MCTS Windows Server 2008 R2 Complete Study Guide (Exams 70-640, 70-642 and 70-643)

Introduction xxxv

Assessment Test xlvii

Part I MCTS: Windows Server 2008 R2 Active

Directory Configuration (Exam 70-640) 1

Chapter 1 Overview of Active Directory 3

The Industry before Active Directory 5

The Benefits of Active Directory 5

Understanding Active Directory’s Logical Structure 9

Components and Mechanisms of Active Directory 9

An Overview of Active Directory Domains 11

Overview of an Active Directory Forest 13

Understanding Active Directory Objects 15

Names and Identifiers of Objects 15

Using Organizational Units (OUs) in Active Directory 17

Security Features of User, Computer, and Group Objects 18

Delegation of Administrative Control 19

Introducing Windows Server 2008 R2 Server Roles 21

Active Directory Certificate Services 22

Active Directory Domain Services 22

Active Directory Federation Services 24

Active Directory Lightweight Directory Services 25

Active Directory Rights Management Services 25

Introducing Identity and Access (IDA) in Windows

Server 2008 26

Using Directory Services 27

Strong Authentication 28

Federated Identities 28

Information Protection 29

Forefront Identity Manager (FIM) 2010 29

Summary 30

Exam Essentials 31

Review Questions 32

Answers to Review Questions 34

Chapter 2 Domain Name System (DNS) 35

Introducing DNS 36

The Form of an IP Address 37

Understanding Servers, Clients, and Resolvers 42

Understanding the DNS Process 43

Introducing DNS Database Zones 49

Understanding Primary Zones 50

Understanding Secondary Zones 51

Understanding Active Directory Integrated DNS 52

Understanding Stub Zones 54

GlobalName Zones 55

Zone Transfers and Replication 56

New Functionality in Windows Server 2008 DNS 59

Background Zone Loading 59

Support for IPv6 Addresses 59

Support for Read-Only Domain Controllers 60

GlobalName Zones 60

DNS Socket Pool 61

DNS Cache Locking 61

DNS Security Extensions (DNSSEC) 61

Introducing DNS Record Types 62

Start of Authority (SOA) Records 62

Name Server (NS) Records 64

Host Record 64

Alias Record 65

Pointer (PTR) Record 65

Mail Exchanger (MX) Record 66

Service (SRV) Record 66

Configuring DNS 67

Installing DNS 67

Load Balancing with Round Robin 68

Configuring a Caching-Only Server 68

Setting Zone Properties 69

Configuring Zones for Dynamic Updates 73

Delegating Zones for DNS 74

DNS Forwarding 75

Manually Creating DNS Records 76

DNS Aging and Scavenging 78

Monitoring and Troubleshooting DNS 78

Monitoring DNS with the DNS Snap-In 79

Troubleshooting DNS 81

Summary 90

Exam Essentials 91

Review Questions 93

Answers to Review Questions 96

Chapter 3 Active Directory Planning and Installation 97

Verifying the Filesystem 99

Setting Up the NTFS Partition 100

Verifying Network Connectivity 102

Basic Connectivity Tests 103

Tools and Techniques for Testing Network Configuration 104

Understanding Domain and Forest Functionality 105

About the Domain Functional Level 106

About Forest Functionality 107

Planning the Domain Structure 109

Installing Active Directory 109

Verifying Active Directory Installation 114

Using Event Viewer 114

Using Active Directory Administrative Tools 117

Testing from Clients 119

Creating and Configuring Application Data Partitions 120

Creating Application Data Partitions 121

Managing Replicas 123

Removing Replicas 124

Using ntdsutil to Manage Application Data Partitions 124

Configuring DNS Integration with Active Directory 126

Summary 128

Exam Essentials 129

Review Questions 130

Answers to Review Questions 133

Chapter 4 Installing and Managing Trees and Forests 135

Reasons for Creating Multiple Domains 136

