MCSA 70-410 Cert Guide R2: Installing and Configuring Windows Server 2012 / Edition 1

by Don Poulton, David Camardella

Overview

The study guide helps you master all the topics on the MCSA 70-410 exam, including the following:

• Installing and configuring Windows Server 2012
• Configuring storage, shares, and permissions
• Configuring and monitoring print and document services
• Configuring Hyper-V and Hyper-V Network Virtualization
• Configuring IPv4 and IPv6 Addressing
• Configuring DHCP and DNS
• Managing and Configuring Active Directory Domain Services
• Securing Windows Server 2012

MCSA 70-410 Cert Guide: Installing and Configuring Windows Server^® 2012 R2 is a best-of-breed exam study guide. Best-selling authors and expert instructors Don Poulton and David Camardella share preparation hints and test-taking tips, helping you identify areas of weakness and improve both your conceptual knowledge and hands-on skills. Material is presented in a concise manner, focusing on increasing your understanding and retention of exam topics.

The book presents you with an organized test preparation routine through the use of proven series elements and techniques. Exam topic lists make referencing easy. Chapter-ending Exam Preparation Tasks help you drill on key concepts you must know thoroughly. Review questions help you assess your knowledge, and a final preparation chapter guides you through tools and resources to help you craft your final study plan.

The companion CD contains the powerful Pearson IT Certification Practice Test engine, complete with hundreds of exam-realistic questions. The assessment engine offers you a wealth of customization options and reporting features, laying out a complete assessment of your knowledge to help you focus your study where it is needed most.

Well-regarded for its level of detail, assessment features, and challenging review questions and exercises, this study guide helps you master the concepts and techniques that will enable you to succeed on the exam
the first time.

The CD contains two free, complete practice exams.

Includes Exclusive Offer for 70% Off Premium Edition eBook and Practice Test

Don Poulton (A+, Network+, Security+, MCSA, MCSE) is an independent consultant who has worked with computers since the days of 80-column punch cards. He has consulted extensively with training providers, preparing study materials for Windows technologies. He has written or contributed to several Que titles, including Security+ Lab Manual, MCSA/MCSE 70-299 Exam Cram 2, MCTS 70-620 Exam Prep, and MCSA 70-687 Cert Guide: Configuring Microsoft Windows 8.1.

David Camardella, an expert on deploying and administering Microsoft technologies, has served as technical reviewer on several previous Pearson Microsoft certification titles.

Product Details

ISBN-13:	9780789748805
Publisher:	Pearson IT Certification
Publication date:	09/26/2014
Series:	Cert Guide Series
Pages:	1056
Product dimensions:	7.50(w) x 9.30(h) x 2.40(d)

About the Author

Don Poulton (A+, Network+, Security+, MCSA, MCSE) is an independent consultantwho has been involved with computers since the days of 80-column punch cards. After more than 20 years in environmental science, Don switched careers and trained as a Windows NT 4.0 MCSE. He has been involved in consulting with a couple of small training providers as a technical writer, during which time he wrote training and exam prep materials for Windows NT 4.0, Windows 2000, and Windows XP. Don has written or contributed to several titles, including Security+ Lab Manual (Que, 2004); MCSA/MCSE 70-299 Exam Cram 2: Implementing and Administering Security in a Windows 2003 Network (Exam Cram 2) (Que, 2004); MCSE 70-294 Exam Prep: Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure (Que, 2006); MCTS 70-620 Exam Prep: Microsoft Windows Vista, Configuring (Que, 2008); MCTS 70-680 Cert Guide: Microsoft Windows 7, Configuring (Que, 2011); MCTS 70-640 Cert Guide: Windows Server 2008 Active Directory, Configuring (Que, 2011); MCTS 70-642 Cert Guide: Windows Server 2008 Network Infrastructure, Configuring (Que, 2012); and MCSA 70-687 Cert Guide: Configuring Microsoft Windows 8.1 (Que, 2014). In addition, he has worked on programming projects, both in his days as an environmental scientist and more recently with Visual Basic to update an older statistical package used for multivariate analysis of sediment contaminants. When not working on computers, Don is an avid amateur photographer who has had his photos displayed in international competitions and published in magazines such as Michigan Natural Resources Magazine and National Geographic Traveler. Don also enjoys traveling and keeping fit. Don lives in Burlington, Ontario, with his wife, Terry.

