book

Windows Server® 2008 Inside Out

Name: Windows Server® 2008 Inside Out
Author: William R. Stanek
ISBN: 9780735624382

by William R. Stanek

February 2008

Intermediate to advanced

1520 pages

56h 32m

English

Microsoft Press

Read now

Unlock full access

Windows Server® 2008 Inside Out
Acknowledgments
About the CD
What’s on the CDSystem RequirementsViewing the E-BookSupport InformationFind Additional Content OnlineHow to Reach the Author
Conventions and Features Used in This Book
Text ConventionsDesign Conventions
1. Windows Server 2008 Overview and Planning
1. Introducing Windows Server 2008
What’s New in Windows Server 2008Windows Server 2008 StandardWindows Server 2008 EnterpriseWindows Server 2008 DatacenterWindows Web Server 200864-Bit ComputingVirtualized ComputingWindows Vista and Windows Server 2008Windows Vista EditionsWindows Vista and Active DirectoryArchitecture ImprovementsKernel ArchitectureBoot EnvironmentSupport ArchitectureNetwork Diagnostics FrameworkWindows Diagnostics InfrastructureOther Diagnostics Enhancements
2. Planning for Windows Server 2008
Overview of PlanningThe Microsoft Solutions Framework Process ModelYour Plan: The Big PictureIdentifying Your Organizational TeamsMicrosoft Solutions Framework Team ModelYour Project TeamAssessing Project GoalsThe Business PerspectiveIdentifying IT GoalsExamining IT—Business InteractionPredicting Network ChangeAnalyzing the Existing NetworkEvaluating the Network InfrastructureAssessing SystemsIdentify Network Services and ApplicationsIdentifying Security InfrastructureReviewing Network AdministrationNetwork Administrative ModelDisaster RecoveryNetwork Management ToolsDefining Objectives and ScopeSpecifying Organizational ObjectivesSetting the ScheduleShaping the BudgetAllowing for ContingenciesFinalizing Project ScopeDefining the New Network EnvironmentDefining Domain and Security ArchitectureAssess Domain Architecture and ChangesImpact on NetworkIdentify Security RequirementsChanging the Administrative ApproachManagement ToolsSelect and Implement StandardsChange ManagementThinking About Active DirectoryDesigning the Active Directory NamespaceManaging Domain TrustsIdentifying Domain and Forest Functional LevelsDefining Active Directory Server RolesPlanning for Server UsageServer RolesDetermining Which Windows Edition to UseUsing Windows Server 2008 StandardUsing Windows Server 2008 EnterpriseUsing Windows Server 2008 DatacenterUsing Windows Web Server 2008Selecting a Software Licensing ProgramRetail Product LicensesVolume-Licensing ProgramsOpen License ProgramSelect LicenseEnterprise Agreement LicenseSoftware AssuranceFinal Considerations for Planning and Deployment
3. Installing Windows Server 2008
Getting a Quick StartProduct LicensingPreparing for Windows Server 2008 InstallationSystem Hardware RequirementsHow a Clean Installation and an Upgrade DifferSupported Upgrade PathsUsing Windows UpdatePreinstallation TasksInstalling Windows Server 2008Installation on x86-Based SystemsInstallation on 64-Bit SystemsPlanning PartitionsInstallation TypeNaming ComputersNetwork and Domain Membership OptionsProtocolsDomain MembershipNetworking ComponentsPerforming a Clean InstallationPerforming an Upgrade InstallationActivation SequenceActivate Windows over the InternetActivate Windows by TelephonePerforming Additional Administration Tasks During InstallationAccessing a Command Prompt During InstallationForcing Disk Partition Removal During InstallationLoading Disk Device Drivers During InstallationCreating, Deleting, and Extending Disk Partitions During InstallationTroubleshooting InstallationStart with the Potential Points of FailureSetup Refuses to Install or StartSetup Reports a Media or DVD-ROM ErrorSetup Reports Insufficient System ResourcesContinue Past Lockups and FreezesPostinstallation
2. Managing Windows Server 2008 Systems
4. Managing Windows Server 2008
