Real MCTS/MCITP Exam 70-646 Prep Kit (eBook)

Front Cover 1
The Real MCITP Exam 646 Windows Server 2008 server Administrator Prep Kit 4
Copyright Page 5
Technical Editor 6
Contributing Authors 7
Contents 10
Foreword 18
What Is Professional Series Exam 70–646? 18
Path to MCTS/MCITP/MS Certified Architect 19
Prerequisites and Preparation 21
Exam Day Experience 22
Exam Format 22
Test-Taking Tips 23
Pedagogical Elements 25
Additional Resources 27
Chapter 1: Planning for Server Deployment 28
Introduction 29
Planning for Installation or Upgrade 29
Selecting a Windows 2008 Edition 30
Rollback Planning 32
Implementing BitLocker 37
Planning for Infrastructure Services 38
Address Assignment 39
Name Resolution (DNS) 47
DNS Zones 49
Reverse Zones 50
Planning For Global Naming Zones 50
DNS Records 51
Planning for Dynamic DNS (DDNS) 53
Scavenging 53
Planning For DNS Forwarding 53
Network Access Protection 54
Planning for NAP Enforcement Methods 54
Planning For DHCP NAP Enforcement 56
Planning For IPSec NAP Enforcement 56
Planning For 802.1x NAP Enforcement 57
Planning For VPN NAP Enforcement 57
Planning for NAP Servers 58
Health Policy Servers 58
Health Requirement Servers 58
Health Registration Authority Servers 58
Planning for NAP Clients 59
Directory Services 59
Planning Forests and Domains 60
Planning Domain Controller Placement 62
Planning Active Directory Sites and Site Links 63
Planning Organizational Unit Design 65
Delegating Authority to Organizational Units 66
Planning for Automated Server Deployment 69
Standard Server Image 80
Automation and Scheduling 81
Certificate Services 81
Introduction to Public Key Infrastructure 81
Planning Certificate Servers 82
Planning Root, Subordinate, and Intermediate Certificate Authorities 83
Planning Application Services 84
Planning for Web Applications 84
Web Farms and Web Site Availability 84
IIS Authentication Methods 85
IIS Delegation and Remote Administration 85
IIS 7 Core Server 86
FTP, POP3, and SMTP 86
Windows SharePoint Services 3.0 86
Planning for Virtualization 87
Planning for Availability 88
Resilience 88
Accessibility 89
Planning for File and Print Services 89
Working with Access Permissions 89
Share Level Permissions vs File/Folder Permissions 89
Providing Access to Users and Groups 90
Allow and Deny 91
Storage Quotas 96
Planning for Replication 96
Indexing Files 97
Storage Policies 97
Understanding Availability Options 98
File and Print Server Clustering 98
Publishing Printers 100
Summary of Exam Objectives 101
Exam Objectives Fast Track 101
Planning for Installation and Upgrade 101
Planning for Automated Server Deployment 101
Exam Objectives Frequently Asked Questions 103
Self Test 104
Self Test Quick Answer Key 108
Chapter 2: Planning for Server Management 110
Introduction 111
Developing a Management Strategy 111
Remote Administration 112
Remote Desktop 114
Server Management Technologies 118
Windows Powershell 118
Windows Deployment Services (WDS) 119
Windows Reliability and Performance Monitor 119
Server Manager 120
ServerManagerCMD 125
Delegating Administration 126
Delegating Authority 127
Delegating Active Directory Objects 129
Application Management 130
Planning a Group Policy Strategy 134
Understanding Group Policy 136
Types of Group Policies 136
Local Group Policy 137
Non-Local Group Policy Objects 140
Preferences 146
Network Location Awareness 149
User 150
Computer 151
Planning for GPOs 152
Site, Domain, and OU Hierarchy 153
Group Policy Processing Priority 155
Creating and Linking Group Policy Objects 157
Creating Stand-Alone GPOs 158
Linking Existing GPOs 158
Creating and Linking at One Time 160
Controlling Application of Group Policies 161
Enforce 161
Block Inheritance 165
GPO Backup and Recovery 167
Troubleshooting 167
Group Policy Results and Group Policy Modeling 168
Summary of Exam Objectives 175
Exam Objectives Fast Track 176
Developing a Management Strategy 176
Delegating Administration 176
Planning a Group Policy Strategy 177
Creating and Linking Group Policy Objects 177
Controlling Application of Group Policies 177
Exam Objectives Frequently Asked Questions 178
Self Test 180
Self Test Quick Answer Key 187
Chapter 3: Monitoring and Maintaining Servers 188
Introduction 189
Patch Management 189
OS Level Patch Management 191
Windows Server Update Service 193
WSUS 3.0 SP1 Deployment on Microsoft Windows 2008 Server 196
Microsoft WSUS 3.0 Service Pack 1 Administration Console 210
Configure Microsoft WSUS 3.0 Service Pack 1 Automatic Updates for Clients 216
Application Patching 223
Monitoring for Performance 226
Monitoring Servers 229
Optimization 235
Event and Service Management 244
Trending and Baseline Analysis 247
Summary of Exam Objectives 250
Exam Objectives Fast Track 252
Exam Objectives Frequently Asked Questions 253
Self Test 255
Self Test Quick Answer Key 258
Chapter 4: Security and Policies 260
Introduction 261
Remote Access Security 262
Installing and Configuring NPAS 264
Routing and Remote Access Service 264
Network Interfaces 269
Remote Access Clients 270
Ports 271
PPTP 271
L2TP/IPsec 274
SSTP 274
Network Access Protection 275
