book

Mastering Microsoft Windows Server® 2008 R2

Name: Mastering Microsoft Windows Server® 2008 R2
ISBN: 9780470532867

by Mark Minasi, Darril Gibson, Aidan Finn, Wendy Henry, Byron Hynes

February 2010

Beginner

1488 pages

44h 8m

English

Sybex

Read now

Unlock full access

Copyright
Dear Reader,
Acknowledgments
Introduction
Who Is The Book For?What's Inside?Stay Up-to-Date with My Free NewsletterFor Help and Suggestions: Visit My Forum or Email Me
1. What's New in Windows Server 2008 and 2008 R2
1.1. Server 2008 and R2 Goals1.2. AD Changes1.2.1. Read-Only Domain Controllers1.2.2. New Windows Backup1.2.3. Fine-Grained Password Policies1.2.4. AD Snapshots and the AD Recycle Bin1.2.5. PowerShell and AD Administrative Center1.2.6. DCPromo Improvements1.3. OS Changes Under the Hood1.3.1. R2 Is 64-Bit Only1.3.2. Server Core1.3.3. Hyper-V1.4. Networking Changes1.4.1. TCP1.4.2. Network Access Protection (NAP)1.4.3. Secure Socket Tunneling Protocol (SSTP) VPN1.5. New Setup Technologies1.6. New Management Tools1.6.1. Server Manager1.6.2. The New Remote Tools: WinRM and WinRS1.6.3. Remote Desktop Services: Terminal Services with a New Name and New Features1.6.4. New Group Policies and Tools1.6.5. New Event Viewer1.7. File and Print Sharing1.7.1. SMB 2.01.7.2. More Reliable SYSVOL Replication1.7.3. Print Management Console and Printer Driver Isolation1.8. Web-Based Services1.8.1. Web Server (IIS)1.8.2. FTP Server1.8.3. Windows Server Update Services (WSUS)
2. Installing and Upgrading to Windows Server 2008 R2
2.1. What Has Changed Since 2000 and 2003?2.1.1. The Media2.1.2. Installation Requirements2.1.3. 64-bit Support2.2. Installing the Operating System2.2.1. Performing a Clean Installation2.2.2. Performing an Upgrade Installation2.2.3. Initial Configuration Tasks Utility2.3. Using Server Manager to Configure Your Servers2.3.1. Changes to Server Manager2.3.2. Common Configuration Tasks2.3.2.1. Changing Network Properties2.3.2.2. Renaming the Server2.3.2.3. Joining a Domain2.3.2.4. Enabling Remote Administration2.3.3. Adding and Removing Roles2.3.3.1. Adding a Role2.3.3.2. Removing a Role2.3.3.3. Installing and Removing Features2.3.4. Troubleshooting Roles and Features2.3.5. Remote Management2.3.6. Wrapping Up Server Manager2.4. Upgrading Active Directory2.4.1. An Overview of Active Directory: New Functionality in Windows Server 2008 and 2008 R22.4.1.1. Fine-Grained Password Policies2.4.1.2. Read-Only Domain Controllers2.4.1.3. Administrator Role Separation2.4.1.4. Restartable Active Directory Domain Services2.4.1.5. Auditing2.4.1.6. Database Mounting Tool2.4.2. New Active Directory Functionality in Windows Server 2008 R22.4.2.1. Active Directory Recycle Bin2.4.2.2. Active Directory Module for PowerShell2.4.2.3. Active Directory Administrative Center2.4.2.4. Active Directory Web Services2.4.2.5. Authentication Mechanism Assurance2.4.2.6. Offline Domain Join2.4.2.7. Managed Service Accounts2.4.3. Active Directory Upgrade Strategies2.5. Unattended Installations2.5.1. Installing Windows Automated Installation Kit (WAIK)2.5.2. Creating an Answer File2.5.3. Using an Answer File2.6. Installing a Sample Server Network for This Book's Examples2.7. The Bottom Line
3. The New Server: Introduction to Server Core
3.1. What in the World Is Server Core?3.2. Installing Server Core3.3. Server Core Survival Guide3.3.1. Accessing the Task Manager3.3.2. Closing the Command Prompt3.3.3. Changing the Administrator's Password3.3.4. Accessing File Shares3.3.5. Finding Commands from A to Z3.3.6. Finding Command Syntax: The Question Mark3.3.7. Reading Text Files with Notepad3.3.8. Reverse Engineering3.3.9. Editing the Registry3.3.10. Rebooting and Shutting Down3.4. Initial Configurations for Server Core3.4.1. Step 1: Provide Computer Information3.4.1.1. Entering the Product Key and Activating the Installation3.4.1.2. Setting the Time Zone3.4.1.3. Configuring the Network Settings3.4.1.4. Providing a Computer Name and Domain3.4.2. Step 2: Update This Server3.4.2.1. Enabling Automatic Updating and Feedback3.4.2.2. Downloading and Installing Updates3.4.3. Step 3: Customize This Server3.4.3.1. Adding Roles and Features3.4.3.2. Enabling Remote Desktop3.4.3.3. Configuring the Firewall3.5. Administering Server Core Remotely3.5.1.3.5.1.1. Managing Servers with Remote Desktop3.5.1.2. Managing Remotely with MMC Snap-Ins3.5.1.3. Sending Commands Remotely: Windows Remote Shell3.5.1.4. Getting a Certificate3.5.1.5. Creating a Listener3.5.1.6. Creating an Inbound Firewall Rule3.5.1.7. Testing with WinRS3.6. Configuring Roles and Features3.6.1. Creating a Domain Controller and Managing DNS3.6.2. Configuring the DHCP Service3.6.3. Setting Up a File Server3.6.3.1. Creating a Primary Partition3.6.3.2. Creating the Folders and Editing Permissions3.6.3.3. Sharing the Folder3.6.4. Setting Up a Print Server3.6.5. Managing Licenses with Key Management Service3.6.5.1. Determining the Use of SRV Publishing3.6.5.2. Enabling the Firewall3.6.5.3. Activating the Installation3.6.5.4. Pointing Clients to the KMS3.6.6. Protecting Data with Windows Backup Server3.7. The Bottom Line
4. Windows Server 2008 IPv4: What Has Changed?
4.1. TCP Then and Now4.2. Improving Transaction Time with Autoscaling4.3. Employing Policy-Based QoS4.4. Sharing Files and Printers with SMB 2.04.5. Alternatives for Network Performance4.6. Wrapping Up the New and Improved TCP4.6.1. DHCP and Network Access Protection4.6.2. New to 2008 R24.7. The Bottom Line
5. DNS and Naming in Server 2008 and Active Directory
5.1. Components of Microsoft's DNS5.1.1. Understanding the DNS Server Role5.1.1.1. Integrating with Other DNS Servers5.1.2. Implementing Zones to Manage Namespaces5.1.2.1. Understanding the Standard Primary Zone5.1.2.2. Understanding the Standard Secondary Zone5.1.2.3. Understanding Active Directory Integrated Zones5.1.2.4. Using Stub Zones to Integrate with Other DNS Servers5.1.2.5. Using Reverse Lookup Zones to Increase Security5.1.3. Understanding Record Types5.1.3.1. Host and Pointer Records5.1.3.2. Alias Records5.1.3.3. Mail Exchanger Records5.1.3.4. Service Location Records5.1.3.5. Start of Authority Records5.1.3.6. Name Server Records5.1.4. Implementing the DNS Role on Server Core5.1.4.1. Installing the DNS Role5.1.4.2. Configuring the DNS server5.1.4.3. Adding Zones to a DNS Server Core Instance5.1.4.4. Managing Records in the Zone5.1.5. Managing DNS Clients and Name Resolution5.1.5.1. Hostname Resolution5.1.5.2. Configuring Clients5.1.5.3. Updating DNS Dynamically5.2. Understanding Active Directory's DNS5.2.1. Configuring DNS Automatically5.2.1.1. Creating Application Partitions5.2.1.2. Adding a Forwarder5.2.1.3. Modifying IP Properties5.2.1.4. Delegating the Subdomain5.2.1.5. Additional Recommended Configurations5.2.2. Understanding SRV Records and Clients5.2.3. Windows Server 2008 R2's Additional Features5.2.3.1. Global Query Block List5.2.3.2. Global Names and Single Name Resolution5.2.3.3. Background Zone Loading5.2.3.4. DNSSec and Trust Anchors5.3. Supporting Internet-Based DNS Resolution5.3.1. Supporting External DNS Domains5.3.1.1. Split Brain5.3.2. Resolving External Namespaces5.4. Administration and Troubleshooting with DNS Tools5.4.1. Administering the DNS Server with the DNS Management Console and DNSCmd5.4.2. Leveraging Nslookup, DCDiag, and DNSLint5.4.2.1. Nslookup5.4.2.2. DCDiag5.4.2.3. DNSLint5.5. The Bottom Line
6. Creating the Simple AD: The One-Domain, One-Location AD
6.1. An Introduction to Active Directory Basics6.2. A Single-Domain Forest6.2.1. Benefits of a Single Domain6.2.2. Creating a Single-Domain Forest6.2.2.1. Before Running DCPromo (Server Configuration)6.2.2.2. Operating System Compatibility6.2.2.3. Deployment Configuration6.2.2.4. Naming Your Root Domain6.2.2.5. Active Directory and DNS6.2.2.6. Domain Functional Levels6.2.2.7. Forest Functional Levels6.2.2.8. Locations for Files and SYSVOL6.2.2.9. Directory Services Restore Mode Password6.2.2.10. Running DCPromo6.3. Adding a Second DC6.3.1. Before Running DCPromo6.3.2. Deployment Configuration for the Second DC6.3.3. DNS for the Second DC6.3.4. Global Catalog for the Second DC6.3.5. Running DCPromo for the Second DC6.4. Creating Organizational Units, Accounts, and Groups6.4.1. Creating Organizational Units6.4.1.1. Management Through Group Policy6.4.1.2. Administrative Delegation6.4.1.3. Creating OUs with ADUC6.4.1.4. LDAP Distinguished Names6.4.1.5. Creating OUs with DSAdd6.4.1.6. Creating OUs with Windows Scripting Host (WSH)6.4.1.7. Creating OUs with PowerShell6.4.2. Creating Accounts6.4.2.1. Creating Accounts with ADUC6.4.2.2. Creating Accounts at the Command Line6.4.3. Creating Groups6.4.4. Delegating Control6.5. Domain Maintenance Tasks6.5.1. Joining a Domain6.5.2. Decommissioning a DC6.5.3. Troubleshooting ADI DNS6.5.4. Raising Domain and Forest Functional Levels6.5.5. Using NetDom6.5.5.1. Rename Computers (Including Domain Controllers)6.5.5.2. Join a Computer to a Domain6.5.5.3. Other NetDom Commands6.5.6. Managing the Domain Time6.6. Creating Fine-Grained Password Policies6.6.1. Requirements for Fine-Grained Password Policies6.6.2. Creating a Password Settings Object6.7. The Bottom Line