Working with the Administration ToolsUsing Control Panel UtilitiesUsing Graphical Administrative ToolsUsing Command-Line UtilitiesUtilities to KnowUsing Net ToolsUsing Windows PowerShellUsing the Initial Configuration Tasks ConsoleWorking with Computer ManagementComputer Management System ToolsComputer Management Storage ToolsComputer Management Services And Applications ToolsWorking with Server ManagerUsing Control PanelUsing the Appearance And Personalization ConsoleUsing the Date And Time UtilityUsing the Folder Options UtilityUsing the Regional and Language Options UtilityUsing the System Console

5. Configuring Windows Server 2008
Optimizing the Menu SystemNavigating the Start Menu OptionsModifying the Start Menu ContentAdding, Copying, and Moving Menu ItemsHighlighting and Hiding Menu ItemsControlling the Frequently Used Programs ListSorting and Renaming Menu ItemsRemoving Items from the Start MenuCustomizing the Desktop and the TaskbarConfiguring Desktop ItemsConfiguring the TaskbarChanging the Taskbar Size and PositionUsing Auto Hide and LockingGrouping Similar Taskbar ItemsControlling Programs in the Notification AreaOptimizing ToolbarsCustomizing the Quick Launch ToolbarDisplaying Other Custom ToolbarsCreating Personal Toolbars
6. Windows Server 2008 MMC Administration
Introducing the MMCUsing the MMCMMC Snap-InsMMC ModesMMC Windows and StartupMMC Tool AvailabilityMMC and Remote ComputersBuilding Custom MMCsStep 1: Creating the ConsoleStep 2: Adding Snap-Ins to the ConsoleStep 3: Saving the Finished ConsoleSetting the Initial Console View Before SavingSetting the Console Mode Before SavingSetting the Console Icon Before SavingSaving the Console Tool to the Desktop, the Start Menu, or a FolderDesigning Custom Taskpads for the MMCGetting Started with TaskpadsUnderstanding Taskpad View StylesCreating and Managing TaskpadsCreating and Managing TasksCreating Menu Command TasksCreating Shell Command TasksCreating Navigation TasksArranging, Editing, and Removing TasksPublishing and Distributing Your Custom Tools
7. Configuring Roles, Role Services, and Features
Using Roles, Role Services, and FeaturesMaking Supplemental Components AvailableInstalling Components with Server ManagerViewing Configured Roles and Role ServicesManaging Server RolesAdding a Server RoleRemoving a Server RoleManaging Role ServicesAdding a Role ServiceRemoving a Role ServiceManaging Windows FeaturesAdding a FeatureRemoving a FeatureInstalling Components at the Command LineGetting Started with ServerManagerCmdUnderstanding Component NamesDetermining the Installed Roles, Role Services, and FeaturesInstalling Components Using ServerManagerCmdRemoving Components Using ServerManagerCmd
8. Managing and Troubleshooting Hardware
Understanding Hardware Installation ChangesChoosing Internal DevicesChoosing External DevicesInstalling DevicesUnderstanding Device InstallationInstalling New DevicesViewing Device and Driver DetailsWorking with Device DriversDevice Driver EssentialsUsing Signed and Unsigned Device DriversViewing Driver InformationViewing Advanced, Resources, and Other SettingsInstalling and Updating Device DriversRestricting Device Installation Using Group PolicyRolling Back DriversRemoving Device Drivers for Removed DevicesUninstalling, Reinstalling, and Disabling Device DriversManaging HardwareAdding Non–Plug and Play HardwareEnabling and Disabling HardwareTroubleshooting HardwareResolving Resource Conflicts
9. Managing the Registry
Introducing the RegistryUnderstanding the Registry StructureRegistry Root KeysHkey_Local_MachineHklm\ComponentsHklm\HardwareHklm\SamHklm\SecurityHklm\SoftwareHklm\SystemHkey_UsersHkey_Classes_RootHkey_Current_ConfigHkey_Current_UserRegistry Data: How It Is Stored and UsedWhere Registry Data Comes FromTypes of Registry Data AvailableWorking with the RegistrySearching the RegistryModifying the RegistryModifying ValuesAdding Keys and ValuesRemoving Keys and ValuesModifying the Registry of a Remote MachineImporting and Exporting Registry DataLoading and Unloading Hive FilesWorking with the Registry from the Command LineBacking Up and Restoring the RegistryMaintaining the RegistryUsing the Windows Installer Clean Up UtilityUsing the Windows Installer ZapperRemoving Registry Settings for Active Installations That Have FailedRemoving Partial or Damaged Settings for Individual ApplicationsSecuring the RegistryPreventing Access to the Registry UtilitiesApplying Permissions to Registry KeysControlling Remote Registry AccessAuditing Registry Access
