Table of Contents

Introduction xxxv Assessment Test xlvii Part I MCTS: Windows Server 2008 R2 Active Directory Configuration (Exam 70-640) 1 Chapter 1 Overview of Active Directory 3 The Industry before Active Directory 5 The Benefits of Active Directory 5 Understanding Active Directory s Logical Structure 9 Components and Mechanisms of Active Directory 9 An Overview of Active Directory Domains 11 Overview of an Active Directory Forest 13 Understanding Active Directory Objects 15 Names and Identifiers of Objects 15 Using Organizational Units (OUs) in Active Directory 17 Security Features of User, Computer, and Group Objects 18 Delegation of Administrative Control 19 Introducing Windows Server 2008 R2 Server Roles 21 Active Directory Certificate Services 22 Active Directory Domain Services 22 Active Directory Federation Services 24 Active Directory Lightweight Directory Services 25 Active Directory Rights Management Services 25 Introducing Identity and Access (IDA) in Windows Server 2008 26 Using Directory Services 27 Strong Authentication 28 Federated Identities 28 Information Protection 29 Forefront Identity Manager (FIM) 2010 29 Summary 30 Exam Essentials 31 Review Questions 32 Answers to Review Questions 34 Chapter 2 Domain Name System (DNS) 35 Introducing DNS 36 The Form of an IP Address 37 Understanding Servers, Clients, and Resolvers 42 Understanding the DNS Process 43 Introducing DNS Database Zones 49 Understanding Primary Zones 50 Understanding Secondary Zones 51 Understanding Active Directory Integrated DNS 52 Understanding Stub Zones 54 GlobalName Zones 55 Zone Transfers and Replication 56 New Functionality in Windows Server 2008 DNS 59 Background Zone Loading 59 Support for IPv6 Addresses 59 Support for Read-Only Domain Controllers 60 GlobalName Zones 60 DNS Socket Pool 61 DNS Cache Locking 61 DNS Security Extensions (DNSSEC) 61 Introducing DNS Record Types 62 Start of Authority (SOA) Records 62 Name Server (NS) Records 64 Host Record 64 Alias Record 65 Pointer (PTR) Record 65 Mail Exchanger (MX) Record 66 Service (SRV) Record 66 Configuring DNS 67 Installing DNS 67 Load Balancing with Round Robin 68 Configuring a Caching-Only Server 68 Setting Zone Properties 69 Configuring Zones for Dynamic Updates 73 Delegating Zones for DNS 74 DNS Forwarding 75 Manually Creating DNS Records 76 DNS Aging and Scavenging 78 Monitoring and Troubleshooting DNS 78 Monitoring DNS with the DNS Snap-In 79 Troubleshooting DNS 81 Summary 90 Exam Essentials 91 Review Questions 93 Answers to Review Questions 96 Chapter 3 Active Directory Planning and Installation 97 Verifying the Filesystem 99 Setting Up the NTFS Partition 100 Verifying Network Connectivity 102 Basic Connectivity Tests 103 Tools and Techniques for Testing Network Configuration 104 Understanding Domain and Forest Functionality 105 About the Domain Functional Level 106 About Forest Functionality 107 Planning the Domain Structure 109 Installing Active Directory 109 Verifying Active Directory Installation 114 Using Event Viewer 114 Using Active Directory Administrative Tools 117 Testing from Clients 119 Creating and Configuring Application Data Partitions 120 Creating Application Data Partitions 121 Managing Replicas 123 Removing Replicas 124 Using ntdsutil to Manage Application Data Partitions 124 Configuring DNS Integration with Active Directory 126 Summary 128 Exam Essentials 129 Review Questions 130 Answers to Review Questions 133 Chapter 4 Installing and Managing Trees and Forests 135 Reasons for Creating Multiple Domains 136 Reasons for Using Multiple Domains 136 Drawbacks of Multiple Domains 139 Creating Domain Trees and Forests 139 Planning Trees and Forests 140 The Promotion Process 143 Creating a Domain Tree 144 Joining a New Domain Tree to a Forest 149 Adding Additional Domain Controllers 154 Demoting a Domain Controller 154 Managing Multiple Domains 157 Managing Single-Master Operations 158 Forest Operations Masters 158 Domain Operations Masters 158 Assigning Single-Master Roles 159 Managing Trusts 161 