Reasons for Using Multiple Domains 136

Drawbacks of Multiple Domains 139

Creating Domain Trees and Forests 139

Planning Trees and Forests 140

The Promotion Process 143

Creating a Domain Tree 144

Joining a New Domain Tree to a Forest 149

Adding Additional Domain Controllers 154

Demoting a Domain Controller 154

Managing Multiple Domains 157

Managing Single-Master Operations 158

Forest Operations Masters 158

Domain Operations Masters 158

Assigning Single-Master Roles 159

Managing Trusts 161

Managing UPN Suffixes 168

Managing Global Catalog Servers 169

Managing Universal Group Membership Caching 171

Summary 172

Exam Essentials 173

Review Questions 175

Answers to Review Questions 178

Chapter 5 Configuring Sites and Replication 179

Overview of Network Planning 180

The Three Types of Network 180

Exploring Network Constraints 181

Overview of Active Directory Replication and Sites 182

Replicating Active Directory 182

Understanding Active Directory Site Concepts 183

Understanding Distributed File System Replication 187

Implementing Sites and Subnets 188

Creating Sites 189

Creating Subnets 192

Configuring Sites 195

Configuring Replication 197

Intrasite Replication 197

Intersite Replication 198

Configuring Server Topology 205

Using Universal Group Membership Caching 208

Monitoring and Troubleshooting Active Directory Replication 209

About System Monitor 209

Troubleshooting Replication 209

Summary 211

Exam Essentials 212

Review Questions 214

Answers to Review Questions 217

Chapter 6 Configuring Active Directory Server Roles 219

Understanding Server Manager 221

Configuring Active Directory Certificate Services 222

Installing Active Directory Certificate Services 224

Enrolling User and Computer Certificates 228

Certificate Templates 230

Revoking Certificates 232

Configuring Additional CA Server Settings 234

What’s New in Windows Server 2008 R2 236

Understanding Active Directory Domain Services 237

Introducing the New Domain Services Features in Windows Server 2008 237

Security Features Available for Domain Services 238

What’s New in Windows Server 2008 R2 241

Active Directory Federation Services 242

Installing AD FS 243

Configuring AD FS 244

Active Directory Lightweight Directory Services 245

Installing AD LDS 246

Configuring AD LDS 246

Installing AD LDS on Server Core 249

Active Directory Rights Management Services 250

AD RMS Templates 255

Summary 257

Exam Essentials 257

Review Questions 259

Answers to Review Questions 262

Chapter 7 Administering Active Directory 263

An Overview of OUs 264

The Purpose of OUs 265

Benefits of OUs 266

Planning the OU Structure 266

Logical Grouping of Resources 266

Understanding OU Inheritance 268

Delegating Administrative Control 269

Applying Group Policies 270

Creating OUs 271

Managing OUs 275

Moving, Deleting, and Renaming OUs 275

Administering Properties of OUs 276

Delegating Control of OUs 277

Troubleshooting OUs 282

Creating and Managing Active Directory Objects 282

Overview of Active Directory Objects 282

Managing Object Properties 290

Understanding Groups 293

Filtering and Advanced Active Directory Features 295

Moving, Renaming, and Deleting Active Directory Objects 297

Resetting an Existing Computer Account 298

Publishing Active Directory Objects 298

Making Active Directory Objects Available to Users 298

Publishing Printers 299

Publishing Shared Folders 300

Querying Active Directory 301

Using the Active Directory Administrative Center 303

Using the Command Prompt for Active Directory Configuration 305

Summary 306

Exam Essentials 307

Review Questions 308

Answers to Review Questions 312

Chapter 8 Configuring Group Policy Objects 313

