Training Guide ® Administering Windows Server 2012 R2 Orin Thomas PUBLISHED BY Microsoft Press A Division of Microsoft Corporation One Microsoft Way Redmond, Washington 98052-6399 Copyright © 2014 by Orin Thomas All rights reserved. No part of the contents of this book may be reproduced or transmitted in any form or by any means without the written permission of the publisher. Library of Congress Control Number: 2014937581 ISBN: 978-0-7356-8469-0 Printed and bound in the United States of America. First Printing Microsoft Press books are available through booksellers and distributors worldwide. If you need support related to this book, email Microsoft Press Book Support at [email protected]. Please tell us what you think of this book at http://www.microsoft.com/learning/booksurvey. Microsoft and the trademarks listed at http://www.microsoft.com/en- us/legal/intellectualproperty/Trademarks/EN-US.aspx are trademarks of the Microsoft group of companies. All other marks are property of their respective owners. The example companies, organizations, products, domain names, email addresses, logos, people, places, and events depicted herein are fictitious. No association with any real company, organization, product, domain name, email address, logo, person, place, or event is intended or should be inferred. This book expresses the author’s views and opinions. The information contained in this book is provided without any express, statutory, or implied warranties. Neither the authors, Microsoft Corporation, nor its resellers, or distributors will be held liable for any damages caused or alleged to be caused either directly or indirectly by this book. Acquisitions Editor: Anne Hamilton Developmental Editor: Karen Szall Editorial Production: Troy Mott, Backstop Media LLC Technical Reviewer: Telmo Sampaio Copyeditor: Christina Rudloff Indexer: Judy Hoer Cover: Twist Creative • Seattle Contents at a glance Introduction CHAPTER 1 Deploying and updating Windows Server 2012 R2 CHAPTER 2 Managing account policies and service accounts CHAPTER 3 Configuring name resolution CHAPTER 4 Administering Active Directory CHAPTER 5 Managing Group Policy application and infrastructure CHAPTER 6 Group Policy settings and preferences CHAPTER 7 Administering network policies CHAPTER 8 Administering remote access CHAPTER 9 Managing file services CHAPTER 10 Monitoring and auditing Index Contents Introduction Chapter 1: Deploying and updating Windows Server 2012 R2 Before you begin Lesson 1: Configuring and servicing Windows Server images Understanding Windows images Configuring Windows images Servicing Windows images Lesson summary Lesson review Lesson 2: Automatically deploying Windows Server images Automating installation Configuring answer files Windows Deployment Services WDS requirements Managing images Configuring WDS Configuring transmissions Driver groups and packages Lesson summary Lesson review Lesson 3: Servicing and updating deployed servers Automated update deployment with WSUS New WSUS features Deploy and manage WSUS WSUS groups WSUS policies Deploying updates Automatic approval rules Lesson summary Lesson review Practice exercises Exercise 1: Prepare update files Exercise 2: Servicing a WIM image Exercise 3: Deploy Windows Deployment Services Exercise 4: Configure Windows Deployment Services Exercise 5: Import driver package Exercise 6: Deploy WSUS Exercise 7: Configure WSUS Exercise 8: WSUS groups and rules Suggested practice exercises Answers Lesson 1 Lesson 2 Lesson 3 Chapter 2: Managing account policies and service accounts Before you begin Lesson 1: Implementing domain password and lockout policies Domain user password policies Account lockout settings Account management tasks Lesson summary Lesson review Lesson 2: Using fine–grained password policies Delegate password settings permissions Fine–grained password policies Lesson summary Lesson review Lesson 3: Mastering Group Managed Service Accounts GMSAs Kerberos delegation Kerberos policies Service principal name management Lesson summary Lesson review Practice exercises Exercise 1: Configure password and account lockout policies Exercise 2: Configure account lockout policies Exercise 3: Group Policy Modeling Exercise 4: Locate non-expiring passwords Exercise 5: Create fine–grained password policies Exercise 6: Prepare MEL-DC and ADL-DC Exercise 7: Create and configure GMSAs Suggested practice exercises Answers Lesson 1 Lesson 2 Lesson 3 Chapter 3: Configuring name resolution Before you begin Lesson 1: Understanding DNS zones and forwarders DNS zone types Zone delegation Split DNS Forwarders and conditional forwarders Stub zones Lesson summary Lesson review Lesson 2: Configuring WINS and managing GlobalNames zones WINS GlobalNames zones Peer Name Resolution Protocol (PNRP) Lesson summary Lesson review Lesson 3: Understanding advanced DNS options Resource records Zone aging and scavenging DNSSEC Lesson summary Lesson review Practice exercises Exercise 1: Manage DNS zones Exercise 2: Configure partition-based replication Exercise 3: DNS delegation and secondary zones Exercise 4: Configure a secondary zone Exercise 5: Single-label name resolution Exercise 6: Configure and manage DNSSEC Suggested practice exercises Answers Lesson 1 Lesson 2 Lesson 3 Chapter 4: Administering Active Directory Before you begin Lesson 1: Managing domain controllers Managing operations masters Global Catalog servers Universal group membership caching Read-only domain controllers Domain controller cloning Lesson summary Lesson review
Description: