MCSA Windows Server 2012 R2 Administration Study Guide E-Book

William Panek

• Herausgeber: John Wiley & Sons
• Kategorie: Wissenschaft und neue Technologien
• Sprache: Englisch

Seitenzahl: 603

Veröffentlichungsjahr: 2015

Beschreibung

Complete exam coverage, hands-on practice, and interactive study tools for the MCSA: Administering Windows Server 2012 R2 exam 70-411 MCSA: Windows Server 2012 R2 Administration Study Guide: Exam 70-411 provides comprehensive preparation for exam 70-411: Administering Windows Server 2012 R2. With full coverage of all exam domains, this guide contains everything you need to know to be fully prepared on test day. Real-world scenarios illustrate the practical applications of the lessons, and hands-on exercises allow you to test yourself against everyday tasks. You get access to an interactive practice test environment that helps you avoid surprises on exam day, plus electronic flashcards and video demonstrations showing how to perform some of the more difficult tasks. Exam 70-411 is one of three exams you must pass to become a Microsoft Certified Solutions Associate (MCSA) on Windows Server 2012 R2 and a clear path to increasing your value and marketability in the workplace. The exam reflects the 2012 update to the OS, including the new enhancements to Hyper-V, Storage Spaces, and Active Directory. This guide gives you the information and practice you need to master all aspects of Windows Server 2012 R2 for test. Learn how to: * Deploy, manage, and maintain servers * Configure file and print servers, network services, and more * Manage and configure Active Directory and Group Policy * Review real-world scenarios, video, and interactive study aids If you're looking to master Windows server administration before the exam, MCSA: Windows Server 2012 R2 Administration Study Guide is a complete and comprehensive prep tool to give you the confidence you need to succeed.

