MCSA Windows Server 2012 R2 Configuring Advanced Services Study Guide E-Book

William Panek

• Herausgeber: John Wiley & Sons
• Kategorie: Wissenschaft und neue Technologien
• Sprache: Englisch

Veröffentlichungsjahr: 2015

Beschreibung

The bestselling MCSA study guide, with expert instruction and hands-on practice

MCSA Windows Server 2012 R2 Configuring Advanced Services Study Guide provides focused preparation for exam 70-412 and is fully updated to align with the latest Windows Server 2012 R2 objectives. This comprehensive guide covers 100 percent of all exam objective domains, and includes hundreds of practice questions and answers. You get access to video demonstrations, electronic flashcards, and practice exams, and hands-on exercises based on real-world scenarios allow you to apply your skills to everyday tasks. Organized by objective, each chapter includes review questions and a list of Exam Essentials that help you judge your level of preparedness every step of the way.

Exam 70-412: Configuring Advanced Windows Server 2012 Services is the third and final exam in the MCSA certification series, and was recently updated to cover Server R2. Additions include enhancements to Hyper-V, Storage Spaces, and Active Directory, so it's crucial that your study guide be up to date as well. This book covers the entire exam, including the new information, with expert instruction and easy-to-follow explanation that helps you to:

• Configure network services, high availability, information protection, and more
• Implement business continuity and disaster recovery solutions
• Get hands-on practice in real-world scenarios

Pass this one last exam and you become a Microsoft Certified Solutions Associate – someone with trusted, demonstrated expertise in the server software with over 83 percent market share. Businesses rely on Windows Server, and the people who understand them are in demand. Thorough preparation is the key to exam success, and MCSA Windows Server 2012 R2 Configuring Advanced Services Study Guide provides all the information you need to know.

Leseprobe

Contents

Introduction

Assessment Test

Chapter 1: Configure and Manage High Availability

Components of High Availability

Achieving High Availability

Configure Network Load Balancing

Achieving High Availability with Failover Clustering

Windows Server 2012 R2 Clustering Features

Summary

Exam Essentials

Review Questions

Chapter 2: Configure File and Storage Solutions

Configure Advanced File Services

Implement Dynamic Access Control

Configure and Optimize Storage

Summary

Exam Essentials

Review Questions

Chapter 3: Implement Business Continuity and Disaster Recovery

Protecting the System

Backup and Recovery of Active Directory

Understanding Shadow Copies

Using Advanced Boot Options

Configure Site-Level Fault Tolerance

Using the Startup Repair Tool

Summary

Exam Essentials

Review Questions

Chapter 4: Configure Advanced Network Services

Working with Advanced DHCP Configuration Options

The Ins and Outs of DNS

IPAM Administration 101

Summary

Exam Essentials

Review Questions

Chapter 5: Configure the Active Directory Infrastructure

Overview of Network Planning

Overview of Active Directory Replication and Sites

Implementing Sites and Subnets

Configuring Replication

Monitoring and Troubleshooting Active Directory Replication

Reasons for Creating Multiple Domains

Creating Domain Trees and Forests

Demoting a Domain Controller

Managing Multiple Domains

Summary

Exam Essentials

Review Questions

Chapter 6: Configure Access and Information Protection Solutions

What’s New in Windows Server 2012 R2 with Active Directory Certificate Services?