7. Creating and Managing User Accounts
7.1. User Accounts7.1.1. Creating Local User Accounts7.1.2. Creating Domain User Accounts7.1.3. Setting Local User Account Properties7.1.3.1. Member Of Tab7.1.3.2. Profile Tab7.1.3.3. Environment Tab7.1.3.4. Sessions Tab7.1.3.5. Remote Control Tab7.1.3.6. Remote Desktop Services Profile Tab7.1.3.7. Personal Virtual Desktop Tab7.1.3.8. Dial-in Tab7.1.4. Setting Domain-Based User Account Properties7.1.4.1. General Tab7.1.4.2. Address Tab7.1.4.3. Account Tab7.1.4.4. Profile Tab7.1.4.5. Telephones Tab7.1.4.6. Organization Tab7.1.4.7. Personal Virtual Desktop Tab7.1.4.8. COM+ Tab7.1.4.9. Attribute Editor Tab7.1.4.10. Published Certificates Tab7.1.4.11. Member Of Tab7.1.4.12. Password Replication Tab7.1.4.13. Object Tab7.1.4.14. Security Tab7.1.4.15. Editing Many User Accounts at Once7.1.4.16. Managing Domain-Based User Properties at the Command Line7.2. Group Management7.2.1. Local Groups7.2.1.1. Creating a Group7.2.1.2. Creating a Group at the Command Line7.2.1.3. Adding a User to Group7.2.1.4. Removing a User7.2.2. Active Directory Groups7.2.2.1. Creating Active Directory Groups7.2.2.2. Creating a Group at the Command Line7.3. Monday-Morning Admin Tasks7.3.1. Forgotten Passwords7.3.2. Locked-Out Users7.3.2.1. Two Simple Lock-Out Scenarios7.4. What's New in Windows Server 2008 R2 for User and Group Management7.4.1. Active Directory Administrative Center7.4.1.1. ADAC Essentials7.4.1.2. Navigating ADAC7.4.2. Active Directory Module for Windows PowerShell7.4.2.1. Creating Users7.4.2.2. Setting Passwords7.4.2.3. Creating Many Users at Once7.4.2.4. Unlocking a User Account7.4.2.5. Enabling an Account7.4.2.6. Disabling an Account7.4.2.7. Removing a Group7.5. The Bottom Line
8. Group Policy: AD's Gauntlet
8.1. Group Policy Concepts8.1.1. Policies Are "All or Nothing"8.1.2. Policies Are Inherited and Cumulative8.1.3. Group Policy Power! Refresh Intervals8.2. Local Policies and Group Policy Objects8.2.1. Administrators or Non-Administrators LGPO8.2.2. User-Specific LGPO8.3. Creating GPOs8.4. Group Policy Basics8.4.1. Replication of Group Policy Is Built In8.4.2. GPOs Undo Themselves When Removed8.4.3. You Needn't Log On to Apply GPO Settings8.5. Modifying Group Policy Default Behavior8.5.1. Group Policy Policies8.5.2. Group Policy over Slow Links8.6. Group Policy Application8.6.1. How Group Policy Is Applied8.6.1.1. Policies Execute from the Bottom Up in the GUI8.6.1.2. Group Policy Application Order8.6.2. Filtering Group Policy with Access Control Lists8.6.3. Using WMI Filters with Group Policy8.6.4. Enforcing and Blocking Inheritance8.6.5. Group Policy Example: Forcing Complex Passwords8.7. Group Policy Setting Possibilities8.7.1. Decrypting User and Computer Configuration Settings8.7.1.1. Specify Scripts with Group Policy8.7.1.2. Folder Redirection8.7.1.3. Security Settings8.7.1.3.1. Leveraging Security Templates8.7.1.3.2. What Templates Can Do8.7.1.3.3. Working with Templates8.7.1.3.4. Creating a Security Database8.7.1.3.5. Using Domain-Based Group Policies to Apply Templates8.7.1.3.6. Importing Security Templates8.7.1.4. Legacy Administrative Templates (ADMs)8.7.1.5. New Administrative Templates (ADMX/ADML)8.7.1.5.1. Restricting Internet Explorer8.7.1.5.2. Prevent Users from Installing or Running Unauthorized Software8.7.1.5.3. Configure Time Servers and Clients Using Administrative Templates8.7.2. Using Group Policy to Set Password and Account Lockout Policy8.7.3. Group Policy Preferences8.7.3.1. GPP Settings8.7.3.2. Item-Level Targeting8.8. The New and Improved GPMC8.8.1. Starter GPOs8.8.2. Backing Up and Restoring GPOs8.8.3. Delegating Group Policy Administration8.9. Troubleshooting Group Policies8.9.1. The Resultant Set of Policy (RSOP) Tool8.9.2. Group Policy Results Using the GPMC8.9.3. Group Policy Modeling Using the GPMC8.9.4. gpresult8.9.5. gpotool8.9.6. Using Event Viewer8.9.7. Troubleshooting 101: Keep It Simple8.10. A Closing Thought or Two on Group Policy8.11. The Bottom Line
9. Active Directory Delegation
9.1. AD Delegation vs. NT Domains9.2. Delegating Control Using Organizational Units9.2.1. Creating a New Organizational Unit9.2.2. Moving User Accounts into an OU9.2.3. Creating a MktPswAdm Group9.2.4. Delegating the Marketing OU's Password Reset Control to MktPswAdm9.3. Advanced Delegation: Manually Setting Permissions9.4. Finding Out Which Delegations Have Been Set, or Undelegating9.5. The Bottom Line
10. Files, Folders, and Shares
10.1. Understanding the File Services Role10.1.1. Adding Role Services10.1.2. Adding the File Services Role10.2. Creating Shares10.2.1. Creating Shares with Server Manager10.2.2. Creating Shares on Remote Computers Using Server Manager10.2.3. Publishing Shares in Active Directory10.3. Managing Permissions10.3.1. NTFS Permissions10.3.2. Share Permissions10.3.3. Share and NTFS Permission Similarities10.3.3.1. Assigning Allow or Deny10.3.3.2. Cumulative Permissions10.3.3.3. Deny Takes Precedence10.3.3.4. Implicit Deny10.3.4. Modifying Share and NTFS Permissions10.3.5. Combining Share and NTFS Permissions10.4. Connecting to Shares10.4.1. "A Set of Credentials Conflicts"10.4.2. Using net use on a WAN10.4.3. Common Shares10.5. File Server Resource Manager10.5.1. Creating Quota Policies10.5.1.1. Quota Templates10.5.1.1.1. E-mail Message Tab10.5.1.1.2. Event Log Tab10.5.1.1.3. Report Tab10.5.1.2. Creating a Quota10.5.2. Creating File Screen Policies10.5.3. Generating Reports10.5.4. File Server Resource Manager Options10.6. Understanding SMB 2.010.6.1. Compatibility with SMB 1.010.6.2. SMB 2.0 Security10.7. Implementing BitLocker10.7.1. Hardware Requirements10.7.1.1. Recovery Key10.7.2. Enabling BitLocker10.8. Using Offline Files/Client-Side Caching10.8.1. How Offline Files Works10.8.2. BranchCache10.8.3. Enabling Offline Files on the Server10.9. The Bottom Line
11. Creating and Managing Shared Folders