Leseprobe

Contents

Introduction

Assessment Test

Chapter 1: Manage and Maintain Servers

Using Windows Deployment Services

Configuring Windows Server Update Services

Overview of Windows Server 2012 R2 Performance Monitoring

Using Windows Server 2012 R2 Performance Tools

Summary

Exam Essentials

Review Questions

Chapter 2: Manage File Services

Configuring File Server Resource Manager

Configure File and Disk Encryption

Configuring Distributed File System

Implementing an Audit Policy

Making Active Directory Objects Available to Users

Summary

Exam Essentials

Review Questions

Chapter 3: Configure DNS

Introducing DNS

Introducing DNS Database Zones

Advantages of DNS in Windows Server 2012 R2

Introducing DNS Record Types

Configuring DNS

Monitoring and Troubleshooting DNS

Summary

Exam Essentials

Review Questions

Chapter 4: Configure Routing and Remote Access

Overview of Dial-Up Networking

Overview of Virtual Private Networks

Configuring Your Remote Access Server

Understanding a VPN

Configuring a VPN

Managing Your Remote Access Server

Configuring a VPN Client

Configuring a Web Application Proxy

Understanding DirectAccess

Summary

Exam Essentials

Review Questions

Chapter 5: Configure a Network Policy Server Infrastructure

Overview of Wireless Access

Remote Access Security

Configuring User Access

Configuring Security

Summary

Exam Essentials

Review Questions

Chapter 6: Configure and Manage Active Directory

Active Directory Security Overview

Implementing Active Directory Security

Using Group Policy for Security

Managing Multiple Domains

Maintain Active Directory

Summary

Exam Essentials

Review Questions

Chapter 7: Configure and Manage Group Policy

Introducing Group Policy Objects

Planning a Group Policy Strategy

Implementing Group Policy

Managing Group Policy

Deploying Software Through a GPO

Implementing Software Deployment

Configuring Software Deployment Settings

Troubleshooting Group Policies

Summary

Exam Essentials

Review Questions

Appendix A: Answers to Review Questions

Appendix B: About the Additional Study Tools

Free Interactive Online Study Environment

End User License Agreement

List of Illustrations

FIGURE 1.1 Windows Update control panel

FIGURE 1.2 Change Settings window of the Windows Update control panel

FIGURE 1.3 Adding a new Performance Monitor counter

FIGURE 1.4 Viewing information in Performance Monitor Graph view

FIGURE 1.5 Viewing information in Performance Monitor Histogram view

FIGURE 1.6 Viewing information in Performance Monitor Report view

FIGURE 1.7 General tab of the Performance Monitor Properties dialog box

FIGURE 1.8 Source tab of the Performance Monitor Properties dialog box

FIGURE 1.9 The Data tab of the Performance Monitor Properties dialog box

FIGURE 1.10 The Graph tab of the Performance Monitor Properties dialog box

FIGURE 1.11 The Appearance tab of the Performance Monitor Properties dialog box

FIGURE 1.12 Viewing process statistics and information using Task Manager

FIGURE 1.13 Viewing CPU and memory performance information using Task Manager

FIGURE 1.14 Viewing user information using Task Manager

FIGURE 1.15 Viewing applications that are currently running using Task Manager

FIGURE 1.16 Viewing services information using Task Manager

FIGURE 1.17 Event Viewer

FIGURE 1.18 Information, errors, and warnings in Event Viewer

FIGURE 1.19 An Event Properties dialog box

FIGURE 1.20 The applications and services DNS Server log

FIGURE 1.21 Create Custom View dialog box

FIGURE 1.22 Subscription Properties dialog box

FIGURE 2.1 DFS Management console

FIGURE 3.1 HOSTS file

FIGURE 3.2 The DNS hierarchy

FIGURE 3.3 Setting the Dynamic Updates option

FIGURE 3.4 DHCP settings for DNS

FIGURE 3.5 A sample DNS query

FIGURE 3.6 Setting up an Active Directory Integrated zone

FIGURE 3.7 DNS stub zone type

FIGURE 3.8 DNS Notify dialog box

FIGURE 3.9 DNS Zone Transfers tab

FIGURE 3.10 DNS zone replication scope

FIGURE 3.11 The Root Hints tab of the DNS server’s Properties dialog box

FIGURE 3.12 The Start Of Authority (SOA) tab of the zone Properties dialog box

FIGURE 3.13 The Name Servers tab of the zone Properties dialog box

FIGURE 3.14 The Event Logging tab of the server’s Properties dialog box

FIGURE 3.15 The Monitoring tab of the server’s Properties dialog box

FIGURE 3.16 Enabling BIND Secondaries

FIGURE 4.1 Drilling a tunnel through the Internet

FIGURE 4.2 The encapsulation process

FIGURE 4.3 The PPP tab of the RRAS server’s Properties dialog box

FIGURE 4.4 The IPv4 tab of the RRAS server’s Properties dialog box

FIGURE 4.5 The IPv6 tab of the RRAS Server’s Properties dialog box

FIGURE 4.6 VPNs provide private connections between clients and servers across the Internet

FIGURE 4.7 The Configure Device – WAN Miniport (PPTP) dialog box

FIGURE 4.8 The Log File tab

FIGURE 4.9 The Port Status dialog box

FIGURE 4.10 General tab of the VPN Connection Properties dialog box

FIGURE 4.11 Options tab of the VPN Connection Properties dialog box

FIGURE 4.12 Security tab of the VPN Connection Properties dialog box

FIGURE 4.13 Networking tab of the VPN Connection Properties dialog box

FIGURE 4.14 Sharing tab of the VPN Connection Properties dialog box

FIGURE 5.1 The Dial-In tab of the user’s Properties dialog box

FIGURE 5.2 The Launch NPS option in RRAS

FIGURE 5.3 Select Condition dialog box of New Network Policy Wizard

FIGURE 5.4 Authentication Methods settings

FIGURE 5.5 IP Settings pane of the Settings tab

FIGURE 5.6 Encryption pane of the Settings tab of the policy’s Properties dialog box

