MCSA Windows Server 2016 Study Guide

 Contents Introduction xxi Assessment Test xxx Chapter 1 Installing Active Directory 1 Verifying the File System 2 Resilient File System (ReFS) 3 NTFS 4 Verifying Network Connectivity 7 Basic Connectivity Tests 7 Tools and Techniques for Testing Network Configuration 8 Understanding Domain and Forest Functionality 10 About the Domain Functional Level 10 About Forest Functionality 12 Planning the Domain Structure 13 Installing Active Directory 14 New to Active Directory 14 Read-Only Domain Controllers 15 Adprep 15 Active Directory Prerequisites 16 The Installation Process 16 Deploying Active Directory in Windows Azure 24 Installing Additional Domain Controllers by Using Install from Media 24 Verifying Active Directory Installation 25 Using Event Viewer 25 Using Active Directory Administrative Tools 27 Testing from Clients 29 Creating and Configuring Application Data Partitions 30 Creating Application Data Partitions 31 Managing Replicas 32 Removing Replicas 33 Using ntdsutil to Manage Application l Data Partitions 33 Configuring DNS Integration with Active Directory 35 Summary 37 Exam Essentials 37 Review Questions 39 Chapter 2 Administer Active Directory 43 Active Directory Overview 44 Understanding Active Directory Features 45 Understanding Security Principals 46 An Overview of OUs 47 The Purpose of OUs 48 Benefits of OUs 48 Planning the OU Structure 49 Logical Grouping of Resources 49 Understanding OU Inheritance 51 Delegating Administrative Control 51 Applying Group Policies 53 Creating OUs 53 Managing OUs 57 Moving, Deleting, and Renaming OUs 57 Administering Properties of OUs 58 Delegating Control of OUs 59 Troubleshooting OUs 62 Creating and Managing Active Directory Objects 63 Overview of Active Directory Objects 63 Managing Object Properties 70 Understanding Groups 74 Filtering and Advanced Active Directory Features 76 Moving, Renaming, and Deleting Active Directory Objects 77 Resetting an Existing Computer Account 79 Understanding Dynamic Access Control 79 Managing Security and Permissions 80 Using ACLs and ACEs 81 Using Group Policy for Security 82 Fine-Grained Password Policies 84 Publishing Active Directory Objects 86 Making Active Directory Objects Available to Users 87 Publishing Printers 87 Publishing Shared Folders 88 Querying Active Directory 89 Using the Active Directory Administrative Center 90 Using the Command Prompt for Active Directory Configuration 94 PowerShell for Active Directory 95 Summary 97 Exam Essentials 97 Review Questions 99 Chapter 3 Maintaining Active Directory 103 Overview of Network Planning 104 The Three Types of Networks 105 Exploring Network Constraints 105 Overview of Active Directory Replication and Sites 106 Replicating Active Directory 107 Understanding Active Directory Site Concepts 107 Understanding Distributed File System Replication 111 Implementing Sites and Subnets 112 Creating Sites 113 Creating Subnets 115 Configuring Sites 116 Configuring Replication 117 Intrasite Replication 118 Intersite Replication 118 RODCs and Replication 124 Configuring Server Topology 125 Using Universal Group Membership Caching 128 Configuring DNS SRV Records 129 Monitoring and Troubleshooting Active Directory Replication 129 About System Monitor 130 Troubleshooting Replication 130 Reasons for Creating Multiple Domains 132 Reasons for Using Multiple Domains 132 Drawbacks of Multiple Domains 135 Creating Domain Trees and Forests 135 Planning Trees and Forests 136 The Promotion Process 139 Creating a Domain Tree 140 Joining a New Domain Tree to a Forest 142 Adding Additional Domain Controllers 142 Demoting a Domain Controller 143 Managing Multiple Domains 144 Managing Single-Master Operations 145 Managing Trusts 149 Managing UPN Suffixes 153 Name Suffix Routing 153 Managing Global Catalog Servers 153 Managing Universal Group Membership Caching 155 Upgrading Existing Domains and Forests 156 Maintain Active Directory 157 Overview of the Windows Server 2016 Backup Utility 158 Setting Up an Active Directory Backup 163 Restoring Active Directory 164 Active Directory Recycle Bin 166 Restartable Active Directory 166 Offline Maintenance 167 Monitoring Replication 169 Using the ADSI Editor 170 Wbadmin Command-Line Utility 170 Summary 171 Exam Essentials 172 Review Questions 175 Chapter 4 Implementing GPOs 179 Introducing Group Policy 180 Understanding Group Policy Settings 181 The Security Settings Section of the GPO 184 Client-Side Extensions 185 Group Policy Objects 185 Group Policy Inheritance 186 Planning a Group Policy Strategy 187 Implementing Group Policy 188 Creating GPOs 188 Linking Existing GPOs to Active Directory 191 Forcing a GPO to Update 191 Managing Group Policy 193 Managing GPOs 193 Security Filtering of a Group Policy 195 Delegating Administrative Control of GPOs 197 Controlling Inheritance and Filtering Group Policy 198 Assigning Script Policies 199 Understanding the Loopback Policy 201 Managing Network Configuration 201 Configuring Network Settings 203 Automatically Enrolling User and Computer Certificates in Group Policy 203 Redirecting Folders 205 Managing GPOs with Windows PowerShell Group Policy Cmdlets 206 Item-Level Targeting 207 Back Up, Restore, Import, Copy, and Migration Tables 208 Deploying Software Through a GPO 211 The Software Management Life Cycle 211 The Windows Installer 213 Deploying Applications 217 Implementing Software Deployment 218 Preparing for Software Deployment 218 Software Restriction Policies 219 Using AppLocker 220 Group Policy Slow Link Detection 220 Publishing and Assigning Applications 220 Applying Software Updates 222 Verifying Software Installation 223 Configuring Automatic Updates in Group Policy 224 Configuring Software Deployment Settings 224 The Software Installation Properties Dialog Box 225 Removing Programs 228 Microsoft Windows Installer Settings 229 Troubleshooting Group Policies 229 RSoP in Logging Mode 231 RSoP in Planning Mode 233 Using the gpresult.exe Command 234 Using the Group Policy Infrastructure Status Dashboard 236 Summary 236 Exam Essentials 237 Review Questions 239 Chapter 5 Understanding Certificates 243 Features of Windows Server 2016 Certificate Services 244 Active Directory Certificate Services Roles 245 Planning the Certificate Authority Hierarchy 246 Installing AD CS 252 Configuring Active Directory Certificate Services 255 PowerShell for AD CS 266 Summary 267 Exam Essentials 268 Review Questions 269 Chapter 6 Configure Access and Information Protection Solutions 273 Implement Active Directory Federation Services 274 What Is a Claim? 274 What’s New for AD FS in Windows Server 2016? 278 Active Directory Federation Services Installation 280 Workplace Join 292 Device Registration Service 292 Workplace Join Your Device 292 Active Directory Rights Management Services 293 Considerations and Requirements for AD RMS 294 Installing AD RMS 296 Managing AD RMS: AD RMS Service Connection Point 298 Configuring a Web Application Proxy 306 Publishing Applications 306 Configuring Pass-Through Authentication 307 Authentication Capabilities 308 PowerShell Commands 309 Summary 311 Exam Essentials 311 Review Questions 313 Appendix Answers to Review Questions 315 Chapter 1: Installing Active Directory 316 Chapter 2: Administer Active Directory 317 Chapter 3: Maintaining Active Directory 317 Chapter 4: Implementing GPOs 318 Chapter 5: Understanding Certificates 319 Chapter 6: Configure Access and Information Protection Solutions 320 Index 321