MCSA windows server complete stud guide

Contents at a GlanceIntroduction xxxix Part I Exam 70-410: Installing and Configuring Windows Server 2012 R2 1 Chapter 3 Plan and Install Active Directory 165 Chapter 4 Configure Wind

Senior Acquisitions Editor: Jeff Kellum

Development Editor: Gary Schwartz

Technical Editors: Rodney Fournier and Michael Rice

Production Editor: Eric Charbonneau

Copy Editor: Kim Wimpsett

Editorial Manager: Pete Gaughan

Production Manager: Kathleen Wisor

Professional Technology and Strategy Director: Barry Pruett

Associate Publisher: Jim Minatel

Media Project Manager 1: Laura Moss-Hollister

Media Associate Producer: Marilyn Hummel

Media Quality Assurance: Josh Frank

Book Designer: Judy Fung

Proofreader: Josh Chase, Word One New York

Indexer: Ted Laux

Project Coordinator, Cover: Patrick Redmond

Cover Designer: Wiley

Copyright © 2015 by John Wiley & Sons, Inc., Indianapolis, Indiana

Published simultaneously in Canada

ISBN: 978-1-118-85991-9

ISBN: 978-1-118-85969-8 (ebk.)

ISBN: 978-1-118-85990-2 (ebk.)

No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by

any means, electronic, mechanical, photocopying, recording, scanning or otherwise, except as permitted under

Sections 107 or 108 of the 1976 United States Copyright Act, without either the prior written permission of the

Publisher, or authorization through payment of the appropriate per-copy fee to the Copyright Clearance Center,

222 Rosewood Drive, Danvers, MA 01923, (978) 750-8400, fax (978) 646-8600 Requests to the Publisher

for permission should be addressed to the Permissions Department, John Wiley & Sons, Inc., 111 River Street,

Hoboken, NJ 07030, (201) 748-6011, fax (201) 748-6008, or online at www.wiley.com/go/permissions.

Limit of Liability/Disclaimer of Warranty: The publisher and the author make no representations or warranties

with respect to the accuracy or completeness of the contents of this work and specifically disclaim all warranties,

including without limitation warranties of fitness for a particular purpose No warranty may be created or

extended by sales or promotional materials The advice and strategies contained herein may not be suitable for

every situation This work is sold with the understanding that the publisher is not engaged in rendering legal,

accounting, or other professional services If professional assistance is required, the services of a competent

professional person should be sought Neither the publisher nor the author shall be liable for damages arising

herefrom The fact that an organization or Web site is referred to in this work as a citation and/or a potential

source of further information does not mean that the author or the publisher endorses the information the

organization or Web site may provide or recommendations it may make Further, readers should be aware that

Internet Web sites listed in this work may have changed or disappeared between when this work was written and

when it is read.

For general information on our other products and services or to obtain technical support, please contact our

Customer Care Department within the U.S at (877) 762-2974, outside the U.S at (317) 572-3993 or fax (317)

572-4002.

Wiley publishes in a variety of print and electronic formats and by print-on-demand Some material included with

standard print versions of this book may not be included in e-books or in print-on-demand If this book refers to

media such as a CD or DVD that is not included in the version you purchased, you may download this material at

http://booksupport.wiley.com For more information about Wiley products, visit www.wiley.com.

Library of Congress Control Number: 2014948559

TRADEMARKS: Wiley, the Wiley logo, and the Sybex logo are trademarks or registered trademarks of John

Wiley & Sons, Inc and/or its affiliates, in the United States and other countries, and may not be used without

written permission Windows Server is a registered trademark of Microsoft Corporation All other trademarks

are the property of their respective owners John Wiley & Sons, Inc is not associated with any product or vendor

mentioned in this book.

