Is PowerShell? 35

Forward Compatible 36

PowerShell Versions 36

Running and Customizing PowerShell 37

Customizing the PowerShell Console 37

Cutting and Pasting in PowerShell 37

Using PowerShell Integrated Scripting Environment (ISE) 38

Exploring the Command Add-On Pane 38

Setting Up PowerShell ISE Profiles 41

Editing Profiles 42

Setting Up Execution Policies 43

Recording PowerShell Sessions 44

Using Aliases and Getting Help 44

Using CMD.EXE-Like Commands in PowerShell 44

Exploring a Get-Help Example 46

Getting Get-Help Updates 47

Updating Help for Servers Without Internet Access 48

Accessing Online Help Files 48

Understanding Cmdlet Syntax 49

Interpreting the Syntax 49

Using Spaces in Cmdlets 51

Passing Multiple Values to a Parameter 51

Using Show-Command 52

Using -WhatIf 53

Using -Confirm 54

All About “About” Files 55

Understanding Shortened Command Syntax 56

Exploring PowerShell Command Concepts 58

Implementing Pipelines 59

Exploring Objects and Members 59

Exploring Properties, Events, and Methods 60

Performing Object Sorting 61

Measuring Objects 62

Using Select-Object to Select a Subset of Objects in a Pipeline 63

Using File Input and Output Operations 65

Converting Objects to Different Formats 66

Using ConvertTo-CSV 66

Using Export-Csv 67

Using ConvertTo-Html 68

Using ConvertTo-Xml 69

Using Export-Clixml 71

Encrypting an Exported Credential Object with Export-Clixml 71

Saving the Credentials to an XML File 73

Importing Data into PowerShell 74

Processing Pipeline Data 74

Using Comparison Operators 75

Using Wildcards and the -like Operator 76

Exploring Common Data Types 77

Determining Data Type with -is 79

Finding Portions of Strings with -match 80

Using the Containment Operators -contains and -notcontains 81

Using the -in and -notin Operators 81

Using the -replace Operator 82

Using Variables 83

Exploring Types of PowerShell Variables 83

Clearing and Removing Variables 84

Using the Variable Drive 84

Using Environmental Variables 84

Using Functions 85

Seeing Them in Action 85

Splatting 86

Creating Functions 86

Using Parameters 88

Sending Pipeline Objects to a Function with Begin, Process, and End 93

Viewing All Functions in a Session 94

Formatting Output 94

Using Format-Wide 94

Using Format-List 95

Using Format-Table 96

Using Loops 96

Using the For Loop 96

Using the Foreach Loop 97

Using the If Statement 99

Using the Switch Statement 100

Using the While Loop 102

Using the Where-Object Method 104

Managing Remote Systems via PowerShell 109

Using Enable-PSRemoting 109

Remoting to Workgroup Servers 110

Running PowerShell Commands on Remote Systems 110

Running Remote Scripts on Remote Computers 111

Establishing Persistent Remote Connections 111

Using PowerShell Direct 112

The Bottom Line 112

Chapter 3 Compute 115

Overview of Hyper-V 115

What’s New in Windows Server 2016 Hyper-V 116

Installing Hyper-V 118

Nested Virtualization 119

Storage Options in Hyper-V 120

Virtual Hard Disk Types 120

Virtual Hard Disk Recommendations 121

Configuring Hyper-V 121

Hyper-V Networking 121

Hyper-V Virtual Machine Configurations 122

Shielded Virtual Machines 123

Virtual Machine Settings 124

Virtual Machine State 124

Virtual Machine Checkpoints 125

Importing and Exporting Virtual Machines 125

Live Migration 126

PowerShell Direct 126

Virtual Machine Migration 126

Overview of Live Migration 127

Live Migration Requirements 128

The Validation Wizard and the Cluster Support Policy Requirements 142

Configuring Roles 143

Managing Failover Clusters 144

Configuring Cluster Properties 145

Managing Cluster Nodes 145

Configuring Quorum Properties 147

What Is Cluster-Aware Updating? 148

What Is a Stretch Cluster? 149

Failover Clustering with Hyper-V 151

Implementing Hyper-V Failover Clustering 152

Implementing CSVs 154

The Bottom Line 155

Chapter 4 Storage 157

Overview of Storage in Windows Server 2016 157

File Systems 158

NTFS 158

ReFS 159

Comparing NTFS and ReFS 159

Data Deduplication 161

How Data Is Optimized 162

How Optimized Data Is Read 163

How Data Deduplication Works in the Background 164

How to Enable Data Deduplication 164

Data Deduplication Advanced Settings 165

Storage Spaces 166

Storage Spaces Configuration Options 167

Storage Spaces Direct 168

Storage Replica 170

Types of Replication 171

Deploying Storage Replica 174

Storage Quality of Service 176

Working with Storage QoS 176

The Bottom Line 177

Chapter 5 Networking 179

Windows Server 2016 Network Configuration 179

IP Configuration 180

Network Adapter Teaming 182

Windows Firewall 185

DNS 188

DNS Zones 189

Name Resolution Processing 192

Removing Stale DNS Records 197

Securing DNS 198

Monitoring and Troubleshooting DNS 199

DHCP 202

DHCP Scopes 204

DHCP Options 206

DHCP Policies and Filters 207

High Availability 208

DHCP Database 209

Remote Access 210

VPN 211

WAP 218

Network Load Balancing 219

Software Defined Networking 220

Network Controller 221

Hyper-V Network Virtualization 221

RAS Gateway 221

Datacenter Firewall 222

Software Load Balancing 222

Switch Embedded Teaming 223

Internal DNS Service 224

The Bottom Line 224

Chapter 6 File Services 227

File Services Overview 227

File Server 229

Installing the File Server 230

Creating a File Share 230

Assigning Permissions 231

BranchCache for Network Files 232

BranchCache Modes of Operation 233

DFS Namespaces and DFS Replication 237

Accessing Shared Folders in DFS 238

Configuring DFS Replication 241