Introducing Group Policy 314

Understanding Group Policy Settings 315

The Security Settings Section of the GPO 317

Group Policy Objects 318

Group Policy Inheritance 320

Planning a Group Policy Strategy 321

Implementing Group Policy 321

Creating GPOs 321

Linking Existing GPOs to Active Directory 324

Managing Group Policy 325

Managing GPOs 325

Security Filtering of a Group Policy 327

Delegating Administrative Control of GPOs 329

Controlling Inheritance and Filtering Group Policy 331

Assigning Script Policies 332

Understanding the Loopback Policy 334

Managing Network Configuration 334

Automatically Enrolling User and Computer Certificates in Group Policy 335

Redirecting Folders 337

Managing GPOs with Windows PowerShell Group Policy Cmdlets 339

Deploying Software through a GPO 340

The Software Management Life Cycle 340

The Windows Installer 342

Deploying Applications 346

Implementing Software Deployment 347

Preparing for Software Deployment 347

Software Restriction Policies 349

Using AppLocker 349

Group Policy Slow Link Detection 349

Publishing and Assigning Applications 350

Applying Software Updates 351

Verifying Software Installation 352

Configuring Automatic Updates in Group Policy 353

Configuring Software Deployment Settings 354

The Software Installation Properties Dialog Box 354

Removing Programs 357

Microsoft Windows Installer Settings 358

Troubleshooting Group Policies 359

RSoP in Logging Mode 360

RSoP in Planning Mode 363

Using the gpresult.exe Command 364

Summary 365

Exam Essentials 366

Review Questions 368

Answers to Review Questions 371

Chapter 9 Planning Security for Active Directory 373

Active Directory Security Overview 375

Understanding Security Principals 375

Managing Security and Permissions 386

Using ACLs and ACEs 387

Implementing Active Directory Security 389

Using User Templates 391

Delegating Control of Users and Groups 392

Using Group Policy for Security 393

Fine-Grained Password Policies 396

Understanding Smart Card Authentication 399

Preparing a Smart Card Certificate Enrollment Station 400

Configuring Group Policy Settings for Smart Cards 400

Understanding Security Configuration and Analysis Tools 401

Using the Security Configuration and Analysis Utility 402

Understanding the secedit.exe Command 403

Implementing an Audit Policy 404

Overview of Auditing 405

Implementing Auditing 405

Viewing Auditing Information 407

What’s New in Windows Server 2008 R2 Auditing 408

Summary 409

Exam Essentials 410

Review Questions 411

Answers to Review Questions 414

Chapter 10 Active Directory Optimization and Reliability 415

Overview of Windows Server 2008 R2 Performance Monitoring 417

Using Windows Server 2008 R2 Performance Tools 419

Deciding What to Monitor 420

Viewing Performance Information 422

Managing Performance Monitor Properties 424

Saving and Analyzing Data with Performance Logs and Alerts 428

Monitoring and Troubleshooting Active Directory Components 430

Monitoring Domain Controller Performance 430

Monitoring Active Directory Performance with Performance Monitor 433

Using Other Performance Monitoring Tools 434

Troubleshooting Active Directory Performance Monitoring 442

Backup and Recovery of Active Directory 442

Overview of the Windows Server 2008 R2 Backup Utility 444

Backing Up Active Directory 448

Restoring Active Directory 449

Active Directory Recycle Bin 451

Restartable Active Directory 451

Offline Maintenance 452

Monitoring Replication 453

Using the ADSI Editor 454

Summary 454

Exam Essentials 455

Review Questions 457

Answers to Review Questions 460

Part II MCTS: Windows Server 2008 R2 Network Infrastructure Configuration (Exam 70-642) 461

Chapter 11 Understanding Windows Server 2008 R2 Networking 463

Understanding the OSI Model 464

Protocol Stacks 466

Communication between Stacks 475

How Microsoft’s Network Components Work with the OSI Model 476

Device Drivers and the OSI Model 477

Network Protocol Basics 477

About Windows Network Models 484

Windows Peer-to-Peer Network 484

Summary 486

Exam Essentials 486

Review Questions 487

Answers to Review Questions 490

Chapter 12 Configuring TCP/IP 493

Understanding TCP/IP 494

Details of the TCP/IP Model 494

How TCP/IP Layers Communicate 495

Understanding Port Numbers 496

Understanding IP Addressing 497

The Hierarchical IP Addressing Scheme 497

Understanding Network Classes 499

Subnetting a Network 502

Implementing Subnetting 503

An Easier Way to Apply Subnetting 509

Applying Subnetting the Traditional Way 514

Working with Classless Inter-Domain Routing 522

Understanding IPv6 525

IPv6 History and Need 525

IPv6 New and Improved Concepts 526

IPv6 Addressing Concepts 528

IPv6 Integration/Migration 533

Summary 537

Exam Essentials 538

Review Questions 539

Answers to Review Questions 542

Chapter 13 Managing DHCP and DNS 545

Overview of DHCP 546

Introducing the DORA Process 547

Advantages and Disadvantages of DHCP 548

ipconfig Lease Options 549

Understanding Scope Details 550

Installing and Authorizing DHCP 552

Installing DHCP 552

Introducing the DHCP Snap-in 553

Authorizing DHCP for Active Directory 554

Creating and Managing DHCP Scopes 556

Creating a New Scope in IPv4 556

Creating a New Scope in IPv6 563

Changing Scope Properties (IPv4 and IPv6) 567

Changing Server Properties 568

Managing Reservations and Exclusions 571

Setting Scope Options for IPv4 574

Activating and Deactivating Scopes 577

Creating a Superscope for IPv4 577

Creating IPv4 Multicast Scopes 578

Integrating Dynamic DNS and IPv4 DHCP 581

Using Multiple DHCP Servers 583

Working with the DHCP Database Files 583

DNS 585

Understanding DNS Components 585

Summary 587

Exam Essentials 587

Review Questions 590

Answers to Review Questions 593

Chapter 14 Managing Routing and Remote Access 595

Understanding Routing 596

What Routing Does 596

How Routing Works 597

Routing in Windows Server 2008 R2 606

Installing RRAS 608

Configuring IP Routing 609

Creating and Managing Interfaces 609

Setting IP Routing Properties 620

Managing Routing Protocols 622

Managing Static Routes 625

Configuring TCP/IP Packet Filters 627

Configuring VPN Packet Filters 630

PPTP Packet Filters 630

L2TP Packet Filters 631

Managing IP Routing 631

Using the routeprint Command 633

Troubleshooting IP Routing 633

Troubleshooting Example 633

Summary 635

Exam Essentials 635

Review Questions 637

Answers to Review Questions 640

Chapter 15 Managing Remote Access Services 643

Overview of Dial-Up Networking 644

What DUN Does 645

How DUN Works 645

Overview of Virtual Private Networks 649

What VPNs Do 649

VPNs and Windows Server 2008 R2 650

How VPNs Work 650

Configuring Your Remote Access Server 654

Configuring PPP Options 654

Installing a VPN 657

How VPN Works 658

Enabling RRAS as a VPN 659

Configuring a VPN 659

Configuring VPN Ports 659

Troubleshooting VPNs 660

Managing Your Remote Access Server 662

Managing Remote Users with a RADIUS Server 662

Monitoring Overall Activity 663

Controlling Remote Access Logging 663

Reviewing the Remote Access Event Log 666

Monitoring Ports and Port Activity 666

Configuring a RAS or VPN Client 667

The General Tab 667

The Options Tab 668

The Security Tab 670

The Networking Tab 671

The Sharing Tab 672

Introduction to Authentication Protocols 672

Overview of Wireless Access 673

Configuring Wireless Access 674

Summary 676

Exam Essentials 676

Review Questions 677

Answers to Review Questions 681

Chapter 16 Managing Security for Remote Access Services 683

Remote Access Security 684

User Authentication 684

Connection Security 686

Access Control 687

Configuring User Access 687

Setting Up User Profiles 687

Using Network Access Policies 689

Using Remote Access Profiles 694

Setting Up a VPN Network Access Policy 699

Configuring Security 701

Controlling Server Security 701

Configuring Network Access Protection 704

Configuring Windows Firewall Options 706

Windows Firewall with Advanced Security 708

Troubleshooting Techniques 714

Summary 716

Exam Essentials 716

Review Questions 718