10 9 8 7 6 5 4 3 2 1

Dear Reader,

Thank you for choosing MCSA: Windows Server 2012 R2 Complete Study Guide This

book is part of a family of premium-quality Sybex books, all of which are written by

out-standing authors who combine practical experience with a gift for teaching

Sybex was founded in 1976 More than 30 years later, we’re still committed to producing

consistently exceptional books With each of our titles, we’re working hard to set a new

standard for the industry From the paper we print on to the authors we work with, our

goal is to bring you the best books available

I hope you see all that reflected in these pages I’d be very interested to hear your

com-ments and get your feedback on how we’re doing Feel free to let me know what you

think about this or any other Sybex book by sending me an email at contactus@sybex

com If you think you’ve found a technical error in this book, please visit http://sybex

custhelp.com Customer feedback is critical to our efforts at Sybex

Best regards,

Chris WebbAssociate PublisherSybex, an Imprint of Wiley

This book is dedicated to the three ladies of my life:

—Crystal, Alexandria, and Paige.

I would like to thank my wife and best friend, Crystal She is always the light at the end of

my tunnel I want to thank my two daughters, Alexandria and Paige, for all of their love and support during the writing of all my books They make it all worthwhile

I want to thank my family, and especially my brothers, Rick, Gary, and Rob They have always been there for me I want to thank my father, Richard, who helped me become the man I am today, and my mother, Maggie, for all of her love and support

I would like to thank all of my friends and co-workers, especially Vic, Catherine, Jeff, Stephanie, Don, Jason, Doug, Dave, Steve, Pat, Mike (all of them), Tommy, George, Greg, Becca, Deb, Jeri, Lisa, Scotty, and all of the field guys I want to also thank my team and everyone who works with my group including Moe, Jimmy, Paul, Dana, Dean, Reanna, Todd, and Will F Because of all of your hard work, you make me look good every day and make it a pleasure to go to work Thanks to all of you for everything that you do

I want to thank everyone on my Sybex team, especially my development editor, Gary Schwartz, who helped me make this the best book possible, and Rodney R Fournier, who

is the technical editor of many of my books It’s always good to have the very best technical guy backing you up

I want to also thank Mike Rice, Winston McMiller, and Jeff Stokes for helping me update some of my chapters from Windows Server 2012 to Windows Server 2012 R2

Their hard work and knowledge helped finish this huge undertaking

I want to thank Eric Charbonneau, who was my production editor, and my acquisitions editor, Jeff Kellum, who served as lead for the entire book He has always been there for

me, and it is always great to write for him

Finally, I want to thank everyone else behind the scenes who helped make this book sible It’s truly an amazing thing to have so many people work on my books to help make them the very best I can’t thank you all enough for your hard work

pos-About the Authors

William Panek holds the following certifications: MCP, MCP+I, MCSA,

MCSA+ Security and Messaging, MCSE-NT (3.51 and 4.0), MCSE 2000 and 2003, MCSE+Security and Messaging, MCDBA, MCT, MCTS, MCITP, CCNA, and CHFI Will is also a two time Microsoft MVP (he won in October 2013 and October 2014)

After many successful years in the computer industry and a degree in puter programming, Will decided that he could better use his talents and his personality as

com-an instructor He begcom-an teaching for schools such as Boston University, Clark University, and the University of Maryland, just to name a few He has done consulting and training work for some of the biggest government and corporate companies in the world including the U.S Secret Service, Cisco, the U.S Air Force, and the U.S Army

In 2012, Will became the Director of IT for Green Mountain Communications He currently lives in New Hampshire with his wife and two daughters Will was also a Repre-sentative in the New Hampshire House of Representatives from 2010 to 2012 In his spare time, he likes to golf, ski, shoot, and go snowmobiling Will is also a commercially rated helicopter pilot

Michael Allen Rice holds these certifications: MCP, MCTS, MCSA, MCSE, MCITP,

CompTIA Network+, CompTIA Security+, VMware Certified Professional 5 - DCV, and NetApp Certified Data Management Administrator 7-mode

Michael currently works as a Data Center Administrator for Intelligent Software tions, Inc., based in Colorado Springs He lives there with his wife and two children He specializes in leading the way for corporate infrastructure in the areas of virtualization, storage, and systems administration Over the past decade as an IT professional, Michael has received numerous awards for his outstanding performance and dedication to excel-lence within the IT community

Solu-Winston McMiller holds these certifications: MCP, MCP+I, MCSA, MCSE 2000, 2003,

2012/2012 R2, and ITIL Winston is a Microsoft Premier Field Engineer

After 18 years in the computer industry and a degree in information technology, ston has done consulting and training for some of the largest companies in the world including General Electric, HP Enterprise services, Chrysler, and IBM