FIGURE 5.7 The Security tab of the RRAS server’s Properties dialog box

FIGURE 6.1 The New Object – Group dialog box

FIGURE 6.2 The Domain Admins Security Group’s Properties dialog box

FIGURE 6.3 Default built-in local groups

FIGURE 6.4 Contents of the default Users folder

FIGURE 6.5 The ForeignSecurityPrincipals folder

FIGURE 6.6 An overview of security management

FIGURE 6.7 The ACL for an OU named Sales

FIGURE 6.8 The main screen of the Windows Server 2012 Backup utility

FIGURE 6.9 Viewing the Archive attributes for a folder

FIGURE 6.10 Bare Metal Option

FIGURE 7.1 Group Policy configuration options

FIGURE 7.2 Viewing GPO links to an Active Directory OU

FIGURE 7.3 A GPO’s Security Settings dialog box

FIGURE 7.4 Blocking GPO inheritance

FIGURE 7.5 Setting the Enforced GPO option

FIGURE 7.6 Viewing Startup/Shutdown script policy settings

FIGURE 7.7 Setting scripting options

FIGURE 7.8 Viewing Group Policy User network configuration options

FIGURE 7.9 Viewing the properties of an MSI package file

FIGURE 7.10 Deployment tab of the Software Installation Properties dialog box

FIGURE 7.11 Advanced Deployment dialog box

FIGURE 7.12 The Categories tab of the Software Installation Properties dialog box

FIGURE 7.13 Removing a software package

FIGURE 7.14 Software removal options

FIGURE 7.15 GPO settings for Windows Installer

FIGURE 7.16 The Computer Selection page of the Group Policy Results Wizard

FIGURE 7.17 The User Selection page of the Group Policy Results Wizard

FIGURE 7.18 The Summary Of Selections page of the Group Policy Results Wizard

FIGURE 7.19 The User Selection page for the administrator on computer SERVER1

FIGURE 7.20 Details of event pertaining to the administrator account on computer SERVER1

