Introduction xxvii Chapter 1 Introducing Windows Server 2012 R2 2 "Do I Know This Already?" Quiz 4 Foundation Topics 8 What's New in Windows Server 2012 and Windows Server 2012 R2 8 What's New in Windows Server 2012 R2 12 Windows Server 2012 R2 Editions 14 Windows Server 2012 R2 User Interface 15 Server Manager 18 Adding Roles and Features 21 Planning for Server Installation and Upgrades 23 Identifying Hardware Requirements 23 Choosing an Install Method 23 Considering Upgrades 24 Server Roles and Role Migration 26 Windows Server 2012 R2 Server Roles 26 Role Migration 30 Features on Demand 31 Exam Preparation Tasks 32 Review All the Key Topics 32 Complete the Tables and Lists from Memory 33 Definitions of Key Terms 33 Chapter 2 Installing and Configuring Windows Server 2012 R2 34 "Do I Know This Already?" Quiz 35 Foundation Topics 40 Windows Server 2012 R2 Hardware Requirements 40 Installing Windows Server 2012 R2 41 Installing a Windows Server Core Computer 42 Installing the Full GUI Server 48 Upgrading a Windows Server 2008 Computer 49 Converting Between Core and GUI 50 Delegation of Server Administration 51 Preparing for a Delegation Model 52 Establishing Delegate Access 53 Leveraging Active Directory 54 Identifying Administration Tools 55 Windows PowerShell Desired State Configuration 56 Configuring Offline Server Images 59 Deployment Image Servicing and Management 60 Using DISM to Enable Remote Desktop Services 62 Configuring Remote Server Roles 65 Configuring Windows Server 2012 R2 Services 68 Services.msc 69 SC Commands 71 Configuring NIC Teaming 72 Configure NIC Teaming via GUI 73 Configure Basic NIC Teaming via PowerShell 75 Exam Preparation Tasks 76 Review All the Key Topics 76 Complete the Tables and Lists from Memory 77 Definitions of Key Terms 77 Chapter 3 Configuring Windows Server 2012 R2 Local Storage 78 "Do I Know This Already?" Quiz 79 Foundation Topics 83 Designing Storage Spaces 83 Optimal Storage Allocation 83 Improved Administrative Control 84 Scalability 84 High Availability 85 Configuring Basic and Dynamic Disks 86 Configuring MBR and GPT Disks 88 Managing Volumes 89 Converting Disks 94 RAID Volumes 96 Creating a RAID 0 Volume 97 Creating a Spanned Volume 99 Creating a Mirrored Volume 99 Creating a RAID-5 Volume 99 Creating and Mounting Virtual Hard Disks 101 Creating VHDs 102 Mounting VHDs 103 Configuring Storage Pools and Disk Pools 105 Creating Storage Spaces 110 Creating and Managing Volumes 115 Using PowerShell 117 Exam Preparation Tasks 118 Review All the Key Topics 118 Complete the Tables and Lists from Memory 119 Definitions of Key Terms 119 Chapter 4 Configuring Access to Files and Shares 120 "Do I Know This Already?" Quiz 121 Foundation Topics 127 Shared Folders in Windows Server 2012 R2 127 Understanding the File and Storage Services Role in Windows Server 2012 R2 127 Creating a Shared Folder 130 Offline Files 144 Configuring Servers for Offline Files 145 Configuring Client Computers 147 Configuring Offline File Policies 147 Using the Always Offline Mode 149 Configuring Transparent Caching of Offline Files 151 Creating and Configuring Work Folders 152 Enabling and Configuring Work Folders 154 Configuring Client Computers for Work Folders 159 NTFS Permissions 161 NTFS File and Folder Permissions 161 Effective Permissions 171 Copying and Moving Files and Folders 173 Practical Guidelines on Sharing and Securing Folders 175 Access-Based Enumeration of Files and Folders 176 Configuring Volume Shadow Copy Service 178 Configuring Shadow Copies of Shared Folders 179 Guidelines for Using VSS 182 Configuring NTFS Quotas 182 Using File Explorer to Enable Disk Quotas 183 Using FSRM to Create Quota Templates 186 Some Guidelines for Using Quotas 188 Exam Preparation Tasks 189 Review All the Key Topics 189 Complete the Tables and Lists from Memory 191 Definitions of Key Terms 191 Chapter 5 Configuring and Monitoring Print and Document Services 192 "Do I Know This Already?" Quiz 193 Foundation Topics 199 Printing Terminology in Windows Server 2012 R2 199 The Printing Process 