Answers to Review Questions 723

Chapter 17 Managing File and Print Services 725

Understanding File Servers 726

Configuring File Servers 727

Sharing Folders 728

Making Active Directory Objects Available to Users 728

Configuring Offline Folders 729

Understanding Permissions 731

Share and Storage Management console 738

Using BitLocker Drive Encryption 739

Understanding BranchCache 739

Distributed Cache Mode Requirements 740

Hosted Mode Requirements 742

Configuring DirectAccess 743

DirectAccess vs. VPNs 743

Understanding How DirectAccess Works 743

Knowing the DirectAccess Infrastructure Requirements 744

Configuring Disk Quotas 745

Configuring Distributed File System 747

Advantages of DFS 747

Types of DFS 748

Using the DFS Management Console 749

Understanding Printing 750

Creating and Publishing Printers 751

Configuring Printers 752

Migrating Print Servers 757

Summary 757

Exam Essentials 758

Review Questions 759

Answers to Review Questions 763

Chapter 18 Monitoring and Managing a Network Infrastructure 765

Configuring Windows Server Update Services 767

Windows Update 768

Windows Automatic Updates 768

Using Windows Server Update Services 770

Overview of Windows Server 2008 R2 Performance Monitoring 777

Using Windows Server 2008 R2 Performance Tools 779

Introducing the Reliability and Performance Monitor 779

Using Other Performance-Monitoring Tools 789

Backup and Recovery 802

Wbadmin Command Line Utility 803

Understanding Shadow Copies 803

Summary 805

Exam Essentials 805

Review Questions 807

Answers to Review Questions 811

Part III MCTS: Windows Server 2008 R2

Applications Infrastructure

Configuration (Exam 70-643) 813

Chapter 19 Windows Server 2008 R2 Storage Services 815

Storage in Windows Server 2008 R2 816

Initializing Disks 816

Working with Basic and Dynamic Disks 817

Working with Volume Sets 819

Redundant Array of Independent Disks 820

Mount Points 824

Microsoft MPIO 824

iSCSI 826

Internet Storage Name Service 828

Fibre Channel 829

Network Attached Storage 830

Managing SANs 830

Virtual Disk Service 830

Storage Manager for SANs 832

Storage Explorer 833

Working with Virtualization 834

Benefits of Virtualization 835

Features of Microsoft Hyper-V 835

Virtualization Concepts 836

Understanding Virtual Hard Disks 837

Summary 838

Exam Essentials 838

Review Questions 839

Answers to Review Questions 841

Chapter 20 Remote Desktop Services in Windows Server 2008 R2 843

Remote Desktop Connection Display 845

Custom Display Resolutions 845

Monitor Spanning 846

Font Smoothing 846

Display Data Prioritization 847

Desktop Experience 847

Device Redirection 850

Single Sign-On for Remote Desktop Services 852

Remote Desktop Protocol Signing 853

RDP 7.0 Benefits 853

Understanding RemoteFX 854

Benefits of Using RemoteFX 854

Prepare and Configure the Use of Remote Desktop Services RemoteApp 855

Terminal Services Web Access 855

Installing Programs to Be Used with RemoteApp 856

Prepare and Configure Remote Desktop Services Gateway 858

Preparing the Necessary RD Gateway Role Services 858

Obtaining and Configuring a Certificate for RD Gateway 858

Creating Remote Desktop Services Connection Authorization Policies 860

Creating Remote Desktop Services Resource Authorization Policies 861

Configuring the Remote Desktop Services Client for RD Gateway 862

Configuring Remote Desktop Services Load Balancing 862

Configuring a Remote Desktop Services Server Farm with RD Connection Broker 863

Configuring Network Load Balancing 865

Configuring Remote Desktop Licensing 866

Remote Desktop Services Client Access Licenses 866

Installing RD Licensing and RD Client Access Licenses 867

Configuring License Settings on an RD Session Host 872

Remote Administration in Windows Server 2008 R2 874

Managing Remote Desktop Services through Group Policy 874

Group Policy Settings for Remote Desktop Services 875

Configuring Global Deployment Settings for RemoteApp 877

Monitoring RD Gateway Using RD Gateway Manager 880

Summary 882

Exam Essentials 884

Review Questions 885

Answers to Review Questions 887

Chapter 21 Configuring Web Services Infrastructure 889

Configuring Web Applications 890

Installing IIS 7.5 891

Creating and Configuring Websites 892

Configuring a File Transfer Protocol Server 903

Configuring Permissions 904

Configuring FTP Site for Extranet Users 905

FTP IPv4 and Domain Restrictions 905