11.1. Creating Shared Folders11.1.1. Creating Shares from Explorer11.1.2. Remotely Creating Shares with the Computer Management Console11.2. Managing Permissions11.2.1. Creating Share Permissions11.2.1.1. Defining Share Permissions11.2.1.2. Understanding Allow and Deny11.2.2. Understanding File and Directory Permissions11.2.2.1. Permission Types11.2.2.2. Atomic Permissions11.2.2.3. Molecular Permissions11.2.2.4. Inherited Permissions11.2.2.5. Assigning File and Directory Permissions11.2.2.5.1. Removing a Group or User11.2.2.5.2. Using the Detailed Interface to Get the Whole Story11.2.2.6. Conflicting Permissions11.2.2.7. Multiple Permissions11.2.2.8. Deny Permissions11.2.2.9. Effective Permissions11.2.2.10. Ownership11.3. Working with Hidden Shares11.4. Exploring the Distributed File System11.4.1. Understanding DFS Terminology11.4.2. Choosing Stand-Alone vs. Domain-Based DFS11.4.3. Creating a DFS Root11.4.4. Adding Links to a DFS Root11.4.5. Configuring DFS Replications11.4.6. Understanding DFS Replication11.4.7. Managing DFS Replication11.4.7.1. Editing Replication Schedules and Bandwidth11.4.7.2. Enabling or Disabling Replication11.4.7.3. Enabling or Disabling Replication on a Specific Member11.4.7.4. Sharing or Publishing a Replicated Folder11.4.7.5. Practical Uses11.4.7.5.1. Consolidated Enterprise Resources11.4.7.5.2. Life-Cycle Management11.5. Exploring the Network File System11.6. The Bottom Line
12. SYSVOL: Old and New
12.1. The Old: File Replication Service12.1.1. File System Junctions12.1.2. Understanding File Replication Service12.1.2.1. Benefits of Replicating with FRS12.1.2.2. FRS Requirements and Dependencies12.1.3. How FRS Works with SYSVOL12.1.3.1. Prestaging Domain Controllers with FRS12.1.3.2. How Files and Folders Are Replicated12.1.3.3. Scheduling Replication12.2. The New: Distributed File System Replication12.2.1. Understanding DFSR12.2.2. Migrating to DFSR12.2.2.1. Migration States12.2.2.1.1. Stable States12.2.2.1.2. Transition States12.2.2.2. How Does State Migration Work?12.2.2.3. Migrating to the Prepared State12.2.2.3.1. Verifying Active Directory12.2.2.3.2. Raising the Domain Functional Level12.2.2.3.3. Performing the Migration12.2.2.4. Migrating to the Redirected State12.2.2.5. Migrating to the Eliminated State12.3. The Bottom Line
13. Sharing Printers on Windows Server 2008 R2 Networks
13.1. Print Services Overview13.1.1. The Print Spooler13.1.2. The Printer Driver13.1.2.1. XML Paper Specification (XPS)13.1.2.2. XPSDrv: The New Printer Driver Model13.1.2.3. The Graphics Device Interface13.2. Installing the Print and Document Services Role13.2.1. Adding the Print and Document Services Role13.2.2. Working in the Print Management Console13.2.2.1. Adding New Printers13.2.2.2. Deleting a Printer13.2.2.3. Automatically Detecting Network Printers13.2.2.4. Manually Installing New Printers13.2.2.5. Configuring and Viewing Settings and Resources13.2.2.5.1. Managing Printer Drivers13.2.2.5.2. Changing Printer Driver Views13.2.2.5.3. Installing New Printer Drivers13.2.2.5.4. Viewing and Editing Port Settings13.2.2.5.5. Viewing Forms13.2.3. Adding the Print Services Role to Server Core13.2.3.1. The Printer User Interface Command: PrintUI13.2.3.2. Server Core Printer Scripts13.2.3.2.1. Using the Printer Manager Script (prnmngr.vbs)13.2.3.2.2. Using the Printer Configuration Script (prncnfg.vbs)13.2.3.2.3. Using the Printer Jobs Script (prnjobs.vbs)13.2.3.2.4. Using the Printer Driver Script (prndrvr.vbs)13.2.3.2.5. Using the Printer Ports Script (prnport.vbs)13.2.3.2.6. Using the Printer Queue Script (prnqctl.vbs)13.2.3.2.7. Using the Publish Printers Script (pubprn.vbs)13.3. Deploying Printers to the Masses13.3.1. Adding a Printer to a Client Manually13.3.2. Adding a Printer Using Active Directory Search13.3.2.1.13.3.2.1.1. Feature Searches13.3.2.1.2. Advanced Searches13.3.3. Deploying Printers via GPO13.3.4. Viewing Deployed Printers13.4. Adjusting Print Server Settings13.4.1. Server Properties13.4.1.1. Choosing Form Settings13.4.1.2. Configuring Server Port Settings13.4.1.3. Adding or Updating the Printer Driver on a Print Server13.4.1.4. Managing Print Security13.4.1.5. Viewing the Server Advanced Properties13.4.2. Printer Migration13.5. Managing Printer Properties13.5.1. Printer Properties Sharing Tab13.5.2. Printer Properties Ports Tab13.5.3. Printer Properties Security Tab13.5.3.1. Using Printer Permissions to Restrict Access13.5.3.2. Using Printer Permissions for Delegation13.5.3.3. Auditing Printer Access13.5.4. Printer Properties Advanced Tab13.5.4.1. Setting Available Hours13.5.4.1.1. Creating a Second Printer for a Single Print Device13.5.4.1.2. Modifying the New Printer13.5.4.2. Setting Printer Priorities13.5.4.3. Configuring Spooler Settings13.5.4.4. Miscellaneous Spooling Settings13.5.4.5. Using Separator Pages13.5.4.6. Choosing a Separator Page13.5.4.7. Creating a New Separator Page13.6. Managing Print Jobs13.7. Using Custom Filters13.8. Troubleshooting Printer Problems13.8.1. Basic Troubleshooting: Identifying the Situation13.8.1.1. No One Can Print13.8.1.2. Some People Can't Print13.8.1.3. One Person Can't Print13.8.2. Restarting the Spooler Service13.8.3. Isolating Printer Drivers13.9. The Bottom Line
14. Remote Server Administration
14.1. Remote Desktop for Administration14.1.1. Configuring the Server for Remote Desktop14.1.2. Using Remote Desktop Connection14.1.2.1. RDC General Tab14.1.2.2. RDC Display Tab14.1.2.3. RDC Local Resources Tab14.1.2.4. RDC Programs Tab14.1.2.5. RDC Experience Tab14.1.2.6. RDC Advanced Tab14.1.2.7. MSTSC14.1.2.8. Connection Limitations14.1.2.9. Configuring Session Properties14.1.2.10. Using Group Policy to Control Session Time Limits14.1.3. Remote Desktop Gateway14.1.3.1. Remote Desktop Connection Client14.1.3.2. RD Gateway–Required Services and Features14.1.3.3. RD Gateway–Required Policies14.1.3.4. Enabling Remote Desktop Gateway14.1.4. Remote Desktops14.1.5. Configuring a Server for Remote Assistance14.1.5.1. Sending a Remote Assistance Request14.1.5.2. Responding to a Remote Assistance Request14.2. Windows Remote Management Service14.2.1. Enabling WinRM14.2.2. Using WinRS14.2.2.1. Issuing WMIC Commands with WinRS14.2.2.2. Issuing PowerShell Commands with WinRS14.3. Remote Server Administration Tools14.3.1. RSAT Compatibility Issues14.3.2. RSAT Tools14.3.3. Installing RSAT14.4. The Bottom Line