DFS Monitoring and Troubleshooting 243

File Server Resource Manager 245

FSRM Features Deployment 246

Configuring General FSRM Options 247

Classification Management 248

File Management Tasks 249

Quota Management 250

Templates for Monitoring Disk Usage 251

File Screening Management 251

Work Folders 252

The Bottom Line 257

Chapter 7 Windows Server Containers 259

Containers Overview 259

Container Limitations 261

Container Terminology 261

Hyper-V Containers 262

Creating and Maintaining Containers 263

Hardware and Software Requirements 263

Installing Docker 264

Retrieving Container Images from Docker Hub 266

Creating and Running a Container 267

Manually Customizing an Image 270

Automating Image Creation 271

Managing Container Images 274

Configuring Containers 275

Storage 275

Networking 276

Resource Constraints 279

Authentication to AD 280

Application Development and Deployment 281

The Bottom Line 282

Chapter 8 Security Mechanisms 285

Security Overview 285

Where to Begin? 285

What Are the Risks? 286

Thinking Like an Attacker 287

Ethical Hacking 288

Protecting Accounts 288

Privileged Access 289

Securing User Accounts 292

Configuring Account Policy Settings 293

Protected Users, Authentication Policies, and Authentication Policy Silos 294

Delegating Privileges 295

Credential Guard 296

Protecting Data at Rest 297

Encrypting File System 297

BitLocker 298

Protecting Data in Transit 300

Windows Firewall with Advanced Security 300

IPsec 304

Protecting Administrative Access 312

Privileged Access Workstations 312

Local Administrator 313

Just Enough Administration 315

Role-Capability Files 316

Session-Configuration Files 317

Protecting Active Directory Infrastructure 318

Enhanced Security Administrative Environment 318

Privileged Access Management 319

Malware Protection 322

Software Restriction Policies 323

AppLocker 323

Device Guard 324

Hardening Operating Systems Security with Additional Microsoft Products 327

Advanced Threat Analytics 327

Evidence of the Attack 328

Auditing 329

The Bottom Line 336

Chapter 9 Active Directory Domain Services 339

Overview of Features 339

What Changed in AD DS for Windows Server 2016 339

Features from Windows Server 2012 R2 340

Features from Windows Server 2012 340

Revisiting Privileged Access Management 340

Design Considerations 342

Forests and Domains 342

Active Directory Trusts 344

Active Directory Sites 345

Active Directory Replication 348

Flexible Single Master Operation Roles 350

Designing the Organizational Unit Structure 351

Domain Controllers 353

Computer, User, and Group Management 363

Computer Management 363

User Management 366

Group Management 370

Group Policy 373

Group Policy Inheritance and Enforcement 374

Group Policy Day-to-Day Tasks 376

The Bottom Line 383

Chapter 10 Active Directory Certificate Services 385

What’s New in AD CS Windows Server 2016 385

Windows Server 2012 R2 386

Windows Server 2012 386

Introduction to a Public Key Infrastructure and AD CS 387

Planning and Design Considerations 389

Implementing a Two-Tier Hierarchy 393

Working with Certificate Templates 406

Auto-Enrollment 417

The Bottom Line 419

Chapter 11 Active Directory Federation Services 423

Overview of AD FS 423

AD FS Terminology 425

How AD FS Works 426

Planning and Design Considerations 429

Where Should You Place the AD FS Components? 429

Should You Use SQL Server for the AD FS Database? 431

What Are Your Certificate Options for Your AD FS Environment? 432

Should You Use a Group-Managed Service

Account for Your AD FS Environment? 432

Deploying an AD FS Environment 433

Installing the AD FS Server Role 433

Configuring Internal DNS Name Resolution 439

Configuring a Sample Federated Application 441

Configuring an AD FS Relying Party 445

Testing Application Access from an Internal Client 445

Installing Web Application Proxy Server Role Service 447

Publishing the Sample Federated Application 450

Testing Application Access from an External Client 452

The Bottom Line 454

Chapter 12 Management with System Center 457

Overview of System Center 2016 457

Understanding the Upgrade Sequence 457

Understanding the Install Sequence 459

Installing an Instance in a Cluster 461

Using System Center Virtual Machine Manager 465

Installing and Configuring VMM 466

Managing the VMM Compute Fabric 470

Managing the VMM Library 470

Managing the VMM Host Groups 470

Managing Hyper-V Hosts and Clusters 470

Managing VMware Servers 470

Managing Infrastructure Servers 470

Managing the VMM Networking Fabric 472

Creating a Logical Network 473

Creating a VM Network 475

Managing the Storage Fabric 476

Creating Virtual Machines 478

Managing Windows Server 2016 with System Center Operations Manager 482

The Operations Manager Infrastructure 482

Installing the Prerequisites 484

Managing Windows Server 2016 with System Center Configuration Manager 499

Three Branches 499

What You Should Know About Site Server Differences 501

ConfigMgr Prerequisites 503

Installing a Primary Site Server 505

Configuring System Center Configuration Manager 517

Boundaries and Boundary Groups 526

Installing Clients 530

Using Client Settings 532

Using Collections 535

The Bottom Line 539

Chapter 13 Management with OMS 541

What Is Operations Management Suite? 541

A Brief History 542

OMS Services 542

OMS Pricing 543

SLA Details 543

System Requirements 544

Log Analytics 546

Performance Queries 552

Event Queries 554

The Bottom Line 555

Index 559