200 New Features of Print and Document Services in Windows Server 2012 R2 202 Installing, Sharing, and Publishing Printers 204 Installing the Print and Document Services Role 204 Installing Printers 208 Sharing Printers 212 Publishing Printers in Active Directory 213 Using Group Policy to Deploy Printer Connections 215 Branch Office Direct Printing 216 Configuring Drivers Including the Easy Print Driver 218 Printer Driver Challenges 218 Easy Print Driver 220 Managing and Troubleshooting Printers 221 Using the Printer Properties Dialog box 222 Migrating Print Queues and Printer Settings 228 Isolating Printer Drivers 230 Configuring Location-Aware Printer Settings 231 Delegating Print Management 232 Troubleshooting Printer Problems 234 Exam Preparation Tasks 237 Review All the Key Topics 237 Complete the Tables and Lists from Memory 238 Definitions of Key Terms 238 Chapter 6 Configuring Remote Management of Servers 240 "Do I Know This Already?" Quiz 241 Foundation Topics 245 Configuring WinRM 245 Installation and Configuration of WinRM 245 Windows Remote Shell 247 Configuring Down-level Server Management 248 Preparing Down-level Server Core Installations 249 Configuring Multiple Server Management 249 Using Server Manager for Remote Management 249 Remote Management of Server Core Machines 258 Remote Server Administration Tools 258 Microsoft Management Console 260 Windows PowerShell 267 Configuring Daily Management Tasks 270 Task Scheduler 270 Active Directory Administrative Center 276 Exam Preparation Tasks 277 Review All the Key Topics 277 Complete the Tables and Lists from Memory 278 Definitions of Key Terms 278 Chapter 7 Configuring Hyper-V 280 "Do I Know This Already?" Quiz 281 Foundation Topics 285 Introduction to Hyper-V 285 What's New in Hyper-V Server 286 Installing the Hyper-V Server Role 288 Install Hyper-V Using PowerShell 294 Creating and Configuring Virtual Machine Settings 294 Configuring a Virtual Machine 296 Additional Virtual Machine Components 308 Managing Virtual Machines 312 Configuring Dynamic Memory 314 Configuring Smart Paging 316 Configuring Resource Metering 317 Configuring Guest Integration Services 319 Exam Preparation Tasks 322 Review All the Key Topics 322 Complete the Tables and Lists from Memory 323 Definitions of Key Terms 323 Chapter 8 Creating and Configuring Virtual Machine Storage 324 "Do I Know This Already?" Quiz 325 Foundation Topics 329 Creating and Configuring Virtual Hard Disks and Differencing Drives 329 Fixed-Size Disks 329 Dynamically Expanding Disks 334 Differencing Disks 335 Virtual Hard Disk Management 344 Hard Disk Sharing 355 Storage Quality of Service 355 Importing, Exporting, Migrating, and Replicating Virtual Machines 356 Configuring Pass-Through Disks 364 Managing Checkpoints 367 Creating and Reverting to a Previous Checkpoint 368 Managing Multiple Checkpoints 369 Implementing Virtual Fibre Channel Adapters 370 Virtual SAN Support 371 Advanced Fibre Channel Adapter Features 373 Exam Preparation Tasks 374 Review All the Key Topics 374 Complete the Tables and Lists from Memory 374 Definitions of Key Terms 375 Chapter 9 Creating and Configuring Virtual Networks 376 "Do I Know This Already?" Quiz 377 Foundation Topics 381 Network Virtualization Using Hyper-V 381 Planning for Network Virtualization 383 Network Virtualization Components 383 Configuring Virtual Network Switches 388 Optimizing Virtual Network Performance 395 Configuring MAC Addresses 398 Dynamic MAC Addresses 398 Static MAC Addresses 400 MAC Address Spoofing 401 Configuring Network Isolation 402 Virtual Switch Trunking 403 Using PVLANs for Isolation 404 Configure PVLAN Ports 405 Configuring Virtual Network Adapters 406 Configuring an Emulated (Legacy) Network Adapter 407 Configuring a Network Adapter 408 Configure a Virtual NIC Team 411 Advanced Adapter Features 412 Hyper-V Network Virtualization PowerShell Cmdlets 416 Exam Preparation Tasks 418 Review All the Key Topics 418 Complete the Tables and Lists from Memory 419 Definitions of Key Terms 419 Chapter 10 Configuring IPv4 and IPv6 