book

Windows Server 2012 R2 Inside Out: Configuration, Storage, & Essentials

by William R. Stanek

February 2014

Intermediate to advanced

848 pages

26h 48m

English

Microsoft Press

Read now

Unlock full access

Who is this book for?Conventions used in this bookHow to reach the authorErrata & book supportWe want to hear from youStay in touch
Getting to know Windows Server 2012 R2Windows 8.1 and Windows Server 2012 R2Planning for Windows Server 2012 R2Your plan: The big pictureIdentifying your organizational teamsAssessing project goalsThe business perspectiveIdentifying IT goalsExamining the interaction between IT and business unitsPredicting network changeAnalyzing the existing networkEvaluating the network infrastructureAssessing systemsIdentify network services and applicationsIdentifying security infrastructureReviewing network administrationDefining objectives and scopeSpecifying organizational objectivesSetting the scheduleShaping the budgetAllowing for contingenciesFinalizing project scopeDefining the new network environmentImpact on network operationsIdentify security requirementsChanging the administrative approachSelect and implement standardsChange managementFinal considerations for planning and deploymentThinking about server roles and Active DirectoryPlanning for server usageDesigning the Active Directory namespaceManaging domain trustsIdentifying the domain and forest functional levelDefining Active Directory server rolesPlanning for availability, scalability, and manageabilityPlanning for software needsPlanning for hardware needsPlanning for support structures and facilitiesPlanning for day-to-day operationsPlanning for deploying highly available servers
Getting a quick startProduct licensingPreparing for a Windows Server 2012 R2 installationUnderstanding installation optionsDetermining which installation type to useUsing Windows UpdatePreinstallation tasksInstalling Windows Server 2012 R2Installation on BIOS-based systemsInstallation on EFI-based systemsPlanning partitionsNaming computersNetwork and domain membership optionsProtocolsDomain membershipNetworking componentsPerforming a clean installationPerforming an upgrade installationActivation sequenceActivate Windows over the InternetActivate Windows by telephoneUsing Managed ActivationPerforming additional administration tasks during installationsAccessing a command prompt during installationForcing disk-partition removal during installationLoading mass storage drivers during installationCreating, deleting, and extending disk partitions during installationTroubleshooting installationStart with the potential points of failureSetup refuses to install or startSetup reports a media or DVD-ROM errorSetup reports insufficient system resourcesContinue past lockups and freezesPostinstallation tasks
Boot from hardware and firmwareHardware and firmware power statesDiagnosing hardware and firmware startup problemsResolving hardware and firmware startup problemsBoot environment essentialsManaging startup and boot configurationManaging startup and recovery optionsManaging System Boot ConfigurationWorking with BCD EditorManaging the boot configuration data store and its entriesViewing BCD entriesCreating and identifying the BCD storeImporting and exporting the BCD storeCreating, copying, and deleting BCD entriesSetting BCD entry valuesChanging Data Execution Prevention and physical address extension optionsChanging the operating system display orderChanging the default operating system entryChanging the default timeoutChanging the boot sequence temporarily
Working with the administration toolsUsing Control Panel utilitiesUsing graphical administrative toolsUsing command-line utilitiesUtilities to knowUsing Net toolsUsing Windows PowerShellWorking with Server ManagerGetting to know Server ManagerAdding servers for managementCreating server groupsEnabling remote managementWorking with Computer ManagementComputer Management system toolsComputer Management storage toolsComputer Management Services And Applications tools
Using the MMCMMC snap-insMMC modesMMC window and startupMMC tool availabilityMMC and remote computersBuilding custom MMCsStep 1: Creating the consoleStep 2: Adding snap-ins to the consoleStep 3: Saving the finished consoleSetting the initial console view before savingSetting the console mode before savingSetting the console icon before savingSaving the console toolDesigning custom taskpads for the MMCGetting started with taskpadsUnderstanding taskpad view stylesCreating and managing taskpadsCreating and managing tasksCreating menu command tasksCreating shell command tasksCreating navigation tasksArranging, editing, and removing tasksPublishing and distributing your custom tools
Using roles, role services, and featuresMaking supplemental components availableInstalling components with Server ManagerViewing configured roles and role servicesManaging server roles and featuresAdding server roles and featuresRemoving server roles and featuresManaging server binariesInstalling components at the promptGoing to the prompt for Server ManagementUnderstanding component namesTracking installed roles, role services, and featuresInstalling components at the promptRemoving components at the prompt
Understanding hardware installation changesChoosing internal devicesChoosing external devicesInstalling devicesUnderstanding device installationInstalling new devicesViewing device and driver detailsWorking with device driversDevice driver essentialsUnderstanding and troubleshooting driver signingViewing driver informationViewing Advanced, Resources, and other settingsInstalling and updating device driversRestricting device installation by using Group PolicyRolling back driversRemoving device drivers for removed devicesUninstalling, reinstalling, and disabling device driversManaging hardwareAdding non–Plug and Play, older hardwareEnabling and disabling hardwareTroubleshooting hardwareResolving resource conflicts