Managing UPN Suffixes 168 Managing Global Catalog Servers 169 Managing Universal Group Membership Caching 171 Summary 172 Exam Essentials 173 Review Questions 175 Answers to Review Questions 178 Chapter 5 Configuring Sites and Replication 179 Overview of Network Planning 180 The Three Types of Network 180 Exploring Network Constraints 181 Overview of Active Directory Replication and Sites 182 Replicating Active Directory 182 Understanding Active Directory Site Concepts 183 Understanding Distributed File System Replication 187 Implementing Sites and Subnets 188 Creating Sites 189 Creating Subnets 192 Configuring Sites 195 Configuring Replication 197 Intrasite Replication 197 Intersite Replication 198 Configuring Server Topology 205 Using Universal Group Membership Caching 208 Monitoring and Troubleshooting Active Directory Replication 209 About System Monitor 209 Troubleshooting Replication 209 Summary 211 Exam Essentials 212 Review Questions 214 Answers to Review Questions 217 Chapter 6 Configuring Active Directory Server Roles 219 Understanding Server Manager 221 Configuring Active Directory Certificate Services 222 Installing Active Directory Certificate Services 224 Enrolling User and Computer Certificates 228 Certificate Templates 230 Revoking Certificates 232 Configuring Additional CA Server Settings 234 What s New in Windows Server 2008 R2 236 Understanding Active Directory Domain Services 237 Introducing the New Domain Services Features in Windows Server 2008 237 Security Features Available for Domain Services 238 What s New in Windows Server 2008 R2 241 Active Directory Federation Services 242 Installing AD FS 243 Configuring AD FS 244 Active Directory Lightweight Directory Services 245 Installing AD LDS 246 Configuring AD LDS 246 Installing AD LDS on Server Core 249 Active Directory Rights Management Services 250 AD RMS Templates 255 Summary 257 Exam Essentials 257 Review Questions 259 Answers to Review Questions 262 Chapter 7 Administering Active Directory 263 An Overview of OUs 264 The Purpose of OUs 265 Benefits of OUs 266 Planning the OU Structure 266 Logical Grouping of Resources 266 Understanding OU Inheritance 268 Delegating Administrative Control 269 Applying Group Policies 270 Creating OUs 271 Managing OUs 275 Moving, Deleting, and Renaming OUs 275 Administering Properties of OUs 276 Delegating Control of OUs 277 Troubleshooting OUs 282 Creating and Managing Active Directory Objects 282 Overview of Active Directory Objects 282 Managing Object Properties 290 Understanding Groups 293 Filtering and Advanced Active Directory Features 295 Moving, Renaming, and Deleting Active Directory Objects 297 Resetting an Existing Computer Account 298 Publishing Active Directory Objects 298 Making Active Directory Objects Available to Users 298 Publishing Printers 299 Publishing Shared Folders 300 Querying Active Directory 301 Using the Active Directory Administrative Center 303 Using the Command Prompt for Active Directory Configuration 305 Summary 306 Exam Essentials 307 Review Questions 308 Answers to Review Questions 312 Chapter 8 Configuring Group Policy Objects 313 Introducing Group Policy 314 Understanding Group Policy Settings 315 The Security Settings Section of the GPO 317 Group Policy Objects 318 Group Policy Inheritance 320 Planning a Group Policy Strategy 321 Implementing Group Policy 321 Creating GPOs 321 Linking Existing GPOs to Active Directory 324 Managing Group Policy 325 Managing GPOs 325 Security Filtering of a Group Policy 327 Delegating Administrative Control of GPOs 329 Controlling Inheritance and Filtering Group Policy 331 Assigning Script Policies 332 Understanding the Loopback Policy 334 Managing Network Configuration 334 Automatically Enrolling User and Computer Certificates in Group Policy 335 Redirecting Folders 337 Managing GPOs with Windows PowerShell Group Policy Cmdlets 339 Deploying Software through a GPO 340 The Software Management Life Cycle 340 The Windows Installer 342 Deploying Applications 346 Implementing Software Deployment 347 