15. Connecting Windows Clients to the Server
15.1. What to Know Before You Begin15.1.1. Understanding Client-Side Software Requirements15.1.2. Domain Accounts and Local Accounts15.2. Verifying Your Network Configuration15.2.1. Verifying Local Area Connection Settings15.2.2. Test Network Connectivity with the ping Command15.2.3. Verifying and Setting Local Area Connection Information Using the GUI15.2.3.1. Local Area Connections in Windows 715.2.3.2. Manually Configuring Local Area Connection Settings in Windows 715.2.3.3. Local Area Connections in Windows Vista15.2.3.4. Manually Configuring Local Area Connection Settings in Windows Vista15.2.3.5. Local Area Connections in Windows XP15.2.3.6. Manually Configuring Local Area Connection Settings in Windows XP15.2.3.7. Local Area Connections in Windows 200015.3. Joining the Domain15.3.1. Joining a Domain from Windows 715.3.1.1. Joining the Domain While Online15.3.1.2. Joining the Domain While Offline with djoin.exe15.3.1.2.1. djoin Requirements15.3.1.2.2. Adding the Computer to the Domain While Offline15.3.2. Joining a Domain from Windows Vista15.3.3. Joining a Domain from Windows XP15.3.4. Joining a Domain from Windows 2000 Professional15.4. Changing Domain User Passwords15.4.1. Changing Domain Passwords from Windows 7 and Windows Vista15.4.1.1. Changing Passwords at First Logon15.4.1.2. Changing Passwords on Demand15.4.2. Changing Domain Passwords from Windows XP and Windows 2000 Professional15.4.2.1. Changing Passwords at First Logon15.4.2.2. Changing Passwords on Demand15.5. Connecting to Network Resources15.5.1. Connecting to Network Resources from Windows 7 and Windows Vista15.5.1.1. Searching Active Directory15.5.1.2. Adding a Network Printer15.5.1.2.1. Finding a Printer in Active Directory15.5.1.2.2. Adding a Network Printer from the Command Line15.5.1.2.3. Adding a Network Printer Using the Network Applet15.5.1.3. Mapping a Drive to a Shared Folder15.5.1.4. Creating a Network Folder15.5.2. Connecting to Network Resources from Windows XP15.5.2.1. Searching Active Directory15.5.2.2. Adding a Network Printer15.5.2.2.1. Finding a Printer in Active Directory15.5.2.2.2. Adding a Network Printer from the Command Line15.5.2.2.3. Adding a Network Printer Using the Printers and Faxes Applets15.5.2.3. Mapping a Drive to a Shared Folder15.5.2.4. Adding Network Location Shortcuts15.5.3. Connecting to Network Resources from Windows 200015.6. The Bottom Line
16. Working the Web with IIS 7.0 and 7.5
16.1. Creating Simple Websites16.1.1. A Sum of Pages16.1.1.1. Writing a Simple Web Page16.1.1.2. Saving a Simple Web Page16.1.1.3. Delivering a Simple Web Page16.1.2. Lively Web Pages16.1.2.1. Web Applications16.1.2.2. Dynamic Concerns16.2. What's So Different About IIS 7.0 and 7.5?16.3. Introducing IIS 7 Modules16.3.1. What's Included?16.3.2. Feature Delegation16.4. Installing IIS 716.4.1. Adding the Web Server Role16.4.2. Installing IIS 7 via the Command Line16.4.3. Installing IIS 7 on Server Core16.4.4. Renovating IIS Construction16.4.4.1. Registering Native Modules Using IIS Manager16.4.4.2. Module Management via the Command Line Interface (CLI)16.4.4.3. Configuring Modules at the Site Level16.5. Website Provisioning16.5.1. Understanding Global Settings16.5.2. Creating a Simple Website16.5.2.1. Site Setup via IIS Manager16.5.2.2. Creating a Site at the Command Line16.5.3. Configuring Site Settings16.6. Hosting Multiple Websites16.6.1. Deploying Sites16.6.2. Site Uniqueness16.6.3. Setting Up an Anonymous Account16.6.4. Delegating Administration16.7. Integrating SMTP into IIS 7 Web Pages16.7.1. Getting Started16.7.2. Adding the SMTP Server Feature16.7.3. Setting Up an SMTP Server16.7.3.1. Virtual Servers and Domains16.7.3.2. Authentication16.7.4. Adding the SMTP E-mail Feature to an IIS 7 Website16.8. Integrating FTP into IIS 7 Web Pages16.8.1. The FTP7 File Transfer Publishing Service16.8.2. Adding FTP to an IIS 7 Website16.9. Advanced Administration16.9.1. Using Web Management Services16.9.2. Connecting, Securing, Auditing16.9.2.1. Authentication16.9.2.2. Permissions16.9.2.3. Code Access Security16.9.2.4. Invoking SSL16.9.3. Windows System Resource Manager16.9.4. Backing Up and Restoring Data16.10. The Bottom Line
17. Watching Your System
17.1. Monitoring Your System with Event Viewer17.1.1. Viewing an Event17.1.2. Understanding Event Levels17.1.3. Creating and Using Custom Views17.1.3.1. Viewing the Properties of a Custom View17.1.3.2. Creating a Copy of a Custom View17.1.3.3. Creating a Custom View17.1.3.4. Filtering a Custom View17.1.3.5. Exporting and Importing Custom Views17.1.4. Modifying the Displayed Columns in the Event Viewer17.1.5. Understanding Windows Logs17.1.6. Understanding Applications and Services Logs17.1.7. Configuring Event Log Properties17.1.7.1. Saving a Log File17.1.7.2. Displaying a Saved Log File17.1.8. Attaching Tasks to Events17.1.9. Viewing Events on Server Core17.1.9.1. List Logs17.1.9.2. Get Log Information17.1.9.3. Set Log Information17.1.9.4. Query Events17.1.9.5. Export Log17.1.9.6. Clear Log17.2. Subscribing to Event Logs17.2.1. Understanding Subscription Types17.2.1.1. Collector-Initiated Subscriptions17.2.1.2. Source Computer–Initiated Subscriptions17.2.2. Selecting Events17.2.3. Setting Advanced Options17.2.3.1. Configuring User Accounts17.2.3.2. Optimizing Event Delivery17.2.4. Understanding Event Subscription Protocols17.2.5. Configuring Event Subscriptions17.2.5.1. Enabling Required Services17.2.5.2. Configuring the Computers17.2.5.3. Creating a Collector-Initiated Subscription17.3. Troubleshooting Event Forwarding17.3.1. Checking the Runtime Status17.3.2. Using the Windows Event Collector Utility17.4. Monitoring Performance17.4.1. Using Monitoring Tools17.4.1.1. Performance Monitor17.4.1.2. Resource Monitor17.4.1.3. Viewing System Reliability17.4.2. Using Data Collector Sets17.4.2.1. System Data Collector Sets17.4.2.2. User-Defined Data Collector Sets17.4.2.3. Report Maintenance17.5. The Bottom Line