Introducing the registryUnderstanding the registry structureRegistry root keysHKEY_LOCAL_MACHINEHKLM\BCD00000000HKLM\HARDWAREHKLM\SAMHKLM\SECURITYHKLM\SOFTWAREHKLM\SYSTEMHKEY_USERSHKEY_CLASSES_ROOTHKEY_CURRENT_CONFIGHKEY_CURRENT_USERRegistry data: How it is stored and usedWhere registry data comes fromTypes of registry data availableRegistry administrationSearching the registryModifying the registryModifying valuesAdding keys and valuesRemoving keys and valuesModifying the registry of a remote machineImporting and exporting registry dataLoading and unloading hive filesWorking with the registry from the command lineBacking up and restoring the registryMaintaining the registryUsing the Microsoft Fix It UtilityRemoving registry settings for active installations that have failedRemoving partial or damaged settings for individual applicationsSecuring the registryPreventing access to the registry utilitiesApplying permissions to registry keysControlling remote registry accessAuditing registry access
Software installation essentialsMastering User Account ControlElevation, prompts, and the secure desktopConfiguring UAC and Admin Approval ModeMaintaining application integrityApplication access tokensApplication run levelsConfiguring run levelsControlling application installation and run behavior
Tuning performance, memory usage, and data throughputTuning Windows operating system performanceTuning processor schedulingTuning virtual memoryOther important tuning, memory, and data considerationsTracking a system’s general healthMonitoring essentialsGetting processor and memory usage for troubleshootingGetting information on running applicationsMonitoring and troubleshooting processesMonitoring and troubleshooting servicesGetting network usage informationGetting information on user and remote user sessionsTracking events and troubleshooting by using Event ViewerUnderstanding the event logsAccessing the event logs and viewing eventsViewing event logs on remote systemsSorting, finding, and filtering eventsSorting the event logsSearching the event logsFiltering the event logsArchiving event logsTracking events using Windows PowerShellUsing subscriptions and forwarded events
Establishing performance baselinesTracking per-process resource usageGetting an overview of resource utilizationTracking per-process CPU utilizationTracking per-process memory utilizationTracking per-process disk utilizationTracking per-process network utilizationTracking the overall reliability of the serverComprehensive performance monitoringUsing Performance MonitorSelecting performance objects and counters to monitorChoosing views and controlling the displayMonitoring performance remotelyResolving performance bottlenecksResolving memory bottlenecksResolving processor bottlenecksResolving disk I/O bottlenecksResolving network bottlenecksPerformance loggingCreating and managing data collector setsUsing data collector templatesCollecting performance counter dataCollecting performance trace dataCollecting configuration dataViewing data collector reportsConfiguring performance counter alertsMonitoring performance from the command lineAnalyzing trace logs at the command line
Essential storage technologiesUsing internal and external storage devicesStorage-management features and toolsStorage-management role servicesBooting from SANs and using SANs with clustersWorking with SMB 3.0Installing and configuring file servicesConfiguring the File And Storage Services roleConfiguring multipath I/OAdding and removing multipath hardware devicesManaging and maintaining MPIOMeeting performance, capacity, and availability requirementsConfiguring Hyper-VUnderstanding Hyper-VInstalling Hyper-VCreating virtual machines
Configuring storageUsing the Disk Management toolsAdding new disksUsing the MBR and GPT partition stylesWorking with MBR disksWorking with GPT disksUnderstanding legacy and protective MBRsUsing and converting MBR and GPT disksUsing the disk storage typesWorking with basic and dynamic disksUsing and converting basic and dynamic disksCreating and managing virtual hard disks for Hyper-VConverting FAT or FAT32 to NTFSWorking with removable disksManaging MBR disk partitions on basic disksCreating partitions and simple volumesFormatting a partition, logical drive, or volumeConfiguring drive lettersConfiguring mount pointsExtending partitionsShrinking partitionsDeleting a partition, logical drive, or volumeManaging GPT disk partitions on basic disksESPMSR partitionsPrimary partitionsLDM Metadata and LDM Data partitionsOEM or unknown partitionsManaging volumes on dynamic disksCreating a simple or spanned volumeConfiguring RAID 0: StripingRecovering a failed simple, spanned, or striped diskMoving dynamic disksConfiguring RAID 1: Disk mirroringCreating a mirrored set by using two new disksAdding a mirror to an existing volumeMirroring boot and system volumesMirroring boot and system volumes on MBR disksMirroring boot and system volumes on GPT disksConfiguring RAID 5: Disk striping with parityBreaking or removing a mirrored setResolving problems with mirrored setsRepairing a mirrored system volumeRebuilding mirrored system volumes on MBR disksRebuilding mirrored system volumes on GPT disksResolving problems with RAID-5 sets