WebDAV and FTP 906

Configuring a Simple Mail Transfer Protocol Server 907

Configuring General SMTP Virtual Server Properties 907

Configuring Access 909

Configuring Message Size and Transfer Limits 910

Configuring Delivery Options 911

Summary 914

Exam Essentials 915

Review Questions 916

Answers to Review Questions 918

Chapter 22 Advanced Web Infrastructure Configuration 919

Managing Internet Information Services 920

Configuring Monitoring and Logging 921

Backup and Restore 927

Delegating Administrative Rights 929

Configuring Secure Sockets Layer Security 932

Requesting and Renewing SSL Certificates 933

Enabling SSL on a Website 935

Exporting and Importing Certificates 936

Configuring Website Authentication and Permissions 937

Configuring Application Access 939

Client Certificate Mapping 940

Summary 941

Exam Essentials 941

Review Questions 942

Answers to Review Questions 944

Chapter 23 Configuring Additional Communication Services 945

Configuring Fax Services 946

Configuring Fax (Local) Properties 947

Defining a Dialing Rule 949

Defining a Fax Routing Location 950

Configuring a Media Server 951

Configuring Basic Streaming Solutions 953

Configuring Advanced Streaming Solutions 958

Options for Configuring Security in a Windows Media Server 961

Web-Based Administration 964

Configuring Digital Rights Management 964

How Does DRM Work? 965

Encryption 966

Sharing Business Rules 967

Configuring License Delivery 968

Configuring Policy Templates 969

Summary 971

Exam Essentials 971

Review Questions 972

Answers to Review Questions 974

Chapter 24 Configuring Windows SharePoint 2010 Foundation 975

Configuring SharePoint Foundation 2010 976

Configuring Incoming Email Settings 977

Configuring Outgoing Email Settings 979

Configuring Workflow Settings 982

Configuring Diagnostic Logging Settings 984

Configuring Antivirus Settings 985

Configuring Backups 987

Recovery 989

Audience Targeting 990

SharePoint Permissions 991

Configuring Windows SharePoint Foundation 2010 Sites 992

Upgrading from WSS 3.0 993

Configuring Alternate Access Mapping 996

Creating Quota Templates 997

Creating Site Collections 998

Enabling Access for End Users 998

Configuring Authentication for SharePoint Foundation 2010 999

Configure Digest Authentication 1000

Configuring Web SSO Authentication by Using ADFS 1001

Summary 1001

Exam Essentials 1002

Review Questions 1003

Answers to Review Questions 1005

Chapter 25 Using Virtualization in Windows Server 2008 R2 1007

Hyper-V Overview 1008

What Is Virtualization? 1008

Hyper-V Features 1009

Hyper-V Architecture 1010

Hyper-V Requirements 1012

Hyper-V Installation and Configuration 1013

Install the Hyper-V Role 1013

Hyper-V in Server Manager 1015

Using Hyper-V Manager 1015

Configure Hyper-V Settings 1016

Manage Virtual Networks 1017

Managing Virtual Hard Disks 1020

Configuring Virtual Machines 1025

Creating and Managing Virtual Machines 1025

Back Up and Restore Virtual Machines 1032

Summary 1036

Exam Essentials 1037

Review Questions 1038

Answers to Review Questions 1040

Chapter 26 Deploying Servers 1041

Windows Deployment Services 1042

Deploying Images by Using Windows Deployment Services 1043

Using Windows Deployment Services 1044

Configuring WDS 1046

Image Types 1049

Capturing Images 1050

Deploying Server Core 1052

Configuring Microsoft Windows Activation 1054

Installing KMS 1055

Configuring KMS 1057

Summary 1059

Exam Essentials 1060

Review Questions 1061

Answers to Review Questions 1063

Chapter 27 Configuring High Availability in Windows Server 2008 R2 1065

Components of High Availability 1066

Achieving High Availability 1067

High Availability Foundation 1067

Achieving High Availability with Failover Clustering 1069

Failover Clustering Requirements 1071

Cluster Quorum 1072

Validating a Cluster Configuration 1074

Creating a Cluster 1078

Clustered Application Settings 1081

Resource Properties 1083

New Windows Server 2008 R2 Clustering Features 1086

Achieving High Availability with Network Load Balancing 1087

How Does Network Load Balancing Work? 1087

Network Load Balancing Requirements 1088

Creating an NLB Cluster 1089

Modifying Cluster Properties 1089

Managing NLB Clusters 1091

Summary 1092

Exam Essentials 1092

Review Questions 1093

Answers to Review Questions 1095

Appendix About the Companion CD 1097

Index 1101