18. Windows Server 2008 R2 and Active Directory Backup and Maintenance
18.1. Backing Up and Restoring Windows Server18.1.1. Backing Up and Restoring a Full Server18.1.1.1. Performing a Full Server Backup18.1.1.2. Performing a Full Server Backup from the Command Line18.1.1.3. Performing a Full Server Restore18.1.1.4. Recovering the System State18.1.2. Backing Up and Restoring Files and Folders18.1.2.1. Performing a Manual Backup of Files and Folders18.1.2.2. Recovering a Folder from a Backup18.2. Stopping and Restarting Active Directory18.2.1. Stopping and Starting AD DS18.2.2. Defragmenting Active Directory Offline18.2.2.1. Performing Offline Defragmentation of Ntds.dit18.2.3. Checking the Integrity of an Active Directory Database18.2.3.1. Performing an Integrity Check of Ntds.dit18.2.3.2. Using Semantic Database Analysis18.3. Capturing Active Directory Snapshots18.3.1. Creating an Active Directory Snapshot18.3.2. Mounting an Active Directory Snapshot18.3.3. Working with Mounted Active Directory Snapshots18.3.3.1. Using Dsamain.exe18.4. Backing Up and Restoring Active Directory18.4.1. Recovering Active Directory Objects18.4.1.1. Enabling the Active Directory Recycle Bin Using Windows PowerShell18.4.1.2. Enabling the Active Directory Recycle Bin Using Ldp.exe18.4.2. Creating an Active Directory Backup18.4.3. Restoring an Active Directory Backup18.4.4. Performing an Authoritative Restore18.5. The Bottom Line
19. Advanced IP: Routing with Windows
19.1. The Life of an IP Packet19.1.1. First, the Simple Case: No Routing Required19.1.1.1. IPv4: Address Resolution Protocol19.1.1.2. IPv6: Neighbor Discovery19.1.1.3. Finally, You Can Send the Packet!19.1.2. Now the Hard Case: With Routing19.1.2.1. Every Host Is a Little Bit Router19.1.2.2. How Is the Routing Table Used?19.2. From Classes to Classless19.2.1. In the Beginning Was the Class19.2.2. Unusable Host Addresses19.2.3. All Y'all19.2.4. Broadcast Gets Narrower: The First Unroutable Addresses19.2.5. Routing the Unroutable Part I: Private Addresses19.2.5.1. Subnetting and Supernetting19.2.5.2. Subnetting by RFC or by Reality19.2.5.3. Classless Inter-Domain Routing (CIDR): The Internet Loses Its Class19.2.5.4. Routing TCP: NAPT and PAT19.2.5.4.1. Why TCP: What Doesn't IP Have?19.3. Sockets, Ports, and Winsock19.3.1. Winsock: Why We Can All Use the Internet19.3.2. Routing the Unroutable Part II: NAPT and PAT19.3.2.1. NAPT's Unintended Consequences Part I: An Accidental Firewall19.3.2.2. NAPT's Unintended Consequences Part II: App Killer19.3.3. Routing the Unroutable Part III: Application Layer Gateways19.3.4. Installing a NAT19.3.4.1. Creating a Router19.3.4.2. Tunneling: Nearly Routing19.3.4.3. Cheat Tunneling with portproxy19.4. Testing and Troubleshooting19.4.1. Using the Application Itself19.4.2. Pinging a Remote Computer with ping19.4.3. Pinging a Remote Computer with traceroute19.4.4. Checking Your Configuration with ipconfig19.4.5. Showing Routing and Neighbors19.4.6. Using Network Monitor19.4.6.1. Which Card Do You Monitor?19.5. The Bottom Line
20. Getting from the Office to the Road: VPNs
20.1. Introducing VPNs20.1.1. The Many Names of VPN Servers20.1.2. Gateway-to-Gateway VPN20.2. Understanding the Tunneling Protocols20.2.1. Layer 2 Tunneling Protocol20.2.2. Secure Socket Tunneling Protocol20.2.3. Internet Key Exchange Version 220.3. Using Network Policy and Access Services Role20.3.1. Routing and Remote Access20.3.2. Adding the Network Policy and Access Services Role20.3.3. Configuring Routing and Remote Access20.3.4. Configuring Policies20.3.4.1. Policy Conditions and Policy Order20.3.4.1.1. Understanding Policy Order20.3.4.1.2. Employing the Groups Condition20.3.4.1.3. The Host Credential Authorization Protocol20.3.4.1.4. Day and Time Restrictions20.3.4.1.5. Connection Properties20.3.4.1.6. RADIUS Client Properties20.3.4.1.7. Configuring a Gateway20.3.4.2. Setting Policy Permissions20.3.4.3. Configuring Policy Constraints20.3.4.4. Configuring Policy Settings20.3.4.4.1. Multilink and Bandwidth Allocation Protocol20.3.4.4.2. IP Filters20.3.4.4.3. Encryption Settings20.3.4.4.4. IP Settings20.3.4.5. Creating a Network Policy20.3.4.6. Configuring and Connecting with a VPN Client20.3.4.7. Adding a Certificate20.3.4.7.1. Step 1: Install Active Directory Certificate Services20.3.4.7.2. Step 2: Create the Server Authentication Certificate20.3.4.7.3. Step 3: Request and Install the Server Authentication Certificate20.3.4.7.4. Step 4: Install the Computer Certificate on the VPN Server20.3.4.7.5. Step 5: Install the CA Certificate on the Client20.3.4.7.6. Step 6: Reconfigure RRAS for Secure Connection20.3.4.7.7. Step 7: Connect with a Secure Connection20.3.5. Authenticating VPN Clients20.3.6. Configuring Accounting20.3.7. Exploring Routing and Remote Access20.3.7.1. Configuring Server Properties20.3.7.1.1. Server Properties General Tab20.3.7.1.2. Server Properties Security Tab20.3.7.1.3. Server Properties IPv4 Tab20.3.7.1.4. Server Properties IPv6 Tab20.3.7.1.5. Server Properties IKEv2 Tab20.3.7.1.6. Server Properties PPP Tab20.3.7.1.7. Server Properties Logging Tab20.3.7.2. Monitoring Remote Access Clients20.3.7.3. Configuring Ports20.4. Protecting VPNs with IP Security (IPSec)20.4.1. Understanding IPSec: The Four Security Options20.4.1.1. Block Transmission20.4.1.2. Encrypt Transmission20.4.1.3. Sign Transmission20.4.1.4. Permit Transmission20.4.2. Understanding IPSec Filters20.4.3. IPSec Rules = IPSec Actions + IPSec Filters20.4.4. Signing and Encrypting Need One More Piece: Authentication20.4.5. How IPSec Works in Windows20.4.5.1. Default IPSec Policies20.4.5.2. Creating a Custom IPSec Policy20.4.5.2.1. Define a Filter20.4.5.2.2. Define an Action20.4.5.2.3. Build an IPSec Rule20.4.6. Using IPSec to Protect Systems Through Packet Filtering20.4.6.1. Formulating the Rules20.4.6.2. Building the Rules20.4.6.2.1. Building Rule 120.4.6.2.2. Building Rule 220.4.6.2.3. Building Rules 3 and 420.4.7. A Few Final Thoughts About IPSec20.5. The Bottom Line