Win-He currently lives in the Seattle area In his spare time, he likes to ski, do photography, and travel He is an avid audiophile and songwriter

Jeff Stokes holds these certifications: MCT, MCSA, MCSE 2003, and MCTS: Windows

Internals Jeff Stokes runs @WindowsPerf, a Windows Performance social networking erty He is a frequent guest on RunAsRadio and an avid blogger

prop-As a previous Premier Field Engineer at Microsoft, Jeff has worked in the Fortune 1000 space for the last eight years After 21 years in the IT field, Jeff has established himself

as a performance SME and a VDI pioneer in Microsoft technologies, including Windows

optimization as a VDI guest His work appears in VDI optimization guidance papers from

Microsoft and other parties

He currently lives in the Atlanta area In his spare time, he analyzes performance traces, games, and mentors others in the IT field

Contents at a Glance

Introduction xxxix

Part I Exam 70-410: Installing and

Configuring Windows Server 2012 R2 1

Chapter 3 Plan and Install Active Directory 165

Chapter 4 Configure Windows Server 2012 R2 207

Chapter 9 Use Virtualization in Windows Server 2012 439

Part II Exam 70-411: Administering Windows

Chapter 13 Configure Routing and Remote Access 619

Chapter 14 Configure a Network Policy Server Infrastructure 661

Chapter 15 Configure and Manage Active Directory 697

Chapter 16 Configure and Manage Group Policy 751

Part III Exam 70-412: Configuring Advanced

Windows Server 2012 R2 Services 817

Chapter 17 Configure and Manage High Availability 819

Chapter 18 Configure File and Storage Solutions 857

Chapter 19 Implement Business Continuity and Disaster Recovery 901

Chapter 20 Configure Advanced Network Services 937

Chapter 21 Configure the Active Directory Infrastructure 977

Chapter 22 Configure Access and Information Protection Solutions 1045

Appendix B About the Additional Study Tools 1133

Index 1137

Introduction xxxix

Part I Exam 70-410: Installing and Configuring

Windows Server 2012 R2 1

Features and Advantages of Windows Server 2012

Planning the Windows Server 2012 R2 Installation 7

Migrating Roles and Features to Windows

Storage Spaces in Windows Server 2012 R2 35

Summary 52

Chapter 2 Configure Network Services 57

Understanding Servers, Clients, and Resolvers 64

Understanding Active Directory Integrated DNS 74

Advantages of DNS in Windows Server 2012 R2 80

Support for Read-Only Domain Controllers 82

Configuring Zones for Dynamic Updates 98

Monitoring DNS with the DNS Snap-In 105

Advantages and Disadvantages of DHCP 118

Ipconfig Lease Options 119

Authorizing DHCP for Active Directory 126

Changing Scope Properties (IPv4 and IPv6) 138

Managing Reservations and Exclusions 143

Integrating Dynamic DNS and IPv4 DHCP 153

Working with the DHCP Database Files 156Summary 158

NTFS 168

Tools and Techniques for Testing

Understanding Domain and Forest Functionality 174

Adprep 179

Deploying Active Directory IaaS in Windows Azure 189

Using Active Directory Administrative Tools 192

Creating and Configuring Application Data Partitions 195Creating Application Data Partitions 196

Using ntdsutil to Manage Application Data Partitions 198Configuring DNS Integration with Active Directory 201Summary 203

Making Active Directory Objects Available to Users 210

Planning the OU Structure 250

Making Active Directory Objects Available to Users 284

Using the Active Directory Administrative Center 289Using the Command Prompt for Active Directory Configuration 290Summary 292

The Security Settings Section of the GPO 301

Linking Existing GPOs to Active Directory 309

Security Filtering of a Group Policy 311Delegating Administrative Control of GPOs 313Controlling Inheritance and Filtering Group Policy 315

Assigning Script Policies 316

Automatically Enrolling User and Computer

Managing GPOs with Windows PowerShell

Publishing and Assigning Applications 334

Configuring Automatic Updates in Group Policy 337Configuring Software Deployment Settings 338The Software Installation Properties Dialog Box 338

Delegating Control of Users and Groups 370Understanding Dynamic Access Control 371