Preparing for Software Deployment 347 Software Restriction Policies 349 Using AppLocker 349 Group Policy Slow Link Detection 349 Publishing and Assigning Applications 350 Applying Software Updates 351 Verifying Software Installation 352 Configuring Automatic Updates in Group Policy 353 Configuring Software Deployment Settings 354 The Software Installation Properties Dialog Box 354 Removing Programs 357 Microsoft Windows Installer Settings 358 Troubleshooting Group Policies 359 RSoP in Logging Mode 360 RSoP in Planning Mode 363 Using the gpresult.exe Command 364 Summary 365 Exam Essentials 366 Review Questions 368 Answers to Review Questions 371 Chapter 9 Planning Security for Active Directory 373 Active Directory Security Overview 375 Understanding Security Principals 375 Managing Security and Permissions 386 Using ACLs and ACEs 387 Implementing Active Directory Security 389 Using User Templates 391 Delegating Control of Users and Groups 392 Using Group Policy for Security 393 Fine-Grained Password Policies 396 Understanding Smart Card Authentication 399 Preparing a Smart Card Certificate Enrollment Station 400 Configuring Group Policy Settings for Smart Cards 400 Understanding Security Configuration and Analysis Tools 401 Using the Security Configuration and Analysis Utility 402 Understanding the secedit.exe Command 403 Implementing an Audit Policy 404 Overview of Auditing 405 Implementing Auditing 405 Viewing Auditing Information 407 What s New in Windows Server 2008 R2 Auditing 408 Summary 409 Exam Essentials 410 Review Questions 411 Answers to Review Questions 414 Chapter 10 Active Directory Optimization and Reliability 415 Overview of Windows Server 2008 R2 Performance Monitoring 417 Using Windows Server 2008 R2 Performance Tools 419 Deciding What to Monitor 420 Viewing Performance Information 422 Managing Performance Monitor Properties 424 Saving and Analyzing Data with Performance Logs and Alerts 428 Monitoring and Troubleshooting Active Directory Components 430 Monitoring Domain Controller Performance 430 Monitoring Active Directory Performance with Performance Monitor 433 Using Other Performance Monitoring Tools 434 Troubleshooting Active Directory Performance Monitoring 442 Backup and Recovery of Active Directory 442 Overview of the Windows Server 2008 R2 Backup Utility 444 Backing Up Active Directory 448 Restoring Active Directory 449 Active Directory Recycle Bin 451 Restartable Active Directory 451 Offline Maintenance 452 Monitoring Replication 453 Using the ADSI Editor 454 Summary 454 Exam Essentials 455 Review Questions 457 Answers to Review Questions 460 Part II MCTS: Windows Server 2008 R2 Network Infrastructure Configuration (Exam 70-642) 461 Chapter 11 Understanding Windows Server 2008 R2 Networking 463 Understanding the OSI Model 464 Protocol Stacks 466 Communication between Stacks 475 How Microsoft s Network Components Work with the OSI Model 476 Device Drivers and the OSI Model 477 Network Protocol Basics 477 About Windows Network Models 484 Windows Peer-to-Peer Network 484 Summary 486 Exam Essentials 486 Review Questions 487 Answers to Review Questions 490 Chapter 12 Configuring TCP/IP 493 Understanding TCP/IP 494 Details of the TCP/IP Model 494 How TCP/IP Layers Communicate 495 Understanding Port Numbers 496 Understanding IP Addressing 497 The Hierarchical IP Addressing Scheme 497 Understanding Network Classes 499 Subnetting a Network 502 Implementing Subnetting 503 An Easier Way to Apply Subnetting 509 Applying Subnetting the Traditional Way 514 Working with Classless Inter-Domain Routing 522 Understanding IPv6 525 IPv6 History and Need 525 IPv6 New and Improved Concepts 526 IPv6 Addressing Concepts 528 IPv6 Integration/Migration 533 Summary 537 Exam Essentials 538 Review Questions 539 Answers to Review Questions 542 Chapter 13 Managing DHCP and DNS 545 Overview of DHCP 546 Introducing the DORA Process 547 Advantages and Disadvantages of DHCP 548 ipconfig Lease Options 549 Understanding Scope Details 550 Installing and Authorizing DHCP 552 