21. Adding More Locations: Sites in Active Directory
21.1. Mastering Site Concepts21.1.1. Sites and Replication21.1.2. Understanding Site Terminology21.2. Exploring Sites21.2.1. How Sites Work21.2.2. Renaming Default-First-Site-Name21.2.3. Defining a Site21.2.4. Deciding on DCs in Remote Locations21.2.4.1. DC and DNS21.2.4.2. Cached Credentials21.2.4.3. Cached Credentials and the GC21.2.4.4. GC or Universal Group Membership Caching21.2.5. Defining a Subnet and Placing It in a Site21.2.6. Placing a Server in a Site21.2.7. Adding Site Links21.2.7.1. IP Site Link21.2.7.2. SMTP Site Link21.2.7.3. Creating Site Links21.2.7.4. Site Link Properties21.2.7.5. Calculating the Cost21.3. Configuring Intersite Replication21.3.1. Bridgehead Servers21.3.1.1. Preferred Bridgehead Servers21.3.2. Forcing Replication21.4. Configuring Clients to Access the Next Closest Site21.4.1. Configuring Next Closest Site with Group Policy21.4.2. Configuring Next Closest Site Through the Registry21.5. Using PowerShell21.6. The Bottom Line
22. The Third DC: Understanding Read-Only Domain Controllers
22.1. Introducing RODCs22.1.1. Making Changes on a Read-Only Domain Controller22.1.2. RODC Contents22.1.2.1. Password Replication Policy22.1.2.2. Denied RODC Password Replication Group22.1.2.3. Allowed RODC Password Replication Group22.1.2.4. Delegating Administration for an RODC22.1.3. RODC Requirements22.1.3.1. Domain Functional Level22.1.3.2. Forest Functional Levels22.1.3.3. Running adprep22.1.4. RODC and Server Applications22.2. Installing the RODC22.2.1. Installing RODC on Server Core22.2.2. Viewing the RODC Properties22.2.3. Modifying the Allowed List22.2.4. Staged Installations22.2.4.1. Using Installation Media22.2.4.2. Prestaging the RODC Account22.2.4.3. The Second Stage of Installing a Prestaged RODC22.3. DNS on the RODC22.3.1.22.3.1.1. Active Directory Integrated DNS22.3.1.2. Read-Only DNS22.4. The Bottom Line
23. Creating Larger Active Directory Environments: Beyond One Domain
23.1. The Foundations of Multiple-Domain Designs23.1.1. Domains23.1.1.1. The Security Boundary23.1.1.2. Multimaster Replication23.1.2. Forests23.1.3. Trees23.1.3.1. Kerberos and Trusts23.1.4. You Must Build Trees and Forests Together23.1.4.1. You Can't Graft nor Prune23.1.4.2. You Must Be an Enterprise Admin23.2. Planning Your Active Directory Environment23.2.1. Satisfying Political Needs23.2.2. Connectivity and Replication Issues23.2.3. Multiple Domains: When They Make Sense23.2.4. The Case for an Empty Root23.2.5. Active Directory Design Pointers23.2.5.1. Examine Your WAN Topology23.2.5.2. Lay Out Your Sites23.2.5.3. Figure Out Which Existing Domains to Merge and Merge Them23.2.5.4. What Needs an OU, and What Needs a Domain?23.2.5.5. Develop Names for Your Domains/Trees23.2.5.6. Get the DNS Infrastructure Ready23.2.5.7. Overall AD Design Advice23.3. Creating Multiple Domains23.3.1. Naming Multidomain Structures23.3.2. Preparing the DC for the Second Domain23.3.3. Creating a Second Domain23.4. Functional Levels23.4.1. The Beginning of Functional Levels in Windows 200023.4.2. Domain Functional Levels23.4.3. Forest Functional Levels23.5. FSMOs and GCs23.5.1. Multimaster vs. Single-Master Replication23.5.2. But Not Everything Is Multimaster23.5.3. Domain Naming: A FSMO Example23.5.4. Why Administrators Must Know About FSMOs23.5.5. Global Catalogs23.5.6. FSMO Roles23.5.7. Schema Master23.5.7.1. Examining the Schema with the Schema Snap-In23.5.7.2. The Schema and Your AD23.5.7.3. Keeping Schema Changes Orderly23.5.7.4. Planning for Schema Changes...and Conflicts23.5.7.5. Global Catalog Replication and Changes in the Schema23.5.7.5.1. Windows 200023.5.7.5.2. Windows Server 2003 and later23.5.8. Domain Naming Master FSMO23.5.9. RID Pool FSMO23.5.10. Infrastructure Master23.5.11. PDC Emulator FSMO23.5.12. Transferring FSMO Roles23.5.13. Time Sync23.6. Trusts23.6.1. Defining the Domain: "Trust"23.6.2. Trust Relationships in More Detail23.6.3. Trusts Have Direction23.6.4. Some Trusts Are Transitive23.6.5. Trusts Do Not Remove All Security23.6.6. Trusts Involve Administrators from Both Sides23.6.7. Four Kinds of Trusts23.6.8. Understanding Transitive Forest Trusts23.6.9. Manually Creating Trusts23.6.9.1. Creating Trusts with the New Trust Wizard23.6.9.2. Building Domain Trusts with netdom23.7. The Bottom Line
24. Migrating, Merging, and Modifying Your Active Directory
24.1. Migration Strategies24.1.1. Migrating with an In-Place Upgrade24.1.1.1. Getting Ready for the Upgrade24.1.1.2. How to Do an In-Place Upgrade from a 2003-Based AD24.1.1.2.1. Prepping the Forest/Schema and Domain24.1.1.2.2. Running Setup24.1.2. Migrating with a Swing Migration24.1.2.1. Prepping the Forest/Schema and Domain24.1.2.2. Building a Windows Server 2008 R2 Member Server24.1.2.3. Verifying DNS24.1.2.4. Prepping the Source Domain Controller24.1.2.5. Promoting the Member Server24.1.2.6. Post-Migration Procedures24.1.2.7. Repurposing Hardware24.1.3. Migrating with a Clean and Pristine Migration24.1.3.1. C&P Is Gradual24.1.3.2. Handling Permissions with the New Domain24.1.3.2.1. Re-ACLing the Server24.1.3.2.2. Using SID Histories24.2. Using Microsoft's Free Migration Tool: ADMT24.2.1. An Example Migration Setup24.2.2. Establishing the Trust24.2.3. Getting Both Sides ADMT-Friendly24.2.3.1. Putting a Domain Admin in Each Other's Administrators Groups24.2.3.2. Turning On Auditing24.2.3.3. Enabling Cryptographic Settings on the Target Domain24.2.3.4. Installing ADMT and PES24.2.3.4.1. Creating a Password Key on the Target24.2.3.4.2. Moving Over the PES File24.2.3.4.3. Installing the Password Migration DLL on the Source DC24.2.3.5. A Little Housework on the Workstation24.2.4. Starting Up ADMT and Migrating24.2.4.1. GUI, Command Line, or VBScript24.2.4.2. User and Group Migration with the ADMT Snap-In24.2.4.3. Migrating with the Command Line24.2.5. Testing the Migrated Group's Access to Resources24.2.6. Translating Local Profiles24.2.6.1. Translating Profiles with the ADMT Snap-In24.2.7. Migrating Computer Accounts24.2.8. Rollback Considerations24.3. Renaming a Domain24.3.1. Understanding the Requirements24.3.2. Affecting Business Operations24.3.3. Understanding the Business Risks24.3.4. Performing the Domain Rename24.3.4.1. Preparing for a Domain Rename24.3.4.2. Doing the Rename24.4. The Bottom Line
25. Installing, Using, and Administering Remote Desktop Services
25.1. Who Needs Remote Desktop Services?25.1.1. Centralized Deployment of Applications25.1.2. Supporting Remote Users25.1.3. Supporting PC-Unfriendly Environments25.1.4. Reducing Hardware Refreshes25.1.5. Simplifying the User Interface25.1.6. Providing Help-Desk Support25.1.7. Deploying RDS RemoteApp25.2. Understanding the Remote Desktop Services Processing Model25.2.1. Son of Mainframe?25.2.2. Anatomy of a Thin-Client Session25.2.2.1. The RDS Server25.2.2.1.1. Understanding Sessions25.2.2.2. The Remote Desktop Protocol25.2.2.2.1. How RDP Works25.2.2.3. RDP Version 6.0 and Version 6.125.3. Server and Client Requirements25.3.1. Server Hardware25.3.1.1. Core Hardware Resources25.3.1.2. Using the Performance Monitor25.3.2. Client Hardware25.3.2.1. Windows Terminals25.3.2.2. PC Clients25.3.2.3. Handheld PCs25.4. Adding Remote Desktop Services25.4.1. Required Role Services25.4.2. Easy Print25.4.3. Single Sign-On25.4.4. Network Level Authentication25.4.5. Licensing Mode25.4.6. Remote Desktop Users Group25.4.7. Adding the Remote Desktop Services Role25.4.8. Adding Applications25.4.9. Connecting to an RDS Session25.4.10. Adding an RDS RemoteApp Application25.4.10.1. Adding RemoteApp Programs25.4.10.2. Adding an RDS Server to the TS Web Access Computers Group25.4.10.3. Configuring the RDS Server to serve RD RemoteApp Applications25.4.10.4. Adding an RDS Server as a RemoteApp Source25.4.10.5. Launching a RemoteApp from Internet Explorer25.4.10.6. Creating .rdp Files for RemoteApp Programs25.4.10.7. Creating Windows Installer Packages for RemoteApp Programs25.5. Monitoring Remote Desktop Services25.5.1. Remote Desktop Services Manager25.5.1.1. Users, Sessions, and Processes25.5.1.2. Command-Line Tools25.5.2. Remote Desktop Session Host Configuration25.5.2.1. RDP-Tcp Connection25.5.2.1.1. RDP-Tcp Properties General Tab25.5.2.1.2. RDP-Tcp Properties Log On Settings Tab25.5.2.1.3. RDP-Tcp Properties Sessions Tab25.5.2.1.4. RDP-Tcp Properties Environment Tab25.5.2.1.5. RDP-Tcp Properties Remote Control Tab25.5.2.1.6. RDP-Tcp Properties Client Settings Tab25.5.2.1.7. RDP-Tcp Properties Network Adapter Tab25.5.2.1.8. RDP-Tcp Properties Security Tab25.5.2.2. Edit Settings25.5.2.2.1. General Tab25.5.2.2.2. Licensing Tab25.5.2.2.3. RD Connection Broker Tab25.5.2.2.4. RD IP Virtualization Tab25.5.2.3. Licensing Diagnosis25.5.3. Remote Desktop Licensing Manager25.6. The Bottom Line
26. Connecting Mac OS X Clients
26.1. Preparing Active Directory for Mac OS X Clients26.2. Connecting a Mac to the Domain26.3. Connecting to File Shares26.4. Connecting to Printers26.5. Using Remote Desktop from a Mac Client26.6. Troubleshooting26.7. The Bottom Line
27. Patch Management
27.1. The Four Phases of Patch Management27.1.1. Phase 1: Assess27.1.2. Phase 2: Identify27.1.3. Phase 3: Evaluate and Plan27.1.4. Phase 4: Deploy27.2. Dissecting a Security Update27.3. Digging into Windows Server Update Services27.3.1. Features of WSUS 3.027.3.2. Software Requirements for WSUS Servers and Clients27.3.3. Deployment Scenarios27.3.4. Configuring Prerequisites for WSUS 3.027.3.5. Installing and Configuring WSUS 3.027.3.6. Pointing Your Clients to the WSUS Server27.4. The Bottom Line
28. File Shares Made Even Better: Windows SharePoint Services 3.0
28.1. Overview of Windows SharePoint Services 3.028.1.1. How Does WSS Work?28.1.2. Prerequisites28.2. Installing WSSv328.2.1. Loading IIS 7.528.2.2. Loading the .NET Framework28.2.3. Loading WSS 3.028.2.4. Configuring Products and Technologies28.2.5. Introducing Central Administration28.3. SharePoint Website Provisioning28.3.1. Creating a Web Application28.3.2. Creating a Site Collection28.3.3. Adding Sites to a Site Collection28.4. Creating SharePoint Document Libraries28.4.1. Creating a Document Library28.4.2. Populating a Document Library28.4.2.1. Creating New Documents28.4.2.2. Uploading Documents28.5. Managing SharePoint Documents28.5.1. Document Metadata28.5.1.1. Creating Library-centric Columns28.5.1.2. Creating Site Columns28.5.1.3. Ordering and Indexing Columns28.5.1.4. Column Exposure: Views28.5.2. Document Library Settings28.5.2.1. Content Types28.5.2.2. Versioning Settings28.5.2.3. Checking In and Out28.5.3. Workflows28.5.3.1. Creating a Simple Three-State Workflow28.6. Accessing SharePoint Documents28.6.1. Enforcing Security28.6.1.1. The Concept of Inheritance28.6.1.2. Permissions and Permission Levels28.6.1.3. People and Groups28.6.1.3.1. Creating and Deleting SharePoint Groups28.6.1.3.2. Modifying Existing Groups28.6.1.3.3. Group Membership Strategies28.6.1.4. Disabling Inheritance28.6.2. Creating Useful Navigation28.6.3. Updating Search Indexes28.6.4. Using Alerts and RSS28.6.4.1. Signing Up for Alerts28.6.4.2. Subscribing to RSS Feeds28.6.5. Managing Information Rights28.7. Advanced WSS Administration28.7.1. Authentication Providers28.7.2. Managing Features28.7.3. Limiting Content28.7.3.1. Viewing Blocked File Types28.7.3.2. Establishing Quota Limits28.7.3.3. Thwarting Viruses28.8. Integrating Client Software28.8.1. Internet Explorer Integration28.8.2. Office 2007 Application Integration28.8.2.1. Outlook 200728.8.2.2. Excel 200728.8.2.3. Access 200728.8.2.4. SharePoint Designer 200728.9. The Bottom Line