FIGURE 7.21 The Details tab of the object’s Properties window

List of Tables

TABLE 1.1 WDS functionality with Windows Server 2012 R2

TABLE 1.2 WDSUTIL command-line options

TABLE 1.3 WDSUTIL command-line options

TABLE 1.4 Selected registry keys and values for Automatic Updates

TABLE 1.5 mbsacli.exe /hf command-line options

TABLE 2.1 PowerShell commands for FSRM

TABLE 2.2 BitLocker then and now

TABLE 2.3 Using the cipher switches

TABLE 2.4 Auditpol commands

TABLE 3.1 Common top-level DNS domains

TABLE 3.2 The SOA record structure

TABLE 3.3 The NS record structure

TABLE 3.4 The SRV record structure

TABLE 3.5 Command-line options available with the set command

TABLE 3.6 Common nslookup error messages

TABLE 3.7 DNSLint command options

TABLE 3.8 Command-line options available for the ipconfig command

TABLE 3.9 DNSCmd command-line options

TABLE 5.1 Network access policy attributes

TABLE 5.2 Logman switches

TABLE 6.1 Permissions of Active Directory objects

TABLE 6.2 Group Policy settings used for security purposes

TABLE 6.3 Ntdsutil offline maintenance commands

TABLE 6.4 Wbadmin commands

TABLE 7.1 Auditpol.exe switches

TABLE 7.2 GPUpdate.exe switches

TABLE 7.3 gpresult switches

List of Exercises

Exercise 1.1 Installing a WSUS Server

Exercise 1.2 Setting WSUS Server Options

Exercise 1.3 Configuring a GPO for WSUS

Exercise 1.4 Installing SNMP

Exercise 1.5 Configuring SNMP

Exercise 2.1 Enabling BitLocker in Windows Server 2012 R2

Exercise 2.2 Installing the DFS Namespace Service

Exercise 2.3 Enabling Auditing of Active Directory Objects

Exercise 2.4 Generating and Viewing Audit Logs

Exercise 2.5 Creating and Publishing a Shared Network Folder

Exercise 2.6 Configuring Offline Folder Options

Exercise 2.7 Configuring a Shared Network Folder for Offline Access

Exercise 3.1 Installing and Configuring the DNS Service

Exercise 3.2 Configuring a Zone for Dynamic Updates

Exercise 3.3 Creating a Delegated DNS Zone

Exercise 3.4 Manually Creating DNS RRs

Exercise 3.5 Simple DNS Testing

Exercise 3.6 Using the

nslookup

Command

Exercise 3.7 Enabling DHCP-DNS Integration

Exercise 4.1 Installing the Remote Access Role

Exercise 4.2 Changing Remote Access Logging Settings

Exercise 5.1 Creating a Network Access Policy

Exercise 5.2 Restricting a User Profile for Dial-In Access

Exercise 5.3 Configuring Encryption

Exercise 5.4 Creating a VPN Network Access Policy

Exercise 6.1 Creating and Managing Users and Groups

Exercise 6.2 Creating and Using User Templates

Exercise 6.3 Delegating Control of Active Directory Objects

Exercise 6.4 Applying Security Policies by Using Group Policy

Exercise 6.5 Fine-Grained Password Policy

Exercise 6.6 Assigning Single-Master Operations

Exercise 6.7 Backing Up Active Directory

Exercise 7.1 Creating a Group Policy Object Using the GPMC

Exercise 7.2 Linking Existing GPOs to Active Directory

Exercise 7.3 Filtering Group Policy Using Security Groups

Exercise 7.4 Delegating Administrative Control of Group Policy

Exercise 7.5 Configuring Automatic Certificate Enrollment in Group Policy

Exercise 7.6 Configuring Folder Redirection in Group Policy

Exercise 7.7 Creating a Software Deployment Share

Exercise 7.8 Publishing and Assigning Applications Using Group Policy

Exercise 7.9 Applying Software Updates

Pages

iii

iv

v

vi

vii

viii

ix

x

xxi

xxii

xxiii

xxiv

xxv

xxvi

xxvii

xxviii

xxix

xxx

xxxi

xxxii

xxxiii

xxxiv

xxxv

xxxvi

xxxvii

xxxviii

xxxix

xl

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

162

163

164

165

166

167

168

169

170

171

172

173

174

175

176

177

178

179

180

181

182

183

184

185

186

187

188

189

190

191

192

193

194

195

196

197

198

199

200

201

202

203

204

205

206

207

208

209

210

211

212

213

214

215

216

217

218

219

220

221

222

223

224

225

226

227

228

229

230

231

232

233

234

235

236

237

238

239

240

241

242

243

244

245

246

247

248

249

250

251

252

253

254

255

256

257

258

259

260

261

262

263

264

265

266

267

268

269

270

271

272

273

274

275

276

277

278

279

280

281

282

283

284

285

286

287

288

289

290

291

292

293

294

295

296

297

298

299

300

301

302

303

304

305

306

307

308

309

310

311

312

313

314

315

316

317

318

319

320

321

322

323

324

325

326

327

328

329

330

331

332

333

334

335

336

337

338

339

340

341

342

343

344

345

346

347

348

349

350

351

352

353

354

355

356

379

Guide

Cover

Table of Contents

Begin Reading

MCSA Windows Server® 2012 R2

Administration Study GuideExam 70-411

William Panek

Senior Acquisitions Editor: Jeff Kellum

Development Editor: Gary Schwartz

Technical Editors: Rodney Fournier and Michael Rice

Production Editor: Eric Charbonneau

Copy Editor: Kim Wimpsett

Editorial Manager: Pete Gaughan

Production Manager: Kathleen Wisor

Professional Technology and Strategy Director: Barry Pruett

Associate Publisher: Jim Minatel

Media Project Manager 1: Laura Moss-Hollister

Media Associate Producer: Marilyn Hummel

Media Quality Assurance: Josh Frank

Book Designer: Judy Fung

Proofreader: Josh Chase, Word One New York

Indexer: Ted Laux

Project Coordinator, Cover: Patrick Redmond

Cover Designer: Wiley

Copyright © 2015 by John Wiley & Sons, Inc., Indianapolis, Indiana

Published simultaneously in Canada

ISBN: 978-1-118-87018-1

ISBN: 978-1-118-85977-3 (ebk.)

ISBN: 978-1-118-91688-9 (ebk.)

No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning or otherwise, except as permitted under Sections 107 or 108 of the 1976 United States Copyright Act, without either the prior written permission of the Publisher, or authorization through payment of the appropriate per-copy fee to the Copyright Clearance Center, 222 Rosewood Drive, Danvers, MA 01923, [phone], fax [phone]. Requests to the Publisher for permission should be addressed to the Permissions Department, John Wiley & Sons, Inc., 111 River Street, Hoboken, NJ 07030, [phone], fax [phone], or online at www.wiley.com/go/permissions.

Limit of Liability/Disclaimer of Warranty: The publisher and the author make no representations or warranties with respect to the accuracy or completeness of the contents of this work and specifically disclaim all warranties, including without limitation warranties of fitness for a particular purpose. No warranty may be created or extended by sales or promotional materials. The advice and strategies contained herein may not be suitable for every situation. This work is sold with the understanding that the publisher is not engaged in rendering legal, accounting, or other professional services. If professional assistance is required, the services of a competent professional person should be sought. Neither the publisher nor the author shall be liable for damages arising herefrom. The fact that an organization or Web site is referred to in this work as a citation and/or a potential source of further information does not mean that the author or the publisher endorses the information the organization or Web site may provide or recommendations it may make. Further, readers should be aware that Internet Web sites listed in this work may have changed or disappeared between when this work was written and when it is read.

