Microsoft Certification Exam Objectives Exam #70-411: Administering Microsoft Windows Server 2012 Objective Chapter Deploy, manage, and maintain servers Deploy and manage server images 1 Implement patch management 2 Monitor servers 4 Configure File and Print Services Configure Distributed File System 3 Configure File Server Resource Manager 3 Configure file and disk encryption 3 Configure advanced audit policies 4 Configure network services and access Configure DNS zones 11 Configure DNS records 11 Configure virtual private network (VPN) and routing 5 Configure DirectAccess 5 Configure a Network Policy Server (NPS) Infrastructure Configure Network Policy Server 6 Configure NPS policies 6 Configure Network Access Protection (NAP) 6 Configure and manage Active Directory Configure service authentication 8 Configure Domain Controllers 7 Maintain Active Directory 7 Configure account policies 8 Configure and manage Group Policy Configure Group Policy processing 10 Configure Group Policy settings 9 Manage Group Policy objects 10 Configure Group Policy preferences 9 Copyright 2015 Cengage Learning. All Rights Reserved. May not be copied, scanned, or duplicated, in whole or in part. Due to electronic rights, some third party content may be suppressed from the eBook and/or eChapter(s). Editorial review has deemed that any suppressed content does not materially affect the overall learning experience. Cengage Learning reserves the right to remove additional content at any time if subsequent rights restrictions require it. MCSA Guide to Administering Microsoft® Windows Server® 2012/R2, Exam 70-411 Copyright 2015 Cengage Learning. All Rights Reserved. May not be copied, scanned, or duplicated, in whole or in part. Due to electronic rights, some third party content may be suppressed from the eBook and/or eChapter(s). Editorial review has deemed that any suppressed content does not materially affect the overall learning experience. Cengage Learning reserves the right to remove additional content at any time if subsequent rights restrictions require it. Copyright 2015 Cengage Learning. All Rights Reserved. May not be copied, scanned, or duplicated, in whole or in part. Due to electronic rights, some third party content may be suppressed from the eBook and/or eChapter(s). Editorial review has deemed that any suppressed content does not materially affect the overall learning experience. Cengage Learning reserves the right to remove additional content at any time if subsequent rights restrictions require it. MCSA Guide to Administering Microsoft® Windows Server® 2012/R2, Exam 70-411 Greg Tomsho Australia • Brazil • Japan • Korea • Mexico • Singapore • Spain • United Kingdom • United States Copyright 2015 Cengage Learning. All Rights Reserved. May not be copied, scanned, or duplicated, in whole or in part. Due to electronic rights, some third party content may be suppressed from the eBook and/or eChapter(s). Editorial review has deemed that any suppressed content does not materially affect the overall learning experience. Cengage Learning reserves the right to remove additional content at any time if subsequent rights restrictions require it. This is an electronic version of the print textbook. Due to electronic rights restrictions, some third party content may be suppressed. Editorial review has deemed that any suppressed content does not materially affect the overall learning experience. The publisher reserves the right to remove content from this title at any time if subsequent rights restrictions require it. For valuable information on pricing, previous editions, changes to current editions, and alternate formats, please visit www.cengage.com/highered to search by ISBN#, author, title, or keyword for materials in your areas of interest. Copyright 2015 Cengage Learning. All Rights Reserved. May not be copied, scanned, or duplicated, in whole or in part. Due to electronic rights, some third party content may be suppressed from the eBook and/or eChapter(s). Editorial review has deemed that any suppressed content does not materially affect the overall learning experience. Cengage Learning reserves the right to remove additional content at any time if subsequent rights restrictions require it. MCSA Guide to Administering © 2015 Cengage Learning Microsoft® Windows Server® 2012/R2, WCN: 02-200-201 Exam 70-411 Greg Tomsho ALL RIGHTS RESERVED. No part of this work covered by the copyright herein Contributors: Matt Tomsho and Jack Hogue may be reproduced, transmitted, stored, or used in any form or by any means graphic, electronic, or mechanical, including but not limited to photocopying, Vice President, General Manager: Dawn Gerrain recording, scanning, digitizing, taping, Web distribution, information networks, Product Director: Kathleen McMahon or information storage and retrieval systems, except as permitted under Section 107 or 108 of the 1976 United States Copyright Act, without the prior Product Team Manager: Nick Lombardi written permission of the publisher. Director, Development: Marah Bellegarde Some of the product names and company names used in this book have been used for identification purposes Product Development Manager: Leigh Hefferon only and may be trademarks or registered trademarks of their respective manufacturers and sellers. Senior Content Developer: Microsoft is a registered trademark of Microsoft Corporation in the United States and/or other countries. Michelle Ruelos Cannistraci Any fictional data related to persons or companies or URLs used throughout this book is intended for instruc- tional purposes only. At the time this book was printed, any such data was fictional and not belonging to any Development Editor: Lisa M. Lord real persons or companies. Product Assistant: Scott Finger The programs in this book are for instructional purposes only. They have been tested with care, but are not guaranteed for any particular intent beyond educational purposes. The author and the publisher do not offer Marketing Manager: Eric La Scola any warranties or representations, nor do they accept any liabilities with respect to the programs. Senior Production Director: Wendy Troeger Production Manager: Patty Stephan For product information