Implementing Auditing 374

Features of Windows Server 2012 R2 Auditing 376

The Hierarchical IP Addressing Scheme 393

Applying Subnetting the Traditional Way 410Working with Classless Inter-Domain Routing 418Supernetting 421

Configuring Virtual Machines 461Creating and Managing Virtual Machines 461Summary 469

Part II Exam 70-411: Administering

Windows Server 2012 R2 473

Configuring Windows Server Update Services 484

Using Windows Server Update Services 487Overview of Windows Server 2012 R2

Using Windows Server 2012 R2 Performance Tools 501

Using Other Performance-Monitoring Tools 510Summary 523

Configuring File Server Resource Manager 530

Windows 7 and 2008 R2 vs Windows 8 and 2012 R2 535

What’s New in Windows Server 2012 R2 541

Windows Server 2012 R2 Auditing Features 547

Making Active Directory Objects Available to Users 548

Understanding Servers, Clients, and Resolvers 562

Understanding Active Directory Integrated DNS 572

Advantages of DNS in Windows Server 2012 R2 578

Support for Read-Only Domain Controllers 580

Configuring Zones for Dynamic Updates 595

Manually Creating DNS Records 599

Managing Remote Users with a RADIUS Server 639

Reviewing the Remote Access Event Log 642

Configuring Pass-Through Authentication 652

Understanding the DirectAccess Process 653Knowing the DirectAccess Infrastructure Requirements 655Summary 656

Chapter 14 Configure a Network Policy Server Infrastructure 661

Importing and Exporting NPS Policies 678

Setting Up a VPN Network Access Policy 685

Configuring Network Access Protection 689Summary 691

Understanding Active Directory Features 700

Delegating Control of Users and Groups 717Understanding Dynamic Access Control 719

Seizing Roles 728

Overview of the Windows Server 2012

Setting Up an Active Directory Backup 736

Wbadmin Command Line Utility 745Summary 746

The Security Settings Section of the GPO 756

Linking Existing GPOs to Active Directory 764

Security Filtering of a Group Policy 768Delegating Administrative Control of GPOs 770Controlling Inheritance and Filtering Group Policy 771

Automatically Enrolling User and Computer Certificates

Managing GPOs with Windows PowerShell

Backup, Restore, Import, Copy, and Migration Tables 782

The Windows Installer 787

Publishing and Assigning Applications 794

Configuring Automatic Updates in Group Policy 798Configuring Software Deployment Settings 798The Software Installation Properties Dialog Box 799

Microsoft Windows Installer Settings 803

Summary 811

Part III Exam 70-412: Configuring Advanced

Windows Server 2012 R2 Services 817

Achieving High Availability with Failover Clustering 830

Chapter 18 Configure File and Storage Solutions 857

Configure File Classification Infrastructure

Configure User and Device Claim Types 875Create and Configure Resource Properties and Lists 879Create and Configure Central Access Rules

Configure iSCSI Target and Initiator 890Configure Internet Storage Name Server 892Implement Thin Provisioning and Trim 895Manage Server Free Space Using Features on Demand 896

Overview of the Windows Server 2012 R2 Backup Utility 904Setting Up an Active Directory Backup 909

Wbadmin Command-Line Utility 918

VssAdmin Command 923

Using Other Advanced Boot Options Menu Modes 928

Summary 933

Working with Advanced DHCP Configuration Options 939

Create and Configure Multicast Scopes 940

Configure High Availability for DHCP Including DHCP

Provision IPAM Manually or by Using Group Policy 964

Create and Manage IP Blocks and Ranges 968Monitor Utilization of IP Address Space 970

Summary 973

Chapter 21 Configure the Active Directory Infrastructure 977

Overview of Active Directory

Replicating Active Directory 981Understanding Active Directory Site Concepts 982Understanding Distributed File System Replication 986

Using Universal Group Membership Caching 1006Monitoring and Troubleshooting Active Directory

Replication 1007

Joining a New Domain Tree to a Forest 1023Adding Additional Domain Controllers 1024

Managing Universal Group Membership Caching 1035Upgrading Existing Domains and Forests 1036Summary 1037

Chapter 22 Configure Access and Information Protection

Solutions 1045What’s New in Windows Server 2012 R2 with Active

Active Directory Certificate Services Roles 1048Planning the Certificate Authority Hierarchy 1049

Active Directory Rights Management Services 1091Considerations and Requirements for AD RMS 1091

Chapter 1: Install Windows Server 2012 R2 1110

Chapter 3: Plan and Install Active Directory 1112Chapter 4: Configure Windows Server 2012 R2 1113

Chapter 9: Use Virtualization in Windows Server 2012 1118Chapter 10: Manage and Maintain Servers 1119

Chapter 13: Configure Routing and Remote Access 1122Chapter 14: Configure a Network Policy Server

Infrastructure 1123Chapter 15: Configure and Manage Active Directory 1124Chapter 16: Configure and Manage Group Policy 1125Chapter 17: Configure and Manage High Availability 1126

Chapter 18: Configure File and Storage Solutions 1127Chapter 19: Implement Business Continuity and

Chapter 20: Configure Advanced Network Services 1129Chapter 21: Configure the Active Directory Infrastructure 1130Chapter 22: Configure Access and Information

Table of ExercisesExercise 1.1 Installing Windows Server 2012 R2 with the GUI 22 Exercise 1.2 Installing Windows Server 2012 R2 Using Server Core 25 Exercise 1.3 Initializing Disk Drives 32 Exercise 1.4 Converting a Basic Disk to a Dynamic Disk 33 Exercise 1.5 Creating a Volume Set 34 Exercise 1.6 Creating Mount Points 40 Exercise 1.7 Installing Microsoft MPIO 42 Exercise 1.8 Configuring iSCSI Storage Connection 44 Exercise 1.9 Installing the iSNS Feature on Windows Server 2012 R2 47 Exercise 2.1 Installing and Configuring the DNS Service 92 Exercise 2.2 Configuring a Zone for Dynamic Updates 98 Exercise 2.3 Creating a Delegated DNS Zone 101 Exercise 2.4 Manually Creating DNS RRs 102 Exercise 2.5 Simple DNS Testing 106 Exercise 2.6 Using the nslookup Command 111 Exercise 2.7 Installing the DHCP Service 122 Exercise 2.8 Unauthorizing a DHCP Server 127 Exercise 2.9 Authorizing a DHCP Server 128 Exercise 2.10 Creating a New Scope 135 Exercise 2.11 Configuring User Class Options 148 Exercise 2.12 Creating a Superscope 150 Exercise 2.13 Creating a New Multicast Scope 152 Exercise 2.14 Enabling DHCP-DNS Integration 155 Exercise 3.1 Viewing Disk Configuration 170 Exercise 3.2 Promoting a Domain Controller 181 Exercise 3.3 Installing AD DS on Server Core 186 Exercise 3.4 Viewing the Active Directory Event Log 191 Exercise 3.5 Joining a Computer to an Active Directory Domain 195 Exercise 3.6 Configuring DNS Integration with Active Directory 201 Exercise 4.1 Creating and Publishing a Shared Work Folder 210 Exercise 4.2 Configuring Offline Folder Options 214 Exercise 4.3 Configuring a Shared Network Folder for Offline Access 215 Exercise 4.4 Configuring a Shadow Copy on a Volume 216

Exercise 4.5 Configuring Shared and NTFS Settings 223

Exercise 4.6 Configuring Disk Quotas 225

Exercise 4.7 Creating and Publishing a Printer 226

Exercise 4.8 Starting the Windows PowerShell Utility 238

Exercise 5.1 Creating an OU Structure 257

Exercise 5.2 Modifying OU Structure 260

Exercise 5.3 Using the Delegation of Control Wizard 263

Exercise 5.4 Delegating Custom Tasks 264

Exercise 5.5 Creating Active Directory Objects 270

Exercise 5.6 Creating a User Template 273

Exercise 5.7 Managing Object Properties 277

Exercise 5.8 Moving Active Directory Objects 282

Exercise 5.9 Resetting an Existing Computer Account 283

Exercise 5.10 Creating and Publishing a Printer 285

Exercise 5.11 Creating and Publishing a Shared Folder 286

Exercise 5.12 Finding Objects in Active Directory 287

Exercise 6.1 Creating a Group Policy Object Using the GPMC 307

Exercise 6.2 Linking Existing GPOs to Active Directory 309

Exercise 6.3 Filtering Group Policy Using Security Groups 312

Exercise 6.4 Delegating Administrative Control of Group Policy 313

Exercise 6.5 Configuring Automatic Certificate Enrollment in Group Policy 321

Exercise 6.6 Configuring Folder Redirection in Group Policy 322

Exercise 6.7 Creating a Software Deployment Share 332

Exercise 6.8 Publishing and Assigning Applications Using Group Policy 334

Exercise 6.9 Applying Software Updates 336

Exercise 7.1 Delegating Control of Active Directory Objects 370

Exercise 7.2 Enabling Auditing of Active Directory Objects 375

Exercise 7.3 Configuring Windows Firewall 382

Exercise 8.1 Class C, 10 Hosts per Subnet 407

Exercise 8.2 Class C, 20 Hosts per Subnet 408

Exercise 8.3 Class C, Five Subnets 408

Exercise 8.4 Class B, 1,500 Hosts per Subnet 409

Exercise 8.5 Class B, 3,500 Hosts per Subnet 409

Exercise 9.1 Installing Hyper-V in Full Installation Mode 448

Exercise 9.2 Creating an Internal Virtual Network 455

Exercise 9.3 Creating a Differencing Hard Disk 457 Exercise 9.4 Creating a New Virtual Machine 461 Exercise 9.5 Installing Hyper-V Integration Components 468 Exercise 10.1 Installing a WSUS Server 489 Exercise 10.2 Setting WSUS Server Options 493 Exercise 10.3 Configuring a GPO for WSUS 498 Exercise 10.4 Installing SNMP 522 Exercise 10.5 Configuring SNMP 522 Exercise 11.1 Enabling BitLocker in Windows Server 2012 R2 536 Exercise 11.2 Installing the DFS Namespace Service 540 Exercise 11.3 Enabling Auditing of Active Directory Objects 545 Exercise 11.4 Generating and Viewing Audit Logs 546 Exercise 11.5 Creating and Publishing a Shared Network Folder 549 Exercise 11.6 Configuring Offline Folder Options 550 Exercise 11.7 Configuring a Shared Network Folder for Offline Access 551 Exercise 12.1 Installing and Configuring the DNS Service 589 Exercise 12.2 Configuring a Zone for Dynamic Updates 596 Exercise 12.3 Creating a Delegated DNS Zone 598 Exercise 12.4 Manually Creating DNS RRs 599 Exercise 12.5 Simple DNS Testing 603 Exercise 12.6 Using the nslookup Command 607 Exercise 12.7 Enabling DHCP-DNS Integration 613 Exercise 13.1 Installing the Remote Access Role 633 Exercise 13.2 Changing Remote Access Logging Settings 642 Exercise 14.1 Creating a Network Access Policy 674 Exercise 14.2 Restricting a User Profile for Dial-In Access 680 Exercise 14.3 Configuring Encryption 684 Exercise 14.4 Creating a VPN Network Access Policy 685 Exercise 15.1 Creating and Managing Users and Groups 714 Exercise 15.2 Creating and Using User Templates 717 Exercise 15.3 Delegating Control of Active Directory Objects 718 Exercise 15.4 Applying Security Policies by Using Group Policy 721 Exercise 15.5 Fine-Grained Password Policy 723 Exercise 15.6 Assigning Single-Master Operations 728 Exercise 15.7 Backing Up Active Directory 736