Implement Active Directory Federation Services

Workplace Join

Active Directory Rights Management Services

Summary

Exam Essentials

Review Questions

Appendix A: Answers to Review Questions

Appendix B: About the Additional Study Tools

Free Interactive Online Study Environment

End User License Agreement

List of Illustrations

Figure 1.1 Using Failover Clustering to cluster SQL Server

Figure 1.2 Failing the SQL Server service to another node

Figure 1.3 Majority needed

Figure 1.4 The Validate A Configuration Wizard

Figure 1.5 Validate A Configuration Wizard results

Figure 1.6 High availability roles

Figure 1.7 Configuring a generic application

Figure 1.8 Clustered application failover settings

Figure 1.9 Resource dependencies

Figure 1.10 Resource policies

Figure 1.11 Resource Advanced Policies

Figure 3.1 The main screen of the Windows Server 2012 R2 Backup utility

Figure 3.2 Viewing the archive attributes for a folder

Figure 3.3 Bare Metal Recovery option

Figure 3.4 vssadmin.exe command-line utility

Figure 3.5 Advanced Boot Options screen

Figure 3.6 Ntbtlog.txt file

Figure 3.7 Hyper-V settings

Figure 4.1 General tab of the Multicast Scope Properties dialog box

Figure 4.2 Lifetime tab of the Multicast Scope Properties dialog box

Figure 4.3 DNS Server Event Viewer log

Figure 4.4 IPAM event catalog

Figure 4.5 IPAM Access Control

Figure 5.1 Potential relationships between domains and sites

Figure 5.2 Using a bridgehead server

Figure 5.3 Active Directory replication objects

Figure 5.4 Configuring intersite replication schedules

Figure 5.5 An example of site links and site link bridges

Figure 5.6 Creating a new Active Directory Domain Services connection

Figure 5.7 Choosing a new site for a specific server

Figure 5.8 A replication scenario using bridgehead servers

Figure 5.9 Specifying a bridgehead server

Figure 5.10 Enabling the global catalog on an Active Directory domain controller

Figure 5.11 A domain tree

Figure 5.12 A single forest consisting of multiple trees

Figure 5.13 Default trusts in an Active Directory forest

Figure 5.14 Example of a forest

Figure 6.1 Cryptography for CA screen

Figure 6.2 Two-tier PKI hierarchy model

Figure 6.3 Specifying the name of the CA

Figure 6.4 Request Handling tab of the Certificate Templates Management console

Figure 6.5 Alert for role services eligible for deployment in Server Manager

Figure 6.6 Active Directory Federation Certificate Console screen

Figure 6.7 AD FS claim descriptions

Figure 6.8 Adding a claim description

Figure 6.9 Claim transformation claim rule

Figure 6.10 Editing the claims rules

List of Tables

Table 1.1 Availability percentages

Table 2.1 PowerShell cmdlets for BranchCache

Table 2.2 PowerShell commands for FSRM

Table 2.3 Auditpol commands

Table 3.1 Ntdsutil offline maintenance commands

Table 3.2 Wbadmin commands

Table 3.3 Vssadmin.exe commands

Table 5.1 Repadmin commands

Table 5.2 Supported domain controller in-place upgrade paths

Table 6.1 AD CS roles

Table 6.2 AD CS maximum validity periods

Table 6.3 AD FS Endpoints

Table 6.4 AD FS Security Modes

Table 6.5 SAML-supported authentication methods

Table 6.6 Support upgrade matrix for the AD FS role in Windows Server 2012 R2