Working with NAP 276
Network Layer Protection 276
NAP Clients 277
NAP Enforcement Points 278
Active Directory Domain Services 279
NAP Health Policy Server 279
Health Requirement Server 281
Restricted Network 281
Software Policy Validation 282
Server Security 283
Windows Firewall Management 284
Working with Built-in Firewall Exceptions 288
Creating Manual Firewall Exceptions 290
Advanced Configuration of the Windows Firewall 294
Modifying IPsec Defaults 297
Key Exchange (Main Mode) 299
Data Protection (Quick Mode) 300
Authentication Method 301
Creating Connection Security Rules 306
Configuring a Server-to-Server Connection Security Rule 311
Creating Firewall Rules 312
Monitoring the Windows Firewall 317
Data Security 318
BitLocker 319
Encrypted File System 321
Auditing 322
Auditing AD DS and LDS 323
Event Log 325
Summary of Exam Objectives 327
Exam Objectives Fast Track 328
Exam Objectives Frequently Asked Questions 330
Self Test 332
Self Test Quick Answer Key 335
Chapter 5: Planning for Server Virtualization 336
Introduction 337
Understanding Virtualization 337
Server Consolidation 340
Quality Assurance and Development Testing Environments 341
Disaster Recovery 344
Microkernelized vs. Monolithic Hypervisor 345
Monolithic Hypervisor 345
Microkernel Hypervisor 347
Detailed Architecture 348
Parent Partition 350
Child Partitions 352
Guest Operating Systems 352
Guest with Enlightened Operating System 352
Guest with Partially Enlightened Operating System 353
Legacy Guest 353
Application Compatibility 353
Microsoft Server Virtualization 354
Hyper-V 357
Configuration 358
Installing the Virtualization Role on Windows Server 2008 359
Configuring Virtual Servers with Hyper-V 371
Server Core 381
Competition Comparison 383
Server Placement 385
System Center Virtual Machine Manager 2007 387
Virtual Machine Manager Administrator Console 389
Windows PowerShell Command-Line Interface 391
System Center Virtual Machine Manager Self Service Web Portal 391
Virtual Machine Manager Library 392
Migration Support Functionality 393
Virtual Machine Creation Process Using SCVMM 394
Managing Servers 395
Stand-Alone Virtualization Management Console 396
Managing Applications 397
Managing VMware 401
Summary of Exam Objectives 403
Exam Objectives Fast Track 404
Exam Objectives Frequently Asked Questions 408
Self Test 411
Self Test Quick Answer Key 414
Chapter 6: Application and Data Provisioning 416
Introduction 417
Provisioning Applications 418
Terminal Server Infrastructure 418
Terminal Server Licensing 418
Terminal Services Gateway Server 429
Terminal Services Session Broker 436
Terminal Services RemoteApp 440
Resource Allocation 446
Microsoft Windows System Resource Manager 447
Application Virtualization 451
Microsoft SoftGrid Application Virtualization 452
System Center Configuration Manager 2007 453
Introduction to SCCM 454
Hardware Inventory 463
Software Inventory 466
Application Management and Deployment 470
OS Deployment 473
Provisioning Data 474
Working with Shared Resources 474
Offline Data Access 476
Summary of Exam Objectives 479
Exam Objectives Fast Track 481
Exam Objectives Frequently Asked Questions 483
Self Test 485
Self Test Quick Answer Key 488
Chapter 7: Planning for Business Continuity and High Availability 490
Introduction 491
Planning for Storage Requirements 492
Self Healing NTFS 493
Multipath I/O (MPIO) 494
Data Management 495
Share and Storage Management Console 495
Storage Explorer 496
Storage Manager for SANs Console 497
Data Security 498
Group Policy Control over Removable Media 498
BitLocker Drive Encryption 499
BitLocker Volume Recovery 501
BitLocker Management Options 501
Using BitLocker for the Safe Decommissioning of Hardware 502
Data Collaboration 503
Planning for High Availability 508
Failover Clustering 508
Architectural Details of Windows 2008 Failover Clustering 509
Multi-Site Clusters 525
Service Redundancy 526
Service Availability 528
Data Accessibility and Redundancy 528
Failover Clustering 529
Prerequisites 529
Distributed File System 530
Virtualization and High Availability 531
Planning for Backup and Recovery 532
Data Recovery Strategies 547
Server Recovery 548
WinRE Recovery Environment Bare Metal Restore 549
Command Line Bare Metal Restore 550
Recovering Directory Services 550
Backup Methods for Directory Services 550
Backup Types for Directory Services 551
Recovery Methods for Directory Services 551
Directory Services Restore Mode Recovery 551
Non-Authoritative Restore 552
Authoritative Restore 554
Object Level Recovery 554
Summary of Exam Objectives 562
Exam Objectives Fast Track 562
Exam Objectives Frequently Asked Questions 567
Self Test 570
Self Test Quick Answer Key 573
Appendix: Self Test Appendix 574
Chapter 1: Planning for Server Deployment 575
Chapter 2: Planning for Server Management 580
Chapter 3: Monitoring and Maintaining Servers 591
Chapter 4: Security and Policies 595
Chapter 5: Planning for Server Virtualization 599
Chapter 6: Application and Data Provisioning 604
Chapter 7: Planning for Business Continuity and High Availability 609
Index 616