Exercise 16.1 Creating a Group Policy Object Using the GPMC 761

Exercise 16.2 Linking Existing GPOs to Active Directory 764

Exercise 16.3 Filtering Group Policy Using Security Groups 769

Exercise 16.4 Delegating Administrative Control of Group Policy 770

Exercise 16.5 Configuring Automatic Certificate Enrollment in Group Policy 777

Exercise 16.6 Configuring Folder Redirection in Group Policy 779

Exercise 16.7 Creating a Software Deployment Share 793

Exercise 16.8 Publishing and Assigning Applications Using Group Policy 795

Exercise 16.9 Applying Software Updates 796

Exercise 17.1 Installing NLB Nodes 825

Exercise 17.2 Installing the Failover Cluster Feature 835

Exercise 17.3 Running the Validate A Configuration Wizard 837

Exercise 17.4 Creating a Cluster 839

Exercise 17.5 Clustering the Print Services Role 842

Exercise 17.6 Using the Dependency Viewer 846

Exercise 18.1 Configure the NFS Data Store 859

Exercise 18.2 Configuring BranchCache Firewall Exceptions 863

Exercise 18.3 Installing BranchCache on Windows Server 2012 R2 865

Exercise 18.4 Enabling Auditing of Active Directory Objects 872

Exercise 18.5 Generating and Viewing Audit Logs 873

Exercise 18.6 Enable Dynamic Access Control 876

Exercise 18.7 Configure User and Device Claim Types 878

Exercise 18.8 Create and Configure Resource Properties and Lists 880

Exercise 18.9 Create and Configure Central Access Rules and Policies 882

Exercise 18.10 Configure File Classification 884

Exercise 18.11 Implement Policy Stages and Staging 885

Exercise 18.12 Configure Access-Denied Assistance 888

Exercise 18.13 Configuring iSCSI Storage Connection 891

Exercise 18.14 Installing the iSNS Feature on Windows Server 2012 R2 893

Exercise 19.1 Backing Up Active Directory 910

Exercise 19.2 Configuring a Shadow Copy on a Volume 922

Exercise 19.3 Booting Your Computer to Safe Mode 926

Exercise 19.4 Using Boot Logging 927

Exercise 20.1 Creating a Superscope 940

Exercise 20.2 Creating and Activating a New Multicast Scope 941

Exercise 20.3 Creating and Activating a New DHCPv6 Scope 944 Exercise 20.4 Configuring DHCP Failover 946 Exercise 20.5 Configuring DHCP Filtering 950 Exercise 20.6 Enabling DHCP Name Protection 951 Exercise 20.7 Disabling Dynamic Updates 952 Exercise 20.8 Configuring DNSSEC 954 Exercise 20.9 Enabling DNS Diagnostic Logging 957 Exercise 20.10 Disabling DNS Recursion 959 Exercise 20.11 Configuring a GlobalNames Zone 961 Exercise 20.12 Installing the IPAM Feature 964 Exercise 20.13 Configuring IPAM Server Discovery 967 Exercise 20.14 Manually Add IPAM IP Address Space 968 Exercise 21.1 Creating Sites 988 Exercise 21.2 Creating Subnets 991 Exercise 21.3 Configuring Sites 993 Exercise 21.4 Creating Site Links and Site Link Bridges 998 Exercise 21.5 Moving Server Objects Between Sites 1001 Exercise 21.6 Creating a New Subdomain 1018 Exercise 21.7 Assigning Single-Master Operations 1028 Exercise 21.8 Managing Trust Relationships 1032 Exercise 21.9 Adding a UPN Suffix 1033 Exercise 21.10 Managing GC Servers 1035 Exercise 21.11 Managing Universal Group Membership Caching 1036 Exercise 22.1 Installing AD CS Through Server Manager 1056 Exercise 22.2 Configuring AD CS Through Server Manager 1059 Exercise 22.3 Configure an Auto-enrollment Group Policy for a Domain 1062 Exercise 22.4 Creating a Certificate Template 1065 Exercise 22.5 Publishing a Certificate Template 1066 Exercise 22.6 Revoking a Certificate 1067 Exercise 22.7 Configuring CA Policy Auditing 1068 Exercise 22.8 Backing Up the Certificate Authority Server 1069 Exercise 22.9 Installing the AD FS Role on a Computer Using Server Manager 1076 Exercise 22.10 Configuring the AD FS Role on the Computer Using

Server Manager 1079 Exercise 22.11 Configuring Multifactor Authentication 1088

Exercise 22.12 Workplace Joining a Device 1090

Exercise 22.13 Installing an AD RMS Role on the Local Computer

Using Server Manager 1094 Exercise 22.14 Backing Up an AD RMS Database 1100

Exercise 22.15 Adding a Trusted User Domain 1102

Exercise 22.16 Exporting the Trusted User Domain 1103

Exercise 22.17 Exporting the Trusted Publishing Domain 1103

Exercise 22.18 Adding the Trusted Publishing Domain 1104