and technology assistance, contact us at Cengage Learning Customer & Sales Support, 1-800-354-9706. Senior Content Project Manager: For permission to use material from this text or product, Brooke Greenhouse submit all requests online at www.cengage.com/permissions. Art Director: GEX Publishing Services Further permissions questions can be e-mailed to Cover image: ©iStockphoto.com/agsandrew [email protected]. Library of Congress Control Number: 2014943050 ISBN-13: 978-1-285-86834-9 ISBN-10: 1-285-86834-X Course Technology 20 Channel Center St. Boston, MA 02210 USA Cengage Learning is a leading provider of customized learning solutions with office locations around the globe, including Singapore, the United Kingdom, Australia, Mexico, Brazil, and Japan. Locate your local office at www.cengage.com/global. Cengage Learning products are represented in Canada by Nelson Education, Ltd. To learn more about Cengage Learning, visit www.cengage.com Purchase any of our products at your local college store or at our preferred online store www.cengagebrain.com. Notice to the Reader Publisher does not warrant or guarantee any of the products described herein or perform any independent analysis in connection with any of the product information contained herein. Publisher does not assume, and expressly disclaims, any obligation to obtain and include information other than that provided to it by the manufacturer. The reader is expressly warned to consider and adopt all safety precautions that might be indicated by the activities described herein and to avoid all potential hazards. By following the instructions contained herein, the reader willingly assumes all risks in connection with such instructions. The publisher makes no representations or warranties of any kind, including but not limited to, the warranties of fitness for particular purpose or merchantability, nor are any such representations implied with respect to the material set forth herein, and the publisher takes no responsibility with respect to such material. The publisher shall not be liable for any special, consequential, or exemplary damages resulting, in whole or part, from the readers’ use of, or reliance upon, this material. Printed in the United States of America 1 2 3 4 5 6 7 18 17 16 15 14 Copyright 2015 Cengage Learning. All Rights Reserved. May not be copied, scanned, or duplicated, in whole or in part. Due to electronic rights, some third party content may be suppressed from the eBook and/or eChapter(s). Editorial review has deemed that any suppressed content does not materially affect the overall learning experience. Cengage Learning reserves the right to remove additional content at any time if subsequent rights restrictions require it. Brief Contents INTRODUCTION xiii ChApTeR 1 Deploying Windows Server 1 ChApTeR 2 Windows Server Update Services 47 ChApTeR 3 Advanced File Services Configuration 79 ChApTeR 4 Server Monitoring and Auditing 129 ChApTeR 5 Remote Access Configuration 169 ChApTeR 6 Network Policy Configuration 215 ChApTeR 7 Domain Controller and Active Directory Management 253 ChApTeR 8 User and Service Account Configuration 297 ChApTeR 9 Group Policy Settings and Preferences 327 ChApTeR 10 Managing Group Policies 371 ChApTeR 11 Managing and Configuring DNS 405 AppeNDIX A MCSA Exam 70-411 Objectives 447 GlOSSARy 449 INDeX 457 v Copyright 2015 Cengage Learning. All Rights Reserved. May not be copied, scanned, or duplicated, in whole or in part. Due to electronic rights, some third party content may be suppressed from the eBook and/or eChapter(s). Editorial review has deemed that any suppressed content does not materially affect the overall learning experience. Cengage Learning reserves the right to remove additional content at any time if subsequent rights restrictions require it. Copyright 2015 Cengage Learning. All Rights Reserved. May not be copied, scanned, or duplicated, in whole or in part. Due to electronic rights, some third party content may be suppressed from the eBook and/or eChapter(s). Editorial review has deemed that any suppressed content does not materially affect the overall learning experience. Cengage Learning reserves the right to remove additional content at any time if subsequent rights restrictions require it. Contents INTRODUCTION xiii ChApTeR 1 Deploying Windows Server 1 An Overview of Windows Deployment Services 2 The WDS Process 4 WDS Requirements 5 Windows Deployment Services Situations 5 Attended Deployment of a Noncustomized Install Image 5 Attended Deployment of a Customized Install Image 7 Unattended Deployment of a Customized Install Image 7 Installing and Configuring the WDS Role 8 WDS Initial Configuration 9 WDS Server Properties 14 Working with WDS Images 20 Working with Boot Images 21 Working with Install Images 28 Creating Unattended Installations 32 Working with Discover Images 36 Updating Images 37 Using PowerShell with WDS 39 Configuring DHCP for WDS 39 Chapter Summary 40 Key Terms 40 Review Questions 41 Case Projects 45 ChApTeR 2 Windows Server Update Services 47 An Overview of Windows Server Update Services 48 Windows Update 49 Installing the WSUS Role 50 WSUS Storage Requirements 51 WSUS Deployment Options 51 Installing WSUS 53 Configuring WSUS 57 Creating Computer Groups 57 Assigning Computers to Groups 58 Configuring Windows Update on Client Computers 60 WSUS Synchronization and Approval Rules 65 Using Automatic Approvals 66 Configuring Manual Approval 67 Additional WSUS Configuration Tasks 70 Configuring Update Sources and Proxy Servers 70 Updating Files and Languages 71 Configuring SSL 73 Upgrading a WSUS Server 73 Creating WSUS Reports 73 Configuring WSUS with PowerShell 74 Chapter Summary 75 Key Terms 76 Review Questions 76 Case Projects 78 vii Copyright 2015 Cengage Learning. All Rights Reserved. May not be copied, scanned, or duplicated, in whole or in part. Due to electronic rights, some third party content may be suppressed from the eBook and/or eChapter(s). Editorial review has deemed that any suppressed content does not materially affect the overall learning experience. Cengage Learning reserves the right to remove additional content at any time if subsequent rights restrictions require it.