Working with trusted platformsManaging TPMUnderstanding TPM states and toolsManaging TPM owner authorization informationPreparing and initializing a TPM for first useTurning an initialized TPM on or offClearing the TPMChanging the TPM owner passwordIntroducing BitLocker Drive EncryptionBitLocker essentialsBitLocker modesBitLocker changesUsing hardware encryption, secure boot, and Network UnlockHardware-encrypted drivesOptimizing encryptionSetting permitted encryption typesPreparing BitLocker for startup authentication and secure bootUsing Network UnlockProvisioning BitLocker prior to deploymentDeploying BitLocker Drive EncryptionSetting up and managing BitLocker Drive EncryptionConfiguring and enabling BitLocker Drive EncryptionDetermining whether a computer has BitLocker-encrypted volumesEnabling BitLocker on fixed data drivesEnabling BitLocker on removable data drivesEnabling BitLocker on operating-system volumesManaging and troubleshooting BitLockerRecovering data protected by BitLocker Drive EncryptionDisabling or turning off BitLocker Drive Encryption
Understanding the disk and file-system structureUsing FATFile allocation table structureFAT featuresUsing NTFSNTFS structureNTFS featuresAnalyzing the NTFS structureAdvanced NTFS featuresHard linksData streamsChange journalsObject identifiersReparse pointsSparse filesTransactional NTFSUsing ReFSReFS featuresReFS structuresReFS advantagesReFS integrity streams, data scrubbing, and salvageUsing file-based compressionNTFS compressionCompressed (zipped) folders
Managing NTFS disk quotasHow quota management worksConfiguring disk quotasCustomizing quota entries for individual usersManaging disk quotas after configurationExporting and importing quota entriesAutomated disk maintenancePreventing disk-integrity problemsRunning Check Disk interactivelyAnalyzing FAT volumes by using ChkDskAnalyzing NTFS volumes by using ChkDskRepairing volumes and marking bad sectors by using ChkDskAutomated optimization of disksPreventing fragmentation of disksFixing fragmentation by using Optimize DrivesUnderstanding the fragmentation analysis
Understanding storage spacesUsing and configuring offloaded transfersUnderstanding how offloaded transfers workVerifying support for offloaded transfersWorking with available storageStorage Management EssentialsCreating storage pools and allocating spaceCreating storage spacesCreating a virtual disk in a storage spaceCreating a standard volumeDiagnosing and resolving problems with storage spacesConfiguring data deduplicationUnderstanding data deduplicationSelecting data for deduplicationInteroperability with data deduplicationDeduplicating volumesMonitoring deduplication
File-sharing essentialsUnderstanding file-sharing modelsEnabling file sharingUsing and finding sharesNavigating SMB versionsHiding and controlling share accessSpecial and administrative sharesC$, D$, E$, and other drive sharesADMIN$FAX$IPC$NETLOGONPRINT$SYSVOLAccessing shares for administrationCreating and publishing shared foldersCreating shares by using File ExplorerCreating shares by using Computer ManagementCreating shared folders in Server ManagerChanging shared folder settingsPublishing shares in Active DirectoryManaging share permissionsUnderstanding share permissionsConfiguring share permissionsConfiguring synced sharingUnderstanding Work Folders and sync sharesDeploying sync shares through Group PolicyCreating sync shares and enabling SMB accessAccessing Work Folders on clients
Managing access permissionsFile and folder ownershipPermission inheritance for files and foldersChanging shaded permissions and stopping inheritanceResetting and replacing permissionsConfiguring access permissionsBasic permissionsSpecial permissionsTroubleshooting permissionsManaging file shares after configurationManaging claims-based access controlsUnderstanding central access policiesEnabling dynamic controls and claims-based policyDefining central access policiesAuditing file and folder accessEnabling basic auditing for files and foldersEnabling advanced auditingSpecifying files and folders to auditExtending access policies to auditingMonitoring the security logs
Understanding file screening and storage reportingManaging file screening and storage reportingManaging global file-resource settingsConfiguring email notificationsConfiguring notification limitsReviewing reports and configuring storage-report parametersConfiguring report locationsConfiguring file-screen auditingConfiguring classificationEnabling access-denied assistanceManaging the file groups to which screens are appliedManaging file-screen templatesCreating file screensDefining file-screening exceptionsScheduling and generating storage reports

Content preview from Windows Server 2012 R2 Inside Out: Configuration, Storage, & Essentials

Chapter 9. Software and User Account Control administration

Software installation essentials

Mastering User Account Control

Maintaining application integrity

The security architecture in Microsoft Windows Server 2012 R2 and Windows 8.1 controls the way accounts are used and applications are installed and run. Windows Server 2012 R2 has two general types of user accounts: standard user accounts and administrator user accounts. Standard users can perform any general computing tasks, such as starting programs, opening documents, and creating folders, and can perform any support tasks that do not affect other users or the security of the computer. Administrators, however, have complete access to the computer and can make changes that affect other users ...