29. Server Virtualization with Hyper-V
29.1. What Is Server Virtualization?29.1.1. What Use Is Server Virtualization?29.1.2. What Do You Need to Get Started with Hyper-V?29.1.2.1. Hardware Requirements29.1.2.2. Software Requirements29.1.3. The Hyper-V Feature Set29.2. Installing the Host with a Virtual Machine29.2.1. Installing and Configuring Hyper-V29.2.1.1. Virtual Disks: The Short Version29.2.1.2. Virtual Networks: The Short Version29.2.1.3. Configuring the Hyper-V Host29.2.2. Configuring a Virtual Machine29.2.3. Installing a Virtual Machine29.3. Understanding Hyper-V Architecture29.3.1. The Hyper-V Parent Partition29.3.2. Hyper-V Child Partitions29.3.3. Security Design in Hyper-V29.4. Using Virtual Disks29.4.1. Virtual Disks and Their Controllers29.4.2. Virtual Disk Types and When to Use Them29.4.3. Adding a Disk to an Existing VM29.4.4. Disk Maintenance29.4.5. Time Travel with Snapshots29.5. Using Virtual Networks29.5.1. Understanding Virtual Switches29.5.2. Connecting VMs to Virtual Switches29.6. Managing Virtual Machines29.6.1. Licensing Hyper-V Hosts and Their VMs29.6.2. Moving VMs Around: Export and Import29.6.3. Backing Up and Restoring Virtual Machines29.6.4. Server Core and the Hyper-V Server29.6.5. Moving VMs: Quick Migration and Live Migration29.6.6. Malware Protection and Patching29.6.7. Scripting Hyper-V29.7. The Bottom Line
30. Advanced User Account Management and User Support
30.1. Experiencing the Flexible Desktop30.2. Configuring Home Directories30.2.1. Setting Up the Lab30.2.2. Creating the Home Directories30.2.3. Creating Home Directories: The Easy Way30.2.4. Creating Home Directories: The Hard Way30.2.5. Home Directory vs. Local Storage30.3. Creating Roaming Profiles30.3.1. Creating a Roaming Profiles Share: The Easy Way30.3.2. Creating a Roaming Profiles Share: The Hard Way30.3.3. Configuring Mandatory Profiles30.3.3.1. Mandatory Profiles on Windows Vista30.3.3.2. Mandatory Profiles on Windows 730.3.3.3. Completing the Mandatory Profiles30.3.4. Configuring Super Mandatory Profiles30.3.5. Configuring a Default Network Profile30.4. Managing Roaming Profiles30.4.1. Machine Settings30.4.1.1. Cleaning Up Those Profiles30.4.1.2. Multiple Sites and Roaming Profiles30.4.1.3. Remote Desktop Services30.4.1.4. Additional Roaming Profile GPO Settings30.4.2. User Settings30.5. Redirecting Folders30.5.1. Basic Folder Redirection30.5.2. Advanced Folder Redirection30.5.3. Managing Folder Redirection30.6. Managing the Desktop Using Group Policy30.7. Managing Users with Logon Scripts30.7.1. User Access Control and Logon Scripts30.7.2. Multiple Logon Scripts30.7.3. Managing Logon Scripts with Group Policy30.7.4. Managing Shutdown Tasks with Logoff Scripts30.8. The Bottom Line
A. The Bottom Line
A.1. Chapter 2: Installing and Upgrading to Windows Server 2008 R2A.2. Chapter 3: The New Server: Introduction to Server CoreA.3. Chapter 4: Windows Server 2008 IPv4: What Has Changed?A.4. Chapter 5: DNS and Naming in Server 2008 and Active DirectoryA.5. Chapter 6: Creating the Simple Ad: The One-Domain, One-Location ADA.6. Chapter 7: Creating and Managing User AccountsA.7. Chapter 8: Group Policy: AD's GauntletA.8. Chapter 9: Active Directory DelegationA.9. Chapter 10: Files, Folders, and SharesA.10. Chapter 11: Creating and Managing Shared FoldersA.11. Chapter 12: SYSVOL: Old and NewA.12. Chapter 13: Sharing Printers on Windows Server 2008 R2 NetworksA.13. Chapter 14: Remote Server AdministrationA.14. Chapter 15: Connecting Windows Clients to the ServerA.15. Chapter 16: Working the Web with IIS 7.0 and 7.5A.16. Chapter 17: Watching Your SystemA.17. Chapter 18: Windows Server 2008 R2 and Active Directory Backup and MaintenanceA.18. Chapter 19: Advanced IP: Routing with WindowsA.19. Chapter 20: Getting From the Office to the Road: VPNsA.20. Chapter 21: Adding More Locations: Sites in Active DirectoryA.21. Chapter 22: The Third DC: Understanding Read-Only Domain ControllersA.22. Chapter 23: Creating Larger Active Directory Environments: Beyond One DomainA.23. Chapter 24: Migrating, Merging, and Modifying Your Active DirectoryA.24. Chapter 25: Installing, Using, and Administering Remote Desktop ServicesA.25. Chapter 26: Connecting Mac OS X ClientsA.26. Chapter 27: Patch ManagementA.27. Chapter 28: File Shares Made Even Better: Windows SharePoint Services 3.0A.28. Chapter 29: Server Virtualization with Hyper-VA.29. Chapter 30: Advanced User Account Management and User Support

Content preview from Mastering Microsoft Windows Server® 2008 R2

Chapter 12. SYSVOL: Old and New

Microsoft's first version of Active Directory (if you don't count the testing done with Exchange 5.5) was released with Windows 2000 Server. This version of Active Directory was really exceptional. It had the capability to house objects in a secure, hierarchical, distributed database called NTDS.dit. It also had the ability to build both logical and physical constructs into functioning directory services, and the tools that were used to manage this version of Active Directory were well designed and pretty easy to use.

The really cool thing about Active Directory back in the year 2000, and still cool today, is that Active Directory is a distributed database. It can have more than one domain controller that houses ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9780470532867

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Mastering Microsoft Windows Server® 2008 R2

by Mark Minasi, Darril Gibson, Aidan Finn, Wendy Henry, Byron Hynes

Chapter 12. SYSVOL: Old and New

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.