10. Software and User Account Control Administration
Understanding Software Installation ChangesMastering User Account ControlElevation, Prompts, and the Secure DesktopConfiguring UAC and Admin Approval ModeMaintaining Application IntegrityApplication Access TokensApplication Run LevelsConfiguring Run LevelsControlling Application Installation and Run Behavior
11. Performance Monitoring and Tuning
Tuning Performance, Memory Usage, and Data ThroughputTuning Windows Operating System PerformanceTuning Processor SchedulingTuning Virtual MemoryTracking a System’s General HealthMonitoring EssentialsGetting Processor and Memory Usage for TroubleshootingGetting Information on Running ApplicationsMonitoring and Troubleshooting ProcessesMonitoring and Troubleshooting ServicesGetting Network Usage InformationGetting Information on User and Remote User SessionsTracking Events and Troubleshooting by Using Event ViewerUnderstanding the Event LogsAccessing the Event Logs and Viewing EventsViewing Event Logs on Remote SystemsSorting, Finding, and Filtering EventsSorting the Event LogsSearching the Event LogsFiltering the Event LogsArchiving Event LogsTracking Events Using PowerShellUsing Subscriptions and Forwarded Events
12. Comprehensive Performance Analysis and Logging
Establishing Performance BaselinesMonitoring Reliability and PerformanceComprehensive Performance MonitoringUsing Performance MonitorSelecting Performance Objects and Counters to MonitorChoosing Views and Controlling the DisplayMonitoring Performance RemotelyResolving Performance BottlenecksResolving Memory BottlenecksResolving Processor BottlenecksResolving Disk I/O BottlenecksResolving Network BottlenecksPerformance LoggingCreating and Managing Data Collector SetsCollecting Performance Counter DataCollecting Performance Trace DataCollecting Configuration DataViewing Data Collector ReportsConfiguring Performance Counter AlertsMonitoring Performance from the Command LineAnalyzing Trace Logs at the Command Line
3. Managing Windows Server 2008 Storage and File Systems
13. Boot Configuration
Boot from Hardware and FirmwareHardware and Firmware Power StatesDiagnosing Hardware and Firmware Startup ProblemsResolving Hardware and Firmware Startup ProblemsBoot Environment EssentialsManaging Startup and Boot ConfigurationManaging Startup and Recovery OptionsManaging System Boot ConfigurationWorking with the BCD EditorManaging the Boot Configuration Data Store and Its EntriesViewing BCD EntriesCreating and Identifying the BCD StoreImporting and Exporting the BCD StoreCreating, Copying, and Deleting BCD EntriesSetting BCD Entry ValuesChanging Data Execution Prevention and Physical Address Extension OptionsChanging the Operating System Display OrderChanging the Default Operating System EntryChanging the Default TimeoutChanging the Boot Sequence Temporarily
14. Storage Management
Essential Storage TechnologiesUsing Internal and External Storage DevicesImproving Storage ManagementBooting from SANs and Using SANs with ClustersConfiguring Multipath I/OAdding Multipath Hardware DevicesRemoving Multipath Hardware DevicesMeeting Performance, Capacity, and Availability RequirementsInstalling and Configuring File ServicesOptimizing the File Services RoleConfiguring the File Services RoleConfiguring StorageUsing the Disk Management ToolsAdding New DisksUsing the MBR and GPT Partition StylesWorking with MBR DisksWorking with GPT DisksUsing and Converting MBR and GPT DisksUsing the Disk Storage TypesWorking with Basic and Dynamic DisksUsing and Converting Basic and Dynamic DisksUsing Disk Management to Convert a Basic Disk to a Dynamic DiskUsing DiskPart to Convert a Basic Disk to a Dynamic DiskUsing Disk Management to Change a Dynamic Disk Back to a Basic DiskUsing DiskPart to Convert a Dynamic Disk to a Basic DiskConverting FAT or FAT32 to NTFSWorking with Removable DisksManaging MBR Disk Partitions on Basic DisksCreating Partitions and Simple VolumesFormatting a Partition, Logical Drive, or VolumeConfiguring Drive LettersConfiguring Mount PointsExtending PartitionsShrinking PartitionsDeleting a Partition, Logical Drive, or VolumeManaging GPT Disk Partitions on Basic DisksESPMSR PartitionsPrimary PartitionsLDM Metadata and LDM Data PartitionsOEM or Unknown PartitionsManaging Volumes on Dynamic DisksCreating a Simple or Spanned VolumeConfiguring RAID 0: StripingRecovering a Failed Simple, Spanned, or Striped DiskMoving Dynamic DisksConfiguring RAID 1: Disk MirroringCreating a Mirrored Set Using Two New DisksAdding a Mirror to an Existing VolumeMirroring Boot and System VolumesMirroring Boot and System Volumes on MBR DisksMirroring Boot and System Volumes on GPT DisksConfiguring RAID 5: Disk Striping with ParityBreaking or Removing a Mirrored SetResolving Problems with Mirrored SetsRepairing a Mirrored System VolumeRebuilding Mirrored System Volumes on MBR DisksRebuilding Mirrored System Volumes on GPT DisksResolving Problems with RAID-5 Sets
15. TPM and BitLocker Drive Encryption
Working with Trusted PlatformsManaging TPMUnderstanding TPM States and ToolsInitializing a TPM for First UseTurning an Initialized TPM On or OffClearing the TPMChanging the TPM Owner PasswordIntroducing BitLocker Drive EncryptionDeploying BitLocker Drive EncryptionSetting Up and Managing BitLocker Drive EncryptionCreating the BitLocker Drive Encryption Partition for a Computer with No Operating SystemCreating the BitLocker Drive Encryption Partition for a Computer with an Operating SystemConfiguring and Enabling BitLocker Drive EncryptionDetermining Whether a Computer Has BitLocker Encrypted VolumesManaging BitLocker Passwords and PINsEncrypting Server Data VolumesRecovering Data Protected by BitLocker Drive EncryptionDisabling or Turning Off BitLocker Drive Encryption
16. Managing Windows Server 2008 File Systems
Understanding Disk and File System StructureUsing FATFile Allocation Table StructureFAT FeaturesUsing NTFSNTFS StructuresNTFS FeaturesAnalyzing NTFS StructureAdvanced NTFS FeaturesHard LinksData StreamsChange JournalsObject IdentifiersReparse PointsSparse FilesTransactional NTFSUsing File-Based CompressionNTFS CompressionCompressed (Zipped) FoldersManaging Disk QuotasHow Quota Management WorksConfiguring Disk QuotasCustomizing Quota Entries for Individual UsersManaging Disk Quotas After ConfigurationExporting and Importing Quota EntriesMaintaining File System IntegrityHow File System Errors OccurFixing File System Errors by Using Check DiskAnalyzing FAT Volumes by Using ChkDskAnalyzing NTFS Volumes by Using ChkDskRepairing Volumes and Marking Bad Sectors by Using ChkDskDefragmenting DisksConfiguring Automated DefragmentationFixing Fragmentation by Using Disk DefragmenterUnderstanding the Fragmentation Analysis
17. File Sharing and Security
File Sharing EssentialsUnderstanding File-Sharing ModelsUsing and Finding SharesHiding and Controlling Share AccessSpecial and Administrative SharesC$, D$, E$, and Other Drive SharesADMIN$FAX$IPC$NETLOGONPRINT$PUBLICSYSVOLAccessing Shares for AdministrationCreating and Publishing Shared FoldersCreating Shares by Using Windows ExplorerCreating Shares by Using Computer ManagementPublishing Shares in Active DirectoryManaging Share PermissionsUnderstanding Share PermissionsConfiguring Share PermissionsManaging File and Folder PermissionsFile and Folder OwnershipTaking Ownership of a File or FolderTransferring OwnershipPermission Inheritance for Files and FoldersChanging Shaded Permissions and Stopping InheritanceResetting and Replacing PermissionsConfiguring File and Folder PermissionsBasic PermissionsSpecial PermissionsDetermining Effective PermissionsManaging File Shares After ConfigurationAuditing File and Folder AccessEnabling Auditing for Files and FoldersSpecifying Files and Folders to AuditMonitoring the Security Logs
18. Using Volume Shadow Copy
Shadow Copy EssentialsUsing Shadow Copies of Shared FoldersHow Shadow Copies WorksImplementing Shadow Copies for Shared FoldersManaging Shadow Copies in Computer ManagementConfiguring Shadow Copies in Computer ManagementMaintaining Shadow Copies After ConfigurationReverting an Entire VolumeConfiguring Shadow Copies at the Command LineEnabling Shadow Copying from the Command LineCreate Manual Snapshots from the Command LineViewing Shadow Copy InformationDeleting Snapshot Images from the Command LineDisabling Shadow Copies from the Command LineReverting Volumes from the Command LineUsing Shadow Copies on Clients
19. Using Remote Desktop for Administration
Remote Desktop for Administration EssentialsConfiguring Remote Desktop for AdministrationEnabling Remote Desktop for Administration on ServersPermitting and Restricting Remote LogonConfiguring Remote Desktop for Administration Through Group PolicySupporting Remote Desktop Connection ClientsRemote Desktop Connection ClientRunning the Remote Desktop Connection ClientRunning Remote DesktopsTracking Who’s Logged On
4. Managing Windows Server 2008 Networking and Print Services
20. Networking with TCP/IP
Navigating Networking in Windows Server 2008Using TCP/IPUnderstanding IPv4 AddressingUnicast IPv4 AddressesClass A NetworksClass B NetworksClass C NetworksLoopback, Public, and Private AddressesMulticast IPv4 AddressesBroadcast IPv4 AddressesSpecial IPv4 Addressing RulesUsing Subnets and Subnet MasksSubnet MasksNetwork Prefix NotationSubnettingSubnetting Class A NetworksSubnetting Class B NetworksSubnetting Class C NetworksUnderstanding IP Data PacketsGetting and Using IPv4 AddressesUnderstanding IPv6Understanding Name ResolutionDomain Name SystemHost NamesDomain NamesFully Qualified Domain Name (FQDN)Name ResolutionWindows Internet Naming Service (WINS)Link-Local Multicast Name Resolution (LLMNR)
21. Managing TCP/IP Networking
Installing TCP/IP NetworkingPreparing for Installation of TCP/IP NetworkingInstalling Network AdaptersInstalling Networking Services (TCP/IP)Configuring TCP/IP NetworkingConfiguring Static IP AddressesUsing the PING Command to Check an AddressConfiguring a Static IPv4 or IPv6 AddressConfiguring Dynamic IP Addresses and Alternate IP AddressingConfiguring Multiple IP Addresses and GatewaysConfiguring DNS ResolutionBasic DNS SettingsAdvanced DNS SettingsConfiguring WINS ResolutionManaging Network ConnectionsChecking the Status, Speed, and Activity for Local Area ConnectionsViewing Network Configuration InformationEnabling and Disabling Local Area ConnectionsRenaming Local Area ConnectionsTroubleshooting and Testing Network SettingsDiagnosing and Resolving Local Area Connection ProblemsDiagnosing and Resolving Internet Connection ProblemsPerforming Basic Network TestsDiagnosing and Resolving IP Addressing ProblemsDiagnosing and Resolving Routing ProblemsReleasing and Renewing DHCP SettingsDiagnosing and Resolving Name Resolution Issues
22. Managing DHCP
DHCP EssentialsDHCPv4 and AutoconfigurationDHCPv6 and AutoconfigurationDHCP Security ConsiderationsPlanning DHCPv4 and DHCPv6 ImplementationsDHCPv4 Messages and Relay AgentsDHCPv6 Messages and Relay AgentsDHCP Availability and Fault Tolerance for IPv4 and IPv650/50 Failover80/20 Failover100/100 FailoverSetting Up DHCP ServersInstalling the DHCP Server ServiceAuthorizing DHCP Servers in Active DirectoryCreating and Configuring ScopesCreating Normal Scopes for IPv4 AddressesCreating Normal Scopes for IPv6 AddressesCreating Normal Scopes Using NetshUsing ExclusionsUsing ReservationsActivating ScopesConfiguring TCP/IP OptionsLevels of Options and Their UsesOptions Used by Windows ClientsUsing User-Specific and Vendor-Specific TCP/IP OptionsSettings Options for All ClientsSettings Options for RRAS and NAP ClientsSetting Add-On Options for Directly Connected ClientsDefining Classes to Get Different Option SetsCreating the ClassConfiguring Clients to Use the ClassAdvanced DHCP Configuration and MaintenanceConfiguring DHCP Audit LoggingBinding the DHCP Server Service to a Network InterfaceIntegrating DHCP and DNSIntegrating DHCP and NAPEnabling Conflict Detection on DHCP ServersSaving and Restoring the DHCP ConfigurationManaging and Maintaining the DHCP DatabaseSetting DHCP Database PropertiesBacking Up and Restoring the DatabaseSetting Up DHCP Relay AgentsConfiguring and Enabling Routing and Remote AccessAdding and Configuring the DHCP Relay Agent
23. Architecting DNS Infrastructure
DNS EssentialsPlanning DNS ImplementationsPublic and Private NamespacesName Resolution Using DNSDNS Resource RecordsDNS Zones and Zone TransfersZones That Aren’t Integrated with Active DirectoryZones That Are Integrated with Active DirectorySecondary Zones, Stub Zones, and Conditional ForwardingIntegration with Other TechnologiesSecurity ConsiderationsDNS Queries and SecurityDNS Dynamic Updates and SecurityExternal DNS Name Resolution and SecurityArchitecting a DNS DesignSplit-Brain Design: Same Internal and External NamesSeparate-Name Design: Different Internal and External Names
24. Implementing and Managing DNS
Installing the DNS Server ServiceUsing DNS with Active DirectoryUsing DNS Without Active DirectoryDNS SetupConfiguring DNS Using the WizardConfiguring a Small Network Using the Configure A DNS Server WizardConfiguring a Large Network Using the Configure A DNS Server WizardConfiguring DNS Zones, Subdomains, Forwarders, and Zone TransfersCreating Forward Lookup ZonesCreating Reverse Lookup ZonesConfiguring Forwarders and Conditional ForwardingConfiguring Subdomains and Delegating AuthorityConfiguring Zone TransfersConfiguring Secondary NotificationAdding Resource RecordsHost Address (A and AAAA) and Pointer (PTR) RecordsCanonical Name (CNAME) RecordsMail Exchanger (MX) RecordsName Server (NS) RecordsStart of Authority (SOA) RecordsService Location (SRV) RecordsDeploying Global NamesMaintaining and Monitoring DNSConfiguring Default Application Directory Partitions and Replication ScopeSetting Aging and ScavengingConfiguring Logging and Checking DNS Server LogsTroubleshooting the DNS Client ServiceTry Reregistering the ClientCheck the Client’s TCP/IP ConfigurationChecking IPv4Checking IPv6Check the Client’s Resolver CachePerform Lookups for TroubleshootingTroubleshooting the DNS Server ServiceCheck the Server’s TCP/IP ConfigurationCheck the Server’s CacheCheck Replication to Other Name ServersExamine the Configuration of the DNS ServerExamine Zones and Zone Records
25. Implementing and Maintaining WINS
WINS EssentialsNetBIOS Namespace and ScopeNetBIOS Node TypesWINS Name Registration and CacheWINS Implementation DetailsSetting Up WINS ServersConfiguring Replication PartnersReplication EssentialsConfiguring Automatic Replication PartnersUsing Designated Replication PartnersConfiguring and Maintaining WINSConfiguring Burst HandlingChecking Server Status and ConfigurationChecking Active Registrations and Scavenging RecordsMaintaining the WINS DatabaseVerifying the WINS Database ConsistencyCompacting the WINS DatabaseBacking Up the WINS DatabaseRestoring the WINS DatabaseEnabling WINS Lookups Through DNS
26. Deploying Print Services
Understanding Windows Server 2008 Print ServicesPlanning for Printer Deployments and ConsolidationSizing Print Server Hardware and Optimizing ConfigurationSizing Printer Hardware and Optimizing ConfigurationSetting Up Print ServersInstalling a Print ServerInstalling Network Printers AutomaticallyAdding Local PrintersAdding Network-Attached PrintersChanging Standard TCP/IP Port Monitor SettingsConnecting Users to Shared PrintersAccessing Shared Printers on Windows 2000 or LaterConnecting to Shared Printers Using the Command Line and ScriptsDeploying Printer ConnectionsConfiguring Point and Print RestrictionsManaging Printers Throughout the OrganizationManaging Your PrintersMigrating Printers and Print QueuesMonitoring Printers and Printer Queues Automatically
27. Managing and Maintaining Print Services
Managing Printer PermissionsUnderstanding Printer PermissionsConfiguring Printer PermissionsAssigning Printer OwnershipAuditing Printer AccessManaging Print Server PropertiesViewing and Creating Printer FormsViewing and Configuring Printer PortsViewing and Configuring Print DriversConfiguring Print Spool, Logging, and Notification SettingsManaging Printer PropertiesSetting General Properties, Printing Preferences, and Document DefaultsSetting Overlays and Watermarks for DocumentsInstalling and Updating Print Drivers on ClientsConfiguring Printer Sharing and PublishingOptimizing Printing Through Queues and PoolingConfiguring Queue Priority and SchedulingConfiguring Printer PoolingConfiguring Print SpoolingViewing the Print Processor and Default Data TypeConfiguring Separator PagesUsing Separator PagesSetting a Separator PageCustomizing Separator PagesConfiguring Color ProfilesManaging Print JobsPausing, Starting, and Canceling All PrintingViewing Print JobsManaging a Print Job and Its PropertiesPrinter Maintenance and TroubleshootingMonitoring Print Server PerformancePreparing for Print Server FailureSolving Printing ProblemsPrinter Troubleshooting EssentialsComprehensive Printer TroubleshootingResolving Garbled or Incorrect Printing
28. Deploying Terminal Services
Using Terminal ServicesTerminal Services ClientsTerminal Services ServersTerminal Services LicensingDesigning the Terminal Services InfrastructureCapacity Planning for Terminal ServicesPlanning Organizational Structure for Terminal ServicesDeploying Single-Server EnvironmentsDeploying Multi-Server EnvironmentsSetting Up Terminal ServicesInstalling a Terminal ServerInstalling Applications for Clients to UseChoosing Applications for Terminal Services UsersApplication Licensing for Terminal Services UsersInstalling Applications for Terminal Services UsersUsing Application Compatibility ScriptsModifying Applications After InstallationEnabling and Joining the Terminal Services Session Broker ServiceEnable and Start the Terminal Services Session Broker ServiceAuthorize Terminal Servers to Use the Terminal Services Session Broker ServiceConfigure Each Server to Join the TS Session BrokerConfigure Round Robin DNSSetting Up a Terminal Services License ServerConsiderations for Installing a Terminal Services License ServerInstalling a Terminal Services License ServerActivating the License Server and Configuring Licenses for UseUsing the Terminal Services Configuration ToolConfiguring Global Connection SettingsConfiguring Server SettingsConfiguring Terminal Services SecurityAuditing Terminal Services AccessConfiguring RemoteAppsMaking Programs Available as RemoteAppsDeploying RemoteAppsAccessing RemoteApps Using TS Web AccessCreating an .RDP FileCreating a Windows Installer PackageConfiguring Deployment Settings for All RemoteAppsModifying or Removing a RemoteApp ProgramUsing Terminal Services ManagerConnecting to Terminal ServersGetting Terminal Services InformationManaging User Sessions in Terminal Services ManagerManaging Terminal Services from the Command LineGathering Terminal Services InformationManaging User Sessions from the Command LineOther Useful Terminal Services CommandsConfiguring Terminal Services Per-User SettingsGetting Remote Control of a User’s SessionSetting Up the Terminal Services Profile for Users
5. Managing Active Directory and Security
29. Active Directory Architecture
Active Directory Physical ArchitectureActive Directory Physical Architecture: A Top-Level ViewActive Directory Within the Local Security AuthorityDirectory Service ArchitectureProtocols and Client InterfacesDirectory System Agent and Database LayerExtensible Storage EngineData Store ArchitectureActive Directory Logical ArchitectureActive Directory ObjectsActive Directory Domains, Trees, and ForestsActive Directory TrustsActive Directory Namespaces and PartitionsActive Directory Data Distribution