David G. Camardella has more than 14 years of experience as a systems architect, network engineer, and IT manager. Throughout his career, David has used his technical and leadership skills to successfully support infrastructures from small to large organizations. David’s experience includes managing a North American datacenter, branch office server rooms, LAN/WLAN/WAN infrastructures, Active Directory/Messaging infrastructures, private clouds, and client computing systems. Over the years, David has performed technical editing for several Microsoft and Cisco books. He holds a bachelor of science in business management as well as several levels of IT certifications, including MCSE. In his spare time, David enjoys spending time with his family and engaging in outdoor activities and home brewing.

Table of Contents

Introduction xxvii

Chapter 1 Introducing Windows Server 2012 R2 2

“Do I Know This Already?” Quiz 4

Foundation Topics 8

What’s New in Windows Server 2012 and Windows Server 2012 R2 8

What’s New in Windows Server 2012 R2 12

Windows Server 2012 R2 Editions 14

Windows Server 2012 R2 User Interface 15

Server Manager 18

Adding Roles and Features 21

Planning for Server Installation and Upgrades 23

Identifying Hardware Requirements 23

Choosing an Install Method 23

Considering Upgrades 24

Server Roles and Role Migration 26

Windows Server 2012 R2 Server Roles 26

Role Migration 30

Features on Demand 31

Exam Preparation Tasks 32

Review All the Key Topics 32

Complete the Tables and Lists from Memory 33

Definitions of Key Terms 33

Chapter 2 Installing and Configuring Windows Server 2012 R2 34

“Do I Know This Already?” Quiz 35

Foundation Topics 40

Windows Server 2012 R2 Hardware Requirements 40

Installing Windows Server 2012 R2 41

Installing a Windows Server Core Computer 42

Installing the Full GUI Server 48

Upgrading a Windows Server 2008 Computer 49

Converting Between Core and GUI 50

Delegation of Server Administration 51

Preparing for a Delegation Model 52

Establishing Delegate Access 53

Leveraging Active Directory 54

Identifying Administration Tools 55

Windows PowerShell Desired State Configuration 56

Configuring Offline Server Images 59

Deployment Image Servicing and Management 60

Using DISM to Enable Remote Desktop Services 62

Configuring Remote Server Roles 65

Configuring Windows Server 2012 R2 Services 68

Services.msc 69

SC Commands 71

Configuring NIC Teaming 72

Configure NIC Teaming via GUI 73

Configure Basic NIC Teaming via PowerShell 75

Exam Preparation Tasks 76

Review All the Key Topics 76

Complete the Tables and Lists from Memory 77

Definitions of Key Terms 77

Chapter 3 Configuring Windows Server 2012 R2 Local Storage 78

“Do I Know This Already?” Quiz 79

Foundation Topics 83

Designing Storage Spaces 83

Optimal Storage Allocation 83

Improved Administrative Control 84

Scalability 84

High Availability 85

Configuring Basic and Dynamic Disks 86

Configuring MBR and GPT Disks 88

Managing Volumes 89

Converting Disks 94

RAID Volumes 96

Creating a RAID 0 Volume 97

Creating a Spanned Volume 99

Creating a Mirrored Volume 99

Creating a RAID-5 Volume 99

Creating and Mounting Virtual Hard Disks 101

Creating VHDs 102

Mounting VHDs 103

Configuring Storage Pools and Disk Pools 105

Creating Storage Spaces 110

Creating and Managing Volumes 115

Using PowerShell 117

Exam Preparation Tasks 118

Review All the Key Topics 118

Complete the Tables and Lists from Memory 119

Definitions of Key Terms 119

Chapter 4 Configuring Access to Files and Shares 120

“Do I Know This Already?” Quiz 121

Foundation Topics 127

Shared Folders in Windows Server 2012 R2 127

Understanding the File and Storage Services Role in Windows Server 2012 R2 127

Creating a Shared Folder 130

Offline Files 144

Configuring Servers for Offline Files 145

Configuring Client Computers 147

Configuring Offline File Policies 147

Using the Always Offline Mode 149

Configuring Transparent Caching of Offline Files 151

Creating and Configuring Work Folders 152

Enabling and Configuring Work Folders 154

Configuring Client Computers for Work Folders 159

NTFS Permissions 161

NTFS File and Folder Permissions 161

Effective Permissions 171

Copying and Moving Files and Folders 173

Practical Guidelines on Sharing and Securing Folders 175

Access-Based Enumeration of Files and Folders 176

Configuring Volume Shadow Copy Service 178

Configuring Shadow Copies of Shared Folders 179

Guidelines for Using VSS 182

Configuring NTFS Quotas 182

Using File Explorer to Enable Disk Quotas 183

Using FSRM to Create Quota Templates 186

Some Guidelines for Using Quotas 188

Exam Preparation Tasks 189

Review All the Key Topics 189

Complete the Tables and Lists from Memory 191

Definitions of Key Terms 191

Chapter 5 Configuring and Monitoring Print and Document Services 192

“Do I Know This Already?” Quiz 193

Foundation Topics 199

Printing Terminology in Windows Server 2012 R2 199

The Printing Process 200

New Features of Print and Document Services in Windows Server 2012 R2 202

Installing, Sharing, and Publishing Printers 204

Installing the Print and Document Services Role 204

Installing Printers 208

Sharing Printers 212

Publishing Printers in Active Directory 213

Using Group Policy to Deploy Printer Connections 215

Branch Office Direct Printing 216

Configuring Drivers Including the Easy Print Driver 218

Printer Driver Challenges 218

Easy Print Driver 220

Managing and Troubleshooting Printers 221

Using the Printer Properties Dialog box 222

Migrating Print Queues and Printer Settings 228

Isolating Printer Drivers 230

Configuring Location-Aware Printer Settings 231

Delegating Print Management 232

Troubleshooting Printer Problems 234

Exam Preparation Tasks 237

Review All the Key Topics 237

Complete the Tables and Lists from Memory 238

Definitions of Key Terms 238

Chapter 6 Configuring Remote Management of Servers 240

“Do I Know This Already?” Quiz 241

Foundation Topics 245

Configuring WinRM 245

Installation and Configuration of WinRM 245

Windows Remote Shell 247

Configuring Down-level Server Management 248

Preparing Down-level Server Core Installations 249

Configuring Multiple Server Management 249

Using Server Manager for Remote Management 249

Remote Management of Server Core Machines 258

Remote Server Administration Tools 258

Microsoft Management Console 260

Windows PowerShell 267

Configuring Daily Management Tasks 270

Task Scheduler 270

Active Directory Administrative Center 276

Exam Preparation Tasks 277

Review All the Key Topics 277

Complete the Tables and Lists from Memory 278

Definitions of Key Terms 278

Chapter 7 Configuring Hyper-V 280

“Do I Know This Already?” Quiz 281

Foundation Topics 285

Introduction to Hyper-V 285

What’s New in Hyper-V Server 286

Installing the Hyper-V Server Role 288

Install Hyper-V Using PowerShell 294

Creating and Configuring Virtual Machine Settings 294

Configuring a Virtual Machine 296

Additional Virtual Machine Components 308

Managing Virtual Machines 312

Configuring Dynamic Memory 314

Configuring Smart Paging 316

Configuring Resource Metering 317

Configuring Guest Integration Services 319

Exam Preparation Tasks 322

Review All the Key Topics 322

Complete the Tables and Lists from Memory 323

Definitions of Key Terms 323

Chapter 8 Creating and Configuring Virtual Machine Storage 324

“Do I Know This Already?” Quiz 325

Foundation Topics 329

Creating and Configuring Virtual Hard Disks and Differencing Drives 329

Fixed-Size Disks 329

Dynamically Expanding Disks 334

Differencing Disks 335

Virtual Hard Disk Management 344

Hard Disk Sharing 355

Storage Quality of Service 355

Importing, Exporting, Migrating, and Replicating Virtual Machines 356

Configuring Pass-Through Disks 364

Managing Checkpoints 367

Creating and Reverting to a Previous Checkpoint 368

Managing Multiple Checkpoints 369

Implementing Virtual Fibre Channel Adapters 370

Virtual SAN Support 371

Advanced Fibre Channel Adapter Features 373

Exam Preparation Tasks 374

Review All the Key Topics 374

Complete the Tables and Lists from Memory 374

Definitions of Key Terms 375

Chapter 9 Creating and Configuring Virtual Networks 376

“Do I Know This Already?” Quiz 377

Foundation Topics 381

Network Virtualization Using Hyper-V 381

Planning for Network Virtualization 383

Network Virtualization Components 383

Configuring Virtual Network Switches 388

Optimizing Virtual Network Performance 395

Configuring MAC Addresses 398

Dynamic MAC Addresses 398

Static MAC Addresses 400

MAC Address Spoofing 401

Configuring Network Isolation 402

Virtual Switch Trunking 403

Using PVLANs for Isolation 404

Configure PVLAN Ports 405

Configuring Virtual Network Adapters 406

Configuring an Emulated (Legacy) Network Adapter 407

Configuring a Network Adapter 408

Configure a Virtual NIC Team 411

Advanced Adapter Features 412

Hyper-V Network Virtualization PowerShell Cmdlets 416

Exam Preparation Tasks 418

Review All the Key Topics 418

Complete the Tables and Lists from Memory 419

Definitions of Key Terms 419

Chapter 10 Configuring IPv4 and IPv6 Addressing 420

“Do I Know This Already?” Quiz 422

Foundation Topics 426

Concepts of TCP/IP 426

TCP/IP History in Brief 426

The TCP/IP Protocol Stack 427

The TCP/IP Component Protocols 429

New and Improved Networking Technologies in Windows Server 2012 R2 433

IPv4 Addressing 434

Static IPv4 Addressing 435

Subnetting and Supernetting in IPv4 437

Dynamic IP Addressing 441

Configuring IPv4 Address Options 441

Using the Command Line to Configure IPv4 Addressing Options 445

IPv6 Addressing 447

IPv6 Address Syntax 448

Connecting to a TCP/IP Version 6 Network 451

TCP/IPv6 PowerShell Cmdlets 453

Interoperability Between IPv4 and IPv6 Addresses 454

Compatibility Addresses 455

ISATAP Addresses 455

6to4 Addresses 456

Teredo Addresses 458

Using Group Policy to Configure IPv6 Transition Technologies 459

Resolving IPv4 and IPv6 Network Connectivity Issues 461

Windows Server 2012 R2 Network Diagnostics Tools 461

Using TCP/IP Utilities to Troubleshoot TCP/IP 463

Troubleshooting IPv4 and IPv6 Problems 469

Exam Preparation Tasks 473

Review All the Key Topics 473

Complete the Tables and Lists from Memory 474

Definitions of Key Terms 474

Chapter 11 Configuring Dynamic Host Configuration Protocol (DHCP) 476

“Do I Know This Already?” Quiz 477

Foundation Topics 482

How DHCP Works 482

What’s New with DHCP in Windows Server 2012 and Windows Server 2012 R2 482

The Four-Phase DHCP IPv4 Leasing Process 484

Renewing an IPv4 Lease 487

How DHCPv6 Works 488

Installing and Configuring a DHCP Server 489

Using Server Manager to Install DHCP 490

Using Windows PowerShell to Install DHCP 492

DHCP Scopes and Options 493

Creating DHCP Scopes 493

Configuring DHCP Scope Properties 498

Configuring DHCP Options 499

Configuring PXE Boot 508

Configuring DHCP Options for PXE 508

Monitoring and Troubleshooting a DHCP Server 510

Managing and Authorizing DHCP Servers 513

Authorizing a DHCP Server in Active Directory 513

Configuring DHCP Relay Agents 515

Exam Preparation Tasks 519

Review All the Key Topics 519

Complete the Tables and Lists from Memory 520

Definitions of Key Terms 520

Chapter 12 Deploying and Configuring Domain Name System (DNS) 522

“Do I Know This Already?” Quiz 523

Foundation Topics 528

Introduction to DNS 528

The Hierarchical Nature of DNS 529

The DNS Name Resolution Process 533

What’s New in Windows Server 2012 R2? 536

Installing DNS in Windows Server 2012 R2 537

Using PowerShell to Install DNS 539

Using PowerShell for DNS Server Administration 539

Zone Types and Their Uses 541

DNS Zone Types 542

Configuring DNS Server Properties 545

Interfaces Tab 545

Forwarders Tab 546

Advanced Tab 548

Root Hints Tab 550

Debug Logging Tab 552

Event Logging Tab 553

Monitoring Tab 554

Security Tab 555

Configuring Common Resource Records 556

New Host (A or AAAA) Records 558

New Alias (CNAME) 559

New Mail Exchanger (MX) 560

Additional New Resource Records 560

Deleting Resource Records 562

Using the Command Line to Create Resource Records 563

Exam Preparation Tasks 563

Review All the Key Topics 563

Complete the Tables and Lists from Memory 564

Definitions of Key Terms 564

Chapter 13 Installing Domain Controllers 566

“Do I Know This Already?” Quiz 568

Foundation Topics 572

The Building Blocks of Active Directory 572

Namespaces 572

Objects 573

Containers 573

Schemas 574

Global Catalogs 574

Partitions 575

Naming Standards of X.500 and LDAP 576

Logical Components of Active Directory 578

Physical Components of Active Directory 583

New Features of Active Directory in Windows Server 2012 and Windows Server 2012 R2 588

Planning the Active Directory Namespace 589

Subdividing the Active Directory Namespace 590

Administrative or Geographical Organization of Domains 591

Use of Multiple Trees 592

Best Practices 593

Creating Forests and Domains 594

Requirements for Installing Active Directory Domain Services 594

Installing Active Directory Domain Services 595

Performing Unattended Installations of Active Directory 606

Adding, Removing, and Upgrading Domain Controllers 608

Forest and Domain Functional Levels 609

The Adprep Utility 611

Upgrading a Windows Server 2008 Domain Controller 612

Removing Active Directory 614

Installing a Server Core Domain Controller 617

Using the Install from Media Option 617

Creating Installation Media 618

Deploying Domain Controllers Using the IFM Option 619

Configuring Global Catalog Servers 621

Planning the Placement of Global Catalog Servers 621

Promoting Domain Controllers to Global Catalog Servers 623

Deploying Active Directory Infrastructure as a Service in Windows Azure 624

Installing an AD DS Forest in Windows Azure 625

Installing a Replica Domain Controller on Windows Azure 627

Troubleshooting Active Directory Installations 628

Verifying the Proper Installation of Active Directory 628

Resolving SRV Record Registration Issues 634

Exam Preparation Tasks 636

Review All the Key Topics 636

Complete the Tables and Lists from Memory 637

Definitions of Key Terms 637

Chapter 14 Active Directory User and Computer Accounts 638

“Do I Know This Already?” Quiz 639

Foundation Topics 644

Creating User and Computer Accounts 644

Introducing User Accounts 644

Manually Creating User Accounts 645

Creating Computer Accounts 649

Using Template Accounts 650

Using Bulk Import to Automate Account Creation 651

Configuring the UPN 656

Configuring Contacts 659

Managing and Maintaining Accounts 660

Password Resets 660

Protected Admin 661

Offline Domain Join 663

Configuring User Rights 665

Inactive and Disabled Accounts 666

Exam Preparation Tasks 667

Review All the Key Topics 667

Complete the Tables and Lists from Memory 668

Definitions of Key Terms 668

Chapter 15 Active Directory Groups and Organizational Units (OUs) 670

“Do I Know This Already?” Quiz 671

Foundation Topics 676

Creating and Managing Group Accounts 676

Creating Group Accounts 681

Configuring Group Membership 683

Creating Distribution Lists 685

AGDLP/AGUDLP 686

Local Versus Domain Groups 688

Enumerating Group Membership 690

Creating and Managing Organizational Units 691

Planning the OU Structure of Your Domain 691

Creating Organizational Units 694

Managing Organizational Units 696

Delegating Active Directory Object Management 700

Exam Preparation Tasks 705

Review All the Key Topics 705

Complete the Tables and Lists from Memory 706

Definitions of Key Terms 706

Chapter 16 Creating and Applying Group Policy Objects 708

“Do I Know This Already?” Quiz 709

Foundation Topics 713

Overview of Group Policy 713

Components of Group Policy 713

New Features of Group Policy in Windows Server 2012 and Windows Server 2012 R2 716

Creating and Applying GPOs 719

Using Starter GPOs 724

Shell Access Policies 726

Managing GPOs and Their Links 727

Linking GPOs 727

Managing GPO Links 729

Deleting a GPO 730

Disabling GPOs or Portions of GPOs 731

Specifying a Domain Controller 731

Using Windows PowerShell 733

Configuring Multiple Local Group Policies 735

MMC and Multiple Local Group Policies 736

Using Multiple Local Group Policies 737

Managing Restricted Groups 738

Local Users and Groups Extension 741

Configuring Group Policy Common Options 744

Configuring Security Filtering 746

Denying the Application of a GPO 746

Windows Management Instrumentation 748

Exam Preparation Tasks 749

Review All the Key Topics 749

Complete the Tables and Lists from Memory 750

Definitions of Key Terms 750

Chapter 17 Configuring Security Policies 752

“Do I Know This Already?” Quiz 753

Foundation Topics 759

Configuring User Rights Assignment 759

Configuring Security Options Settings 762

Using Additional Security Configuration Tools 765

Password and Account Lockout Policies 767

Auditing of Active Directory Services 770

New Audit Functionality 770

Active Directory Auditing 770

Using GPOs to Configure Auditing 771

Using Auditpol.exe to Configure Auditing 777

Configuring User Account Control 778

Using Control Panel to Configure UAC 779

Configuring UAC via Policy 779

Exam Preparation Tasks 781

Review All the Key Topics 781

Complete the Tables and Lists from Memory 781

Definitions of Key Terms 782

Chapter 18 Configuring Application Restriction Policies 784

“Do I Know This Already?” Quiz 785

Foundation Topics 790

Introducing Rule Enforcement 790

Configuring Software Restriction Policies 790

Configuring AppLocker Rules 797

Capabilities of AppLocker 797

Basic Configuration of AppLocker Policies 799

Creating Additional AppLocker Rules 802

Exam Preparation Tasks 808

Review All the Key Topics 808

Complete the Tables and Lists from Memory 808

Definitions of Key Terms 808

Chapter 19 Configuring Windows Firewall 810

“Do I Know This Already?” Quiz 811

Foundation Topics 818

Configuring Windows Firewall 818

Basic Windows Firewall Configuration 819

Configuring Windows Firewall Using PowerShell 825

Using the Windows Firewall with Advanced Security Snap-in 826

Overview of Default Windows Firewall with Advanced Security Rules 828

Configuring Multiple Firewall Profiles 828

Configuring Security Rules 830

Configuring Inbound Rules or Outbound Rules 830

Configuring Connection Security Rules 836

Configuring Rule Properties 842

Configuring Notifications 847

Configuring Firewall Properties and Authenticated Exceptions 848

Creating Windows Firewall with Advanced Security Policies 848

Windows Firewall Group Policy Property Settings 850

Configuring Authenticated Bypass 851

Exporting and Importing Firewall Settings 853

Exam Preparation Tasks 854

Review All the Key Topics 854

Definitions of Key Terms 855

Practice Exam 1 856

Answers to Practice Exam 1 884

Appendix A Answers to the “Do I Know This Already?” Quizzes 902

Glossary 934

Index 954

On The CD:

Practice Exam 2

Answers to Practice Exam 2

Appendix B Memory Tables

Appendix C Memory Tables Answer Key