Installing DHCP 552 Introducing the DHCP Snap-in 553 Authorizing DHCP for Active Directory 554 Creating and Managing DHCP Scopes 556 Creating a New Scope in IPv4 556 Creating a New Scope in IPv6 563 Changing Scope Properties (IPv4 and IPv6) 567 Changing Server Properties 568 Managing Reservations and Exclusions 571 Setting Scope Options for IPv4 574 Activating and Deactivating Scopes 577 Creating a Superscope for IPv4 577 Creating IPv4 Multicast Scopes 578 Integrating Dynamic DNS and IPv4 DHCP 581 Using Multiple DHCP Servers 583 Working with the DHCP Database Files 583 DNS 585 Understanding DNS Components 585 Summary 587 Exam Essentials 587 Review Questions 590 Answers to Review Questions 593 Chapter 14 Managing Routing and Remote Access 595 Understanding Routing 596 What Routing Does 596 How Routing Works 597 Routing in Windows Server 2008 R2 606 Installing RRAS 608 Configuring IP Routing 609 Creating and Managing Interfaces 609 Setting IP Routing Properties 620 Managing Routing Protocols 622 Managing Static Routes 625 Configuring TCP/IP Packet Filters 627 Configuring VPN Packet Filters 630 PPTP Packet Filters 630 L2TP Packet Filters 631 Managing IP Routing 631 Using the routeprint Command 633 Troubleshooting IP Routing 633 Troubleshooting Example 633 Summary 635 Exam Essentials 635 Review Questions 637 Answers to Review Questions 640 Chapter 15 Managing Remote Access Services 643 Overview of Dial-Up Networking 644 What DUN Does 645 How DUN Works 645 Overview of Virtual Private Networks 649 What VPNs Do 649 VPNs and Windows Server 2008 R2 650 How VPNs Work 650 Configuring Your Remote Access Server 654 Configuring PPP Options 654 Installing a VPN 657 How VPN Works 658 Enabling RRAS as a VPN 659 Configuring a VPN 659 Configuring VPN Ports 659 Troubleshooting VPNs 660 Managing Your Remote Access Server 662 Managing Remote Users with a RADIUS Server 662 Monitoring Overall Activity 663 Controlling Remote Access Logging 663 Reviewing the Remote Access Event Log 666 Monitoring Ports and Port Activity 666 Configuring a RAS or VPN Client 667 The General Tab 667 The Options Tab 668 The Security Tab 670 The Networking Tab 671 The Sharing Tab 672 Introduction to Authentication Protocols 672 Overview of Wireless Access 673 Configuring Wireless Access 674 Summary 676 Exam Essentials 676 Review Questions 677 Answers to Review Questions 681 Chapter 16 Managing Security for Remote Access Services 683 Remote Access Security 684 User Authentication 684 Connection Security 686 Access Control 687 Configuring User Access 687 Setting Up User Profiles 687 Using Network Access Policies 689 Using Remote Access Profiles 694 Setting Up a VPN Network Access Policy 699 Configuring Security 701 Controlling Server Security 701 Configuring Network Access Protection 704 Configuring Windows Firewall Options 706 Windows Firewall with Advanced Security 708 Troubleshooting Techniques 714 Summary 716 Exam Essentials 716 Review Questions 718 Answers to Review Questions 723 Chapter 17 Managing File and Print Services 725 Understanding File Servers 726 Configuring File Servers 727 Sharing Folders 728 Making Active Directory Objects Available to Users 728 Configuring Offline Folders 729 Understanding Permissions 731 Share and Storage Management console 738 Using BitLocker Drive Encryption 739 Understanding BranchCache 739 Distributed Cache Mode Requirements 740 Hosted Mode Requirements 742 Configuring DirectAccess 743 DirectAccess vs. VPNs 743 Understanding How DirectAccess Works 743 Knowing the DirectAccess Infrastructure Requirements 744 Configuring Disk Quotas 745 Configuring Distributed File System 747 Advantages of DFS 747 Types of DFS 748 Using the DFS Management Console 749 Understanding Printing 750 Creating and Publishing Printers 751 Configuring Printers 752 Migrating Print Servers 757 Summary 757 Exam Essentials 758 Review Questions 759 Answers to Review Questions 763 Chapter 18 Monitoring and Managing a Network Infrastructure 765 Configuring Windows Server Update Services 767 Windows Update 768 Windows Automatic Updates 768 Using Windows Server Update Services 770 Overview of Windows Server 2008 R2 Performance Monitoring 777 Using Windows Server 2008 R2 Performance Tools 779 Introducing the Reliability and Performance Monitor 779 Using Other Performance-Monitoring Tools 789 Backup and Recovery 802 Wbadmin Command Line Utility 803 Understanding Shadow Copies 803 Summary 805 Exam Essentials 805 Review Questions 807 Answers to Review Questions 811 Part III MCTS: Windows Server 2008 R2 Applications Infrastructure Configuration (Exam 70-643) 813 Chapter 19 Windows Server 2008 R2 Storage Services 815 Storage in Windows Server 2008 R2 816 Initializing Disks 816 Working with Basic and Dynamic Disks 817 Working with Volume Sets 819 Redundant Array of Independent Disks 820 Mount Points 824 Microsoft MPIO 824 iSCSI 826 Internet Storage Name Service 828 Fibre Channel 829 Network Attached Storage 830 Managing SANs 830 Virtual Disk Service 830 Storage Manager for SANs 832 Storage Explorer 833 Working with Virtualization 834 Benefits of Virtualization 835 Features of Microsoft Hyper-V 835 Virtualization Concepts 836 Understanding Virtual Hard Disks 837 Summary 838 Exam Essentials 838 Review Questions 839 Answers to Review Questions 841 Chapter 20 Remote Desktop Services in Windows Server 2008 R2 843 Remote Desktop Connection Display 845 Custom Display Resolutions 845 Monitor Spanning 846 Font Smoothing 846 Display Data Prioritization 847 Desktop Experience 847 Device Redirection 850 Single Sign-On for Remote Desktop Services 852 Remote Desktop Protocol Signing 853 RDP 7.0 Benefits 853 Understanding RemoteFX 854 Benefits of Using RemoteFX 854 Prepare and Configure the Use of Remote Desktop Services RemoteApp 855 Terminal Services Web Access 855 Installing Programs to Be Used with RemoteApp 856 Prepare and Configure Remote Desktop Services Gateway 858 Preparing the Necessary RD Gateway Role Services 858 Obtaining and Configuring a Certificate for RD Gateway 858 Creating Remote Desktop Services Connection Authorization Policies 860 Creating Remote Desktop Services Resource Authorization Policies 861 Configuring the Remote Desktop Services Client for RD Gateway 862 Configuring Remote Desktop Services Load Balancing 862 Configuring a Remote Desktop Services Server Farm with RD Connection Broker 863 Configuring Network Load Balancing 865 Configuring Remote Desktop Licensing 866 Remote Desktop Services Client Access Licenses 866 Installing RD Licensing and RD Client Access Licenses 867 Configuring License Settings on an RD Session Host 872 Remote Administration in Windows Server 2008 R2 874 Managing Remote Desktop Services through Group Policy 874 Group Policy Settings for Remote Desktop Services 875 Configuring Global Deployment Settings for RemoteApp 877 Monitoring RD Gateway Using RD Gateway Manager 880 Summary 882 Exam Essentials 884 Review Questions 885 Answers to Review Questions 887 Chapter 21 Configuring Web Services Infrastructure 889 Configuring Web Applications 890 Installing IIS 7.5 891 Creating and Configuring Websites 892 Configuring a File Transfer Protocol Server 903 Configuring Permissions 904 Configuring FTP Site for Extranet Users 905 FTP IPv4 and Domain Restrictions 905 WebDAV and FTP 906 Configuring a Simple Mail Transfer Protocol Server 907 Configuring General SMTP Virtual Server Properties 907 Configuring Access 909 Configuring Message Size and Transfer Limits 910 Configuring Delivery Options 911 Summary 914 Exam Essentials 915 Review Questions 916 Answers to Review Questions 918 Chapter 22 Advanced Web Infrastructure Configuration 919 Managing Internet Information Services 920 Configuring Monitoring and Logging 921 Backup and Restore 927 Delegating Administrative Rights 929 Configuring Secure Sockets Layer Security 932 Requesting and Renewing SSL Certificates 933 Enabling SSL on a Website 935 Exporting and Importing Certificates 936 Configuring Website Authentication and Permissions 937 Configuring Application Access 939 Client Certificate Mapping 940 Summary 