Addressing 420 "Do I Know This Already?" Quiz 422 Foundation Topics 426 Concepts of TCP/IP 426 TCP/IP History in Brief 426 The TCP/IP Protocol Stack 427 The TCP/IP Component Protocols 429 New and Improved Networking Technologies in Windows Server 2012 R2 433 IPv4 Addressing 434 Static IPv4 Addressing 435 Subnetting and Supernetting in IPv4 437 Dynamic IP Addressing 441 Configuring IPv4 Address Options 441 Using the Command Line to Configure IPv4 Addressing Options 445 IPv6 Addressing 447 IPv6 Address Syntax 448 Connecting to a TCP/IP Version 6 Network 451 TCP/IPv6 PowerShell Cmdlets 453 Interoperability Between IPv4 and IPv6 Addresses 454 Compatibility Addresses 455 ISATAP Addresses 455 6to4 Addresses 456 Teredo Addresses 458 Using Group Policy to Configure IPv6 Transition Technologies 459 Resolving IPv4 and IPv6 Network Connectivity Issues 461 Windows Server 2012 R2 Network Diagnostics Tools 461 Using TCP/IP Utilities to Troubleshoot TCP/IP 463 Troubleshooting IPv4 and IPv6 Problems 469 Exam Preparation Tasks 473 Review All the Key Topics 473 Complete the Tables and Lists from Memory 474 Definitions of Key Terms 474 Chapter 11 Configuring Dynamic Host Configuration Protocol (DHCP) 476 "Do I Know This Already?" Quiz 477 Foundation Topics 482 How DHCP Works 482 What's New with DHCP in Windows Server 2012 and Windows Server 2012 R2 482 The Four-Phase DHCP IPv4 Leasing Process 484 Renewing an IPv4 Lease 487 How DHCPv6 Works 488 Installing and Configuring a DHCP Server 489 Using Server Manager to Install DHCP 490 Using Windows PowerShell to Install DHCP 492 DHCP Scopes and Options 493 Creating DHCP Scopes 493 Configuring DHCP Scope Properties 498 Configuring DHCP Options 499 Configuring PXE Boot 508 Configuring DHCP Options for PXE 508 Monitoring and Troubleshooting a DHCP Server 510 Managing and Authorizing DHCP Servers 513 Authorizing a DHCP Server in Active Directory 513 Configuring DHCP Relay Agents 515 Exam Preparation Tasks 519 Review All the Key Topics 519 Complete the Tables and Lists from Memory 520 Definitions of Key Terms 520 Chapter 12 Deploying and Configuring Domain Name System (DNS) 522 "Do I Know This Already?" Quiz 523 Foundation Topics 528 Introduction to DNS 528 The Hierarchical Nature of DNS 529 The DNS Name Resolution Process 533 What's New in Windows Server 2012 R2? 536 Installing DNS in Windows Server 2012 R2 537 Using PowerShell to Install DNS 539 Using PowerShell for DNS Server Administration 539 Zone Types and Their Uses 541 DNS Zone Types 542 Configuring DNS Server Properties 545 Interfaces Tab 545 Forwarders Tab 546 Advanced Tab 548 Root Hints Tab 550 Debug Logging Tab 552 Event Logging Tab 553 Monitoring Tab 554 Security Tab 555 Configuring Common Resource Records 556 New Host (A or AAAA) Records 558 New Alias (CNAME) 559 New Mail Exchanger (MX) 560 Additional New Resource Records 560 Deleting Resource Records 562 Using the Command Line to Create Resource Records 563 Exam Preparation Tasks 563 Review All the Key Topics 563 Complete the Tables and Lists from Memory 564 Definitions of Key Terms 564 Chapter 13 Installing Domain Controllers 566 "Do I Know This Already?" Quiz 568 Foundation Topics 572 The Building Blocks of Active Directory 572 Namespaces 572 Objects 573 Containers 573 Schemas 574 Global Catalogs 574 Partitions 575 Naming Standards of X.500 and LDAP 576 Logical Components of Active Directory 578 Physical Components of Active Directory 583 New Features of Active Directory in Windows Server 2012 and Windows Server 2012 R2 588 Planning the Active Directory Namespace 589 Subdividing the Active Directory Namespace 590 Administrative or Geographical Organization of Domains 591 Use of Multiple Trees 592 Best Practices 593 Creating Forests and Domains 594 Requirements for Installing Active Directory Domain Services 594 Installing Active Directory Domain Services 595 Performing Unattended Installations of Active Directory 606 Adding, Removing, and Upgrading Domain Controllers 608 Forest and Domain Functional Levels 609 The Adprep Utility 611 Upgrading a Windows Server 