Windows Server 2008 Unleashed

Rand Morimoto, Ph.D., MCSE, CISSP Rand Morimoto has been in the computer industry for more than 30 years and has authored, co-authored, or been a contributing writer for dozens of bestselling books on Windows 2003, Exchange 2007, Security, BizTalk Server, and Remote and Mobile Computing. Rand is the president of Convergent Computing, an IT-consulting firm in the San Francisco Bay area that was one of the key early adopter program partners with Microsoft, implementing beta versions of Windows Server 2008 in production environments more than 3 years before the product release. Rand speaks at conferences and conventions around the world on tips, tricks, and best practices on planning, migrating, and implementing Windows 2008 and Exchange 2007.   Michael Noel, MCSE+I, CISSP, MCSA, MVP Michael Noel has been involved in the computer industry for nearly two decades and has significant real-world experience with enterprise information technology environments. Michael has authored several major publications, such as SharePoint 2007 Unleashed, Exchange 2007 Unleashed, ISA Server 2006 Unleashed, Windows Server 2003 Unleashed, and many more, with a total worldwide circulation of more than 150,000 copies. Currently a partner at Convergent Computing in the San Francisco Bay area, Michael’s writings are leveraged from his real-world experience designing, deploying, and administering IT infrastructure.   Omar Droubi, MCSE Omar Droubi has been in the computer industry for more than 15 years, has co-authored one of Sams Publishing bestselling books, Windows 2003 Unleashed, and has been a contributing writer and technical reviewer on several other books on Windows Server 2003 and Exchange 2000, 2003, and 2007. Omar has been involved in testing, designing, and prototyping Windows Server 2008 infrastructures for the past 2 years, and has primarily focused on upgrading existing networks and utilizing many of the new features included in the product. Also during this time, Omar has assisted several organizations with the development of technical roadmaps to plan for future deployments of Windows Server 2008 and Vista.   Ross Mistry, MCTS, MCDBA, MCSE Ross Mistry is a seasoned veteran in the Silicon Valley and has spent more than a decade in the computer industry. As a principal consultant and partner with Convergent Computing (CCO), he has had the opportunity to work with Windows Server 2008 for 3 years before the product released to the public. Ross focuses on Active Directory, Exchange, and SQL Server, where he designs and implements solutions for Fortune 500 organizations with a global presence. His specialties in the Windows space are Active Directory upgrades, high availability, and disaster recovery. Ross has also taken on the roles of lead author, contributing writer, and technical editor for many bestselling books published by Sams. His recent works include lead author on SQL Server 2005 Management and Administration, contributing writer on Exchange Server 2007 Unleashed and SharePoint 2007 Unleashed, and technical editor on SQL Server 2005 Unleashed. In addition to consulting and authoring, Ross is also a public speaker and conducts seminars on Microsoft topics around the world, in which he leverages best practices based on his experiences in the industry.   Chris Amaris, MCSE, CISSP Chris is the chief technology officer and cofounder of Convergent Computing. He has more than 20 years’ experience consulting for Fortune 500 companies, leading companies in the technology selection, design, planning, and implementation of complex information technology projects. Chris has worked with Windows 2008 3 years before its release to the general public. A Certified Information Systems Security Professional (CISSP) with an Information System Security Architecture Professional (ISSAP) concentration, Certified Homeland Security (CHS III), Windows 2003 MCSE, Novell CNE, Banyan CBE, and a Certified Project Manager, Chris is also an author and technical editor for a number of IT books, including Network Security for Government and Corporate Executives, Windows Server 2003 Unleashed, SQL Server 2005 Management and Administration, Exchange Server 2007 Unleashed, and Microsoft Operations Manager 2005 Unleashed. Chris presents on messaging, operations management, security, and information technology topics worldwide.

Introduction xlix

Part I: Windows Server 2008 Overview

1: Windows Server 2008 Technology Primer 3

2: Planning, Prototyping, Migrating, and Deploying Windows Server 2008 Best Practices 39

3: Installing Windows Server 2008 and Server Core 73

Part II: Windows Server 2008 Active Directory

4: Active Directory Domain Services Primer 105

5: Designing a Windows Server 2008 Active Directory 139

6: Designing Organizational Unit and Group Structure 165

7: Active Directory Infrastructure 185

8: Creating Federated Forests and Lightweight Directories 217

9: Integrating Active Directory in a UNIX Environment 235

Part III: Networking Services

10: Domain Name System and IPv6 251

11: DHCP/WINS/Domain Controllers 297

12: Internet Information Services 331

Part IV: Security

13: Server-Level Security 375

14: Transport-Level Security 399

15: Security Policies, Network Policy Server, and Network Access Protection 415

Part V: Migrating to Windows Server 2008

16: Migrating from Windows 2000/2003 to Windows Server 2008 439

17: Compatibility Testing for Windows Server 2008 473

Part VI: Windows Server 2008 Administration and Management

18: Windows Server 2008 Administration 499

19: Windows Server 2008 Group Policies and Policy Management 533

20: Windows Server 2008 Management and Maintenance Practices 581

21: Automating Tasks Using PowerShell Scripting 639

22: Documenting a Windows Server 2008 Environment 685

23: Integrating Systems Center Operations Manager 2007 with Windows Server 2008 715

Part VII: Remote and Mobile Technologies

24: Server-to-Client Remote and Mobile Access 737

25: Terminal Services 783

Part VIII: Desktop Administration

26: Windows Server Administration Tools for Desktops 839

27: Group Policy Management for Network Clients 865

Part IX: Fault Tolerance Technologies

28: File System Management and Fault Tolerance 935

29: System-Level Fault Tolerance (Clustering/Network Load Balancing) 993

30: Backing Up the Windows Server 2008 Environment 1043

31: Recovering from a Disaster 1077

Part X: Optimizing, Tuning, Debugging, and Problem Solving

32: Optimizing Windows Server 2008 for Branch Office Communications 1111

33: Logging and Debugging 1145

34: Capacity Analysis and Performance Optimization 1189

Part XI: Integrated Windows Application Services

35: Windows SharePoint Services 3.0 1233

36: Windows Media Services 1281

37: Deploying and Using Windows Virtualization 1313

Index 1339