Table 6.7 Federation Metadata Fields

Table 6.8 Transform claims rule templates

Table 6.9 Description of rights in RMS templates

List of Exercises

Exercise 1.1 Installing NLB Nodes

Exercise 1.2 Installing the Failover Cluster Feature

Exercise 1.3 Running the Validate A Configuration Wizard

Exercise 1.4 Creating a Cluster

Exercise 1.5 Clustering the Print Services Role

Exercise 1.6 Using the Dependency Viewer

Exercise 2.1 Configure the NFS Data Store

Exercise 2.2 Configuring BranchCache Firewall Exceptions

Exercise 2.3 Installing BranchCache on Windows Server 2012 R2

Exercise 2.4 Enabling Auditing of Active Directory Objects

Exercise 2.5 Generating and Viewing Audit Logs

Exercise 2.6 Enable Dynamic Access Control

Exercise 2.7 Configure User and Device Claim Types

Exercise 2.8 Create and Configure Resource Properties and Lists

Exercise 2.9 Create and Configure Central Access Rules and Policies

Exercise 2.10 Configure File Classification

Exercise 2.11 Implement Policy Stages and Staging

Exercise 2.12 Configure Access-Denied Assistance

Exercise 2.13 Configuring iSCSI Storage Connection

Exercise 2.14 Installing the iSNS Feature on Windows Server 2012 R2

Exercise 3.1 Backing Up Active Directory

Exercise 3.2 Configuring a Shadow Copy on a Volume

Exercise 3.3 Booting Your Computer to Safe Mode

Exercise 3.4 Using Boot Logging

Exercise 4.1 Creating a Superscope

Exercise 4.2 Creating and Activating a New Multicast Scope

Exercise 4.3 Creating and Activating a New DHCPv6 Scope

Exercise 4.4 Configuring DHCP Failover

Exercise 4.5 Configuring DHCP Filtering

Exercise 4.6 Enabling DHCP Name Protection

Exercise 4.7 Disabling Dynamic Updates

Exercise 4.8 Configuring DNSSEC

Exercise 4.9 Enabling DNS Diagnostic Logging

Exercise 4.10 Disabling DNS Recursion

Exercise 4.11 Configuring a GlobalNames Zone

Exercise 4.12 Installing the IPAM Feature

Exercise 4.13 Configuring IPAM Server Discovery

Exercise 4.14 Manually Add IPAM IP Address Space

Exercise 5.1 Creating Sites

Exercise 5.2 Creating Subnets

Exercise 5.3 Configuring Sites

Exercise 5.4 Creating Site Links and Site Link Bridges

Exercise 5.5 Moving Server Objects Between Sites

Exercise 5.6 Creating a New Subdomain

Exercise 5.7 Assigning Single-Master Operations

Exercise 5.8 Managing Trust Relationships

Exercise 5.9 Adding a UPN Suffix

Exercise 5.10 Managing GC Servers

Exercise 5.11 Managing Universal Group Membership Caching

Exercise 6.1 Installing AD CS Through Server Manager

Exercise 6.2 Configuring AD CS Through Server Manager

Exercise 6.3 Configure an Auto-enrollment Group Policy for a Domain

Exercise 6.4 Creating a Certificate Template

Exercise 6.5 Publishing a Certificate Template

Exercise 6.6 Revoking a Certificate

Exercise 6.7 Configuring CA Policy Auditing

Exercise 6.8 Backing Up the Certificate Authority Server

Exercise 6.9 Installing the AD FS Role on a Computer Using Server Manager

Exercise 6.10 Configuring the AD FS Role on the Computer Using Server Manager

Exercise 6.11 Configuring Multifactor Authentication

Exercise 6.12 Workplace Joining a Device

Exercise 6.13 Installing an AD RMS Role on the Local Computer Using Server Manager