2008 Domain Controller 612 Removing Active Directory 614 Installing a Server Core Domain Controller 617 Using the Install from Media Option 617 Creating Installation Media 618 Deploying Domain Controllers Using the IFM Option 619 Configuring Global Catalog Servers 621 Planning the Placement of Global Catalog Servers 621 Promoting Domain Controllers to Global Catalog Servers 623 Deploying Active Directory Infrastructure as a Service in Windows Azure 624 Installing an AD DS Forest in Windows Azure 625 Installing a Replica Domain Controller on Windows Azure 627 Troubleshooting Active Directory Installations 628 Verifying the Proper Installation of Active Directory 628 Resolving SRV Record Registration Issues 634 Exam Preparation Tasks 636 Review All the Key Topics 636 Complete the Tables and Lists from Memory 637 Definitions of Key Terms 637 Chapter 14 Active Directory User and Computer Accounts 638 "Do I Know This Already?" Quiz 639 Foundation Topics 644 Creating User and Computer Accounts 644 Introducing User Accounts 644 Manually Creating User Accounts 645 Creating Computer Accounts 649 Using Template Accounts 650 Using Bulk Import to Automate Account Creation 651 Configuring the UPN 656 Configuring Contacts 659 Managing and Maintaining Accounts 660 Password Resets 660 Protected Admin 661 Offline Domain Join 663 Configuring User Rights 665 Inactive and Disabled Accounts 666 Exam Preparation Tasks 667 Review All the Key Topics 667 Complete the Tables and Lists from Memory 668 Definitions of Key Terms 668 Chapter 15 Active Directory Groups and Organizational Units (OUs) 670 "Do I Know This Already?" Quiz 671 Foundation Topics 676 Creating and Managing Group Accounts 676 Creating Group Accounts 681 Configuring Group Membership 683 Creating Distribution Lists 685 AGDLP/AGUDLP 686 Local Versus Domain Groups 688 Enumerating Group Membership 690 Creating and Managing Organizational Units 691 Planning the OU Structure of Your Domain 691 Creating Organizational Units 694 Managing Organizational Units 696 Delegating Active Directory Object Management 700 Exam Preparation Tasks 705 Review All the Key Topics 705 Complete the Tables and Lists from Memory 706 Definitions of Key Terms 706 Chapter 16 Creating and Applying Group Policy Objects 708 "Do I Know This Already?" Quiz 709 Foundation Topics 713 Overview of Group Policy 713 Components of Group Policy 713 New Features of Group Policy in Windows Server 2012 and Windows Server 2012 R2 716 Creating and Applying GPOs 719 Using Starter GPOs 724 Shell Access Policies 726 Managing GPOs and Their Links 727 Linking GPOs 727 Managing GPO Links 729 Deleting a GPO 730 Disabling GPOs or Portions of GPOs 731 Specifying a Domain Controller 731 Using Windows PowerShell 733 Configuring Multiple Local Group Policies 735 MMC and Multiple Local Group Policies 736 Using Multiple Local Group Policies 737 Managing Restricted Groups 738 Local Users and Groups Extension 741 Configuring Group Policy Common Options 744 Configuring Security Filtering 746 Denying the Application of a GPO 746 Windows Management Instrumentation 748 Exam Preparation Tasks 749 Review All the Key Topics 749 Complete the Tables and Lists from Memory 750 Definitions of Key Terms 750 Chapter 17 Configuring Security Policies 752 "Do I Know This Already?" Quiz 753 Foundation Topics 759 Configuring User Rights Assignment 759 Configuring Security Options Settings 762 Using Additional Security Configuration Tools 765 Password and Account Lockout Policies 767 Auditing of Active Directory Services 770 New Audit Functionality 770 Active Directory Auditing 770 Using GPOs to Configure Auditing 771 Using Auditpol.exe to Configure Auditing 777 Configuring User Account Control 778 Using Control Panel to Configure UAC 779 Configuring UAC via Policy 779 Exam Preparation Tasks 781 Review All the Key Topics 781 Complete the Tables and Lists from Memory 781 Definitions of Key Terms 782 Chapter 18 Configuring Application Restriction Policies 784 "Do I Know This Already?" Quiz 785 Foundation Topics 790 Introducing Rule Enforcement 