941 Exam Essentials 941 Review Questions 942 Answers to Review Questions 944 Chapter 23 Configuring Additional Communication Services 945 Configuring Fax Services 946 Configuring Fax (Local) Properties 947 Defining a Dialing Rule 949 Defining a Fax Routing Location 950 Configuring a Media Server 951 Configuring Basic Streaming Solutions 953 Configuring Advanced Streaming Solutions 958 Options for Configuring Security in a Windows Media Server 961 Web-Based Administration 964 Configuring Digital Rights Management 964 How Does DRM Work? 965 Encryption 966 Sharing Business Rules 967 Configuring License Delivery 968 Configuring Policy Templates 969 Summary 971 Exam Essentials 971 Review Questions 972 Answers to Review Questions 974 Chapter 24 Configuring Windows SharePoint 2010 Foundation 975 Configuring SharePoint Foundation 2010 976 Configuring Incoming Email Settings 977 Configuring Outgoing Email Settings 979 Configuring Workflow Settings 982 Configuring Diagnostic Logging Settings 984 Configuring Antivirus Settings 985 Configuring Backups 987 Recovery 989 Audience Targeting 990 SharePoint Permissions 991 Configuring Windows SharePoint Foundation 2010 Sites 992 Upgrading from WSS 3.0 993 Configuring Alternate Access Mapping 996 Creating Quota Templates 997 Creating Site Collections 998 Enabling Access for End Users 998 Configuring Authentication for SharePoint Foundation 2010 999 Configure Digest Authentication 1000 Configuring Web SSO Authentication by Using ADFS 1001 Summary 1001 Exam Essentials 1002 Review Questions 1003 Answers to Review Questions 1005 Chapter 25 Using Virtualization in Windows Server 2008 R2 1007 Hyper-V Overview 1008 What Is Virtualization? 1008 Hyper-V Features 1009 Hyper-V Architecture 1010 Hyper-V Requirements 1012 Hyper-V Installation and Configuration 1013 Install the Hyper-V Role 1013 Hyper-V in Server Manager 1015 Using Hyper-V Manager 1015 Configure Hyper-V Settings 1016 Manage Virtual Networks 1017 Managing Virtual Hard Disks 1020 Configuring Virtual Machines 1025 Creating and Managing Virtual Machines 1025 Back Up and Restore Virtual Machines 1032 Summary 1036 Exam Essentials 1037 Review Questions 1038 Answers to Review Questions 1040 Chapter 26 Deploying Servers 1041 Windows Deployment Services 1042 Deploying Images by Using Windows Deployment Services 1043 Using Windows Deployment Services 1044 Configuring WDS 1046 Image Types 1049 Capturing Images 1050 Deploying Server Core 1052 Configuring Microsoft Windows Activation 1054 Installing KMS 1055 Configuring KMS 1057 Summary 1059 Exam Essentials 1060 Review Questions 1061 Answers to Review Questions 1063 Chapter 27 Configuring High Availability in Windows Server 2008 R2 1065 Components of High Availability 1066 Achieving High Availability 1067 High Availability Foundation 1067 Achieving High Availability with Failover Clustering 1069 Failover Clustering Requirements 1071 Cluster Quorum 1072 Validating a Cluster Configuration 1074 Creating a Cluster 1078 Clustered Application Settings 1081 Resource Properties 1083 New Windows Server 2008 R2 Clustering Features 1086 Achieving High Availability with Network Load Balancing 1087 How Does Network Load Balancing Work? 1087 Network Load Balancing Requirements 1088 Creating an NLB Cluster 1089 Modifying Cluster Properties 1089 Managing NLB Clusters 1091 Summary 1092 Exam Essentials 1092 Review Questions 1093 Answers to Review Questions 1095 Appendix About the Companion CD 1097 Index 1101

About the Author

William Panek , MCT, MCTS, MCITP, MCSA+ Security and Messaging, MCSE+ Security and Messaging, MCDBA, CCNA, CHFI, is founder of Stellacon Corporation, a Microsoft Certified Gold Partner and a Certified Learning Solutions Provider, and leading training provider on the East Coast. He has authored numerous Microsoft certification books, including MCTS: Windows 7 Configuration Study Guide, MCTS: Windows Server 2008 Active Directory Configuration Study Guide, and MCTS: Windows Server Network Infrastructure Configuration Study Guide, all from Sybex.