Exercise 6.14 Backing Up an AD RMS Database

Exercise 6.15 Adding a Trusted User Domain

Exercise 6.16 Exporting the Trusted User Domain

Exercise 6.17 Exporting the Trusted Publishing Domain

Exercise 6.18 Adding the Trusted Publishing Domain

Pages

iii

iv

v

vi

vii

viii

ix

x

xxi

xxii

xxiii

xxiv

xxv

xxvi

xxvii

xxviii

xxix

xxx

xxxi

xxxii

xxxiii

lxx

xxxiv

lxxi

xxxv

lxxii

xxxvi

lxxiii

xxxvii

lxxiv

xxxviii

lxxv

xxxix

xl

xli

lxxxii

xlii

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

162

163

164

165

166

167

168

169

170

171

172

173

174

175

176

177

178

179

180

181

182

183

184

185

186

187

188

189

190

191

192

193

194

195

196

197

198

199

200

201

202

203

204

205

206

207

208

209

210

211

212

213

214

215

216

217

218

219

220

221

222

223

224

225

226

227

228

229

230

231

232

233

234

235

236

237

238

239

240

241

242

243

244

245

246

247

248

249

250

251

252

253

254

255

256

257

258

259

260

261

262

263

264

265

266

267

268

269

270

271

272

273

274

275

276

277

278

279

280

281

282

283

284

285

286

287

288

289

290

291

292

293

294

295

296

297

298

299

300

301

302

391

Guide

Cover

Table of Contents

Begin Reading

MCSA: Windows Server® 2012 R2

Configuring Advanced Services Study GuideExam 70-412

William Panek

Senior Acquisitions Editor: Jeff Kellum

Development Editor: Gary Schwartz

Technical Editors: Rodney Fournier and Michael Rice

Production Editor: Eric Charbonneau

Copy Editor: Kim Wimpsett

Editorial Manager: Pete Gaughan

Production Manager: Kathleen Wisor

Professional Technology and Strategy Director: Barry Pruett

Associate Publisher: Jim Minatel

Media Project Manager 1: Laura Moss-Hollister

Media Associate Producer: Marilyn Hummel

Media Quality Assurance: Josh Frank

Book Designer: Judy Fung

Proofreader: Josh Chase, Word One New York

Indexer: Ted Laux

Project Coordinator, Cover: Patrick Redmond

Cover Designer: Wiley

Copyright © 2015 by John Wiley & Sons, Inc., Indianapolis, Indiana

Published simultaneously in Canada

ISBN: 978-1-118-87012-9

ISBN: 978-1-118-85986-5 (ebk.)

ISBN: 978-1-118-91689-6 (ebk.)

No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning or otherwise, except as permitted under Sections 107 or 108 of the 1976 United States Copyright Act, without either the prior written permission of the Publisher, or authorization through payment of the appropriate per-copy fee to the Copyright Clearance Center, 222 Rosewood Drive, Danvers, MA 01923, [phone], fax [phone]. Requests to the Publisher for permission should be addressed to the Permissions Department, John Wiley & Sons, Inc., 111 River Street, Hoboken, NJ 07030, [phone], fax [phone], or online at www.wiley.com/go/permissions.

Limit of Liability/Disclaimer of Warranty: The publisher and the author make no representations or warranties with respect to the accuracy or completeness of the contents of this work and specifically disclaim all warranties, including without limitation warranties of fitness for a particular purpose. No warranty may be created or extended by sales or promotional materials. The advice and strategies contained herein may not be suitable for every situation. This work is sold with the understanding that the publisher is not engaged in rendering legal, accounting, or other professional services. If professional assistance is required, the services of a competent professional person should be sought. Neither the publisher nor the author shall be liable for damages arising herefrom. The fact that an organization or Web site is referred to in this work as a citation and/or a potential source of further information does not mean that the author or the publisher endorses the information the organization or Web site may provide or recommendations it may make. Further, readers should be aware that Internet Web sites listed in this work may have changed or disappeared between when this work was written and when it is read.

For general information on our other products and services or to obtain technical support, please contact our Customer Care Department within the U.S. at [phone], outside the U.S. at [phone] or fax [phone].

Wiley publishes in a variety of print and electronic formats and by print-on-demand. Some material included with standard print versions of this book may not be included in e-books or in print-on-demand. If this book refers to media such as a CD or DVD that is not included in the version you purchased, you may download this material at http://booksupport.wiley.com. For more information about Wiley products, visit www.wiley.com.

Library of Congress Control Number: XXXXXXXXXX

TRADEMARKS: Wiley, the Wiley logo, and the Sybex logo are trademarks or registered trademarks of John Wiley & Sons, Inc. and/or its affiliates, in the United States and other countries, and may not be used without written permission. Windows Server is a registered trademark of Microsoft Corporation. All other trademarks are the property of their respective owners. John Wiley & Sons, Inc. is not associated with any product or vendor mentioned in this book.

This book is dedicated to the three ladies of my life: Crystal, Alexandria, and Paige.

—Crystal, Alexandria, and Paige.

Acknowledgments

I would like to thank my wife and best friend, Crystal. She is always the light at the end of my tunnel. I want to thank my two daughters, Alexandria and Paige, for all of their love and support during the writing of all my books. They make it all worthwhile.

I want to thank my family, especially my brothers, Rick, Gary, and Rob. They have always been there for me. I want to thank my father, Richard, who helped me become the man I am today, and my mother, Maggie, for all of her love and support.