790 Configuring Software Restriction Policies 790 Configuring AppLocker Rules 797 Capabilities of AppLocker 797 Basic Configuration of AppLocker Policies 799 Creating Additional AppLocker Rules 802 Exam Preparation Tasks 808 Review All the Key Topics 808 Complete the Tables and Lists from Memory 808 Definitions of Key Terms 808 Chapter 19 Configuring Windows Firewall 810 "Do I Know This Already?" Quiz 811 Foundation Topics 818 Configuring Windows Firewall 818 Basic Windows Firewall Configuration 819 Configuring Windows Firewall Using PowerShell 825 Using the Windows Firewall with Advanced Security Snap-in 826 Overview of Default Windows Firewall with Advanced Security Rules 828 Configuring Multiple Firewall Profiles 828 Configuring Security Rules 830 Configuring Inbound Rules or Outbound Rules 830 Configuring Connection Security Rules 836 Configuring Rule Properties 842 Configuring Notifications 847 Configuring Firewall Properties and Authenticated Exceptions 848 Creating Windows Firewall with Advanced Security Policies 848 Windows Firewall Group Policy Property Settings 850 Configuring Authenticated Bypass 851 Exporting and Importing Firewall Settings 853 Exam Preparation Tasks 854 Review All the Key Topics 854 Definitions of Key Terms 855 Practice Exam 1 856 Answers to Practice Exam 1 884 Appendix A Answers to the "Do I Know This Already?" Quizzes 902 Glossary 934 Index 954 On The CD: Practice Exam 2 Answers to Practice Exam 2 Appendix B Memory Tables Appendix C Memory Tables Answer Key
Don Poulton (A+, Network+, Security+, MCSA, MCSE) is an independent consultantwho has been involved with computers since the days of 80-column punch cards. After more than 20 years in environmental science, Don switched careers and trained as a Windows NT 4.0 MCSE. He has been involved in consulting with a couple of small training providers as a technical writer, during which time he wrote training and exam prep materials for Windows NT 4.0, Windows 2000, and Windows XP. Don has written or contributed to several titles, including Security+ Lab Manual (Que, 2004); MCSA/MCSE 70-299 Exam Cram 2: Implementing and Administering Security in a Windows 2003 Network (Exam Cram 2) (Que, 2004); MCSE 70-294 Exam Prep: Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure (Que, 2006); MCTS 70-620 Exam Prep: Microsoft Windows Vista, Configuring (Que, 2008); MCTS 70-680 Cert Guide: Microsoft Windows 7, Configuring (Que, 2011); MCTS 70-640 Cert Guide: Windows Server 2008 Active Directory, Configuring (Que, 2011); MCTS 70-642 Cert Guide: Windows Server 2008 Network Infrastructure, Configuring (Que, 2012); and MCSA 70-687 Cert Guide: Configuring Microsoft Windows 8.1 (Que, 2014). In addition, he has worked on programming projects, both in his days as an environmental scientist and more recently with Visual Basic to update an older statistical package used for multivariate analysis of sediment contaminants. When not working on computers, Don is an avid amateur photographer who has had his photos displayed in international competitions and published in magazines such as Michigan Natural Resources Magazine and National Geographic Traveler. Don also enjoys traveling and keeping fit. Don lives in Burlington, Ontario, with his wife, Terry. David G. Camardella has more than 14 years of experience as a systems architect, network engineer, and IT manager. Throughout his career, David has used his technical and leadership skills to successfully support infrastructures from small to large organizations. David's experience includes managing a North American datacenter, branch office server rooms, LAN/WLAN/WAN infrastructures, Active Directory/Messaging infrastructures, private clouds, and client computing systems. Over the years, David has performed technical editing for several Microsoft and Cisco books. He holds a bachelor of science in business management as well as several levels of IT certifications, including MCSE. In his spare time, David enjoys spending time with his family and engaging in outdoor activities and home brewing.