For general information on our other products and services or to obtain technical support, please contact our Customer Care Department within the U.S. at [phone], outside the U.S. at [phone] or fax [phone].

Wiley publishes in a variety of print and electronic formats and by print-on-demand. Some material included with standard print versions of this book may not be included in e-books or in print-on-demand. If this book refers to media such as a CD or DVD that is not included in the version you purchased, you may download this material at http://booksupport.wiley.com. For more information about Wiley products, visit www.wiley.com.

Library of Congress Control Number: XXXXXXXXXX

TRADEMARKS: Wiley, the Wiley logo, and the Sybex logo are trademarks or registered trademarks of John Wiley & Sons, Inc. and/or its affiliates, in the United States and other countries, and may not be used without written permission. Windows Server is a registered trademark of Microsoft Corporation. All other trademarks are the property of their respective owners. John Wiley & Sons, Inc. is not associated with any product or vendor mentioned in this book.

This book is dedicated to the three ladies of my life: Crystal, Alexandria, and Paige.

Acknowledgments

I would like to thank my wife and best friend, Crystal. She is always the light at the end of my tunnel. I want to thank my two daughters, Alexandria and Paige, for all of their love and support during the writing of all my books. They make it all worthwhile.

I want to thank my family, and especially my brothers, Rick, Gary, and Rob. They have always been there for me. I want to thank my father, Richard, who helped me become the man I am today, and my mother, Maggie, for all of her love and support.

I would like to thank all of my friends and co-workers especially Vic, Catherine, Jeff, Stephanie, Don, Jason, Doug, Dave, Steve, Pat, Mike (all of them), Tommy, George, Greg, Becca, Deb, Jeri, Lisa, Scotty, and all of the field guys. I want to also thank my team and everyone who works with my group including Moe, Jimmy, Paul, Dana, Dean, Reanna, Todd, and Will F. Because of all your hard work, you make me look good every day and make it a pleasure to go to work. Thanks to all of you for everything you do.

I want to thank everyone on my Sybex team, especially my development editor, Gary Schwartz, who helped me make this the best book possible, and Rodney R. Fournier, who is the technical editor of many of my books. It’s always good to have the very best technical guy backing you up.

I want to thank Eric Charbonneau, who was my production editor, and my acquisitions editor, Jeff Kellum, who served as lead for the entire book. He has always been there for me, and it is always great to write for him.

Finally, I want to thank everyone else behind the scenes that helped make this book possible. It’s truly an amazing thing to have so many people work on my books to help make them the very best. I can’t thank you all enough for your hard work.

About the Author

William Panek holds the following certifications: MCP, MCP+I, MCSA, MCSA+ Security and Messaging, MCSE-NT (3.51 and 4.0), MCSE 2000, 2003, 2012/2012 R2, MCSE+Security and Messaging, MCDBA, MCT, MCTS, MCITP, CCNA, CCDA, and CHFI. Will is also a Microsoft MVP.

After many successful years in the computer industry and a degree in computer programming, Will decided that he could better use his talents and his personality as an instructor. He began teaching for schools such as Boston University and the University of Maryland, just to name a few. He has done consulting and training work for some of the biggest government and corporate companies in the world including the U.S. Secret Service, Cisco, the U.S. Air Force, and the U.S. Army.

In January 2015, Will is now teaching for StormWind (www.stormwind.com). He currently lives in New Hampshire with his wife and two daughters. Will was also a representative in the New Hampshire House of Representatives from 2010 to 2012. In his spare time, he likes to golf, ski, shoot, snowmobiling, and ride his Harley. Will is also a commercially rated helicopter pilot.

Introduction

This book is drawn from more than 20 years of IT experience. I have taken that experience and translated it into a Windows Server 2012 R2 book that will help you not only prepare for the MCSA: Windows Server 2012 R2 exams but also develop a clear understanding of how to install and configure Windows Server 2012 R2 while avoiding all of the possible configuration pitfalls.