I would like to thank all of my friends and co-workers, especially Vic, Catherine, Jeff, Stephanie, Don, Jason, Doug, Dave, Steve, Pat, Mike (all of them), Tommy, George, Greg, Becca, Deb, Jeri, Lisa, Scotty, and all of the field guys. I want to also thank my team and everyone who works with my group including Moe, Jimmy, Paul, Dana, Dean, Reanna, Todd, and Will F. Because of all of your hard work, you make me look good every day and make it a pleasure to go to work. Thanks to all of you for everything that you do.

I want to thank everyone on my Sybex team, especially my development editor, Gary Schwartz, who helped me make this the best book possible, and Rodney R. Fournier, who is the technical editor of many of my books. It’s always good to have the very best technical guy backing you up.

I want to thank three excellent Microsoft engineers who helped me finish the third part of this book; Mike Rice, Winston McMiller, and Jeff Stokes. Thanks for your help and dedication to make this a great book.

I want to thank Eric Charbonneau, who was my production editor, and Jeff Kellum, my acquisitions editor, who served as lead for the entire book. He has always been there for me, and it is always great to write for him.

Finally, I want to thank everyone else behind the scenes who helped make this book possible. It’s truly an amazing thing to have so many people work on my books to help make them the very best. I can’t thank you all enough for your hard work.

About the Authors

William Panek holds the following certifications: MCP, MCP+I, MCSA, MCSA+ Security and Messaging, MCSE-NT (3.51 and 4.0), MCSE 2000, 2003, 2012/2012 R2, MCSE+Security and Messaging, MCDBA, MCT, MCTS, MCITP, CCNA, CCDA, and CHFI. Will is also a Microsoft MVP.

After many successful years in the computer industry and a degree in computer programming, Will decided that he could better use his talents and his personality as an instructor. He began teaching for schools such as Boston University and the University of Maryland, just to name a few. He has done consulting and training work for some of the biggest government and corporate companies in the world including the U.S. Secret Service, Cisco, the U.S. Air Force, and the U.S. Army.

In January 2015, Will is now teaching for StormWind (www.stormwind.com).

He currently lives in New Hampshire with his wife and two daughters. Will was also a U.S. Representative in the New Hampshire House of Representatives from 2010 to 2012. In his spare time, he likes to golf, ski, shoot, snowmobile, and ride his Harley. Will is also a commercially rated helicopter pilot.

Michael Allen Rice holds these certifications: MCP, MCTS, MCSA, MCSE, MCITP, CompTIA Network+, CompTIA Security+, VMware Certified Professional 5 - DCV, and NetApp Certified Data Management Administrator 7-mode.

Michael currently works as a Data Center Administrator for Intelligent Software Solutions Inc., based in Colorado Springs. He lives there with his wife and two children. He specializes in leading the way for corporate infrastructure in the areas of virtualization, storage, and systems administration. Over the past decade as an IT Professional, Michael has received numerous awards for his outstanding performance and dedication to excellence within the IT Community.

Winston McMiller holds these certifications: MCP, MCP+I, MCSA, MCSE 2000, 2003, 2012/2012 R2, and ITIL. Winston is a Microsoft Premier Field Engineer.

After 18 years in the computer industry and a degree in Information Technology, Winston has done consulting and training for some of the largest companies in the world including the General Electric, HP Enterprise services, Chrysler, and IBM.

He currently lives in the Seattle area. In his spare time, he likes to ski, do photography, and travel. He is an avid audiophile and songwriter.

Jeff Stokes holds these certifications: MCT, MCSA, MCSE 2003, and MCTS: Windows Internals. Jeff Stokes runs @WindowsPerf, a Windows Performance social networking property. He is a frequent guest on RunAsRadio and an avid blogger.

As a previous Premier Field Engineer at Microsoft, Jeff has worked in the Fortune 1000 space for the last eight years. After 21 years in the IT field, Jeff Stokes has established himself as a performance SME and a VDI pioneer in Microsoft technologies, including Windows optimization as a VDI guest. His work appears in VDI optimization guidance papers from Microsoft and other parties.

He currently lives in the Atlanta area. In his spare time, he analyzes performance traces, games, and mentors others in the IT field.