30. Designing and Managing the Domain Environment
Design Considerations for Active Directory ReplicationDesign Considerations for Active Directory Search and Global CatalogsSearching the TreeAccessing the Global CatalogDesignating Global Catalog ServersDesignating Replication AttributesDesign Considerations for CompatibilityUnderstanding Domain Functional LevelUnderstanding Forest Functional LevelRaising the Domain or Forest Functional LevelDesign Considerations for Active Directory Authentication and TrustsUniversal Groups and AuthenticationUnderstanding Security Tokens and Universal Group Membership CachingEnabling Universal Group Membership CachingNTLM and Kerberos AuthenticationEstablishing the Initial AuthenticationAccessing Resources After AuthenticationAuthentication and Trusts Across Domain BoundariesTwo-Way Transitive TrustsShortcut TrustsAuthentication and Trusts Across Forest BoundariesExamining Domain and Forest TrustsEstablishing External, Shortcut, Realm, and Cross-Forest TrustsVerifying and Troubleshooting TrustsDelegating AuthenticationDelegated Authentication EssentialsConfiguring Delegated AuthenticationConfiguring the Delegated User AccountConfiguring the Delegated Service or Computer AccountDesign Considerations for Active Directory Operations MastersOperations Master RolesUsing, Locating, and Transferring the Schema Master RoleUsing, Locating, and Transferring the Domain Naming Master RoleUsing, Locating, and Transferring the Relative ID Master RoleUsing, Locating, and Transferring the PDC Emulator RoleUsing, Locating, and Transferring the Infrastructure Master RoleSeizing Operations Master Roles
31. Organizing Active Directory
Creating an Active Directory Implementation or Update PlanDeveloping a Forest PlanForest NamespaceSingle vs. Multiple ForestsForest AdministrationDeveloping a Domain PlanDomain Design ConsiderationsSingle vs. Multiple DomainsForest Root Domain Design ConfigurationsChanging Domain DesignDeveloping an Organizational Unit PlanUsing Organizational Units (OUs)Using OUs for DelegationUsing OUs for Group PolicyCreating an OU DesignOU Design: Division or Business Unit ModelOU Design: Geographic ModelOU Design: The Cost Center ModelOU Design: The Administration Model
32. Configuring Active Directory Sites and Replication
Working with Active Directory SitesSingle Site vs. Multiple SitesReplication Within and Between SitesDetermining Site BoundariesUnderstanding Active Directory ReplicationReplication Enhancements for Active DirectoryReplication Enhancements for the Active Directory System VolumeReplication Architecture: An OverviewIntersite Replication EssentialsReplication Rings and Directory PartitionsDeveloping or Revising a Site DesignMapping Network InfrastructureCreating a Site DesignMapping the Network Structure to Site StructureDesigning Each Individual SiteDesigning the Intersite Replication TopologyConsidering the Impact of Site Link BridgingPlanning the Placement of Servers in Sites
33. Implementing Active Directory Domain Services
Preinstallation Considerations for Active DirectoryHardware and Configuration Considerations for Domain ControllersConfiguring Active Directory for Fast Recovery with Storage Area NetworksConnecting Clients to Active DirectoryInstalling Active Directory Domain ServicesActive Directory Installation Options and IssuesUsing the Active Directory Domain Services Installation WizardCreating Additional Domain Controllers for an Existing DomainCreating New Domains in New ForestsCreating a New Domain or Domain Tree Within an Existing ForestPerforming an Active Directory Installation from MediaUninstalling Active DirectoryCreating and Managing Organizational Units (OUs)Creating an OUSetting OU PropertiesCreating or Moving Accounts and Resources for Use with an OUDelegating Administration of Domains and OUsUnderstanding Delegation of AdministrationDelegating Administration
34. Deploying Read-Only Domain Controllers
Introducing Read-Only Domain ControllersDesign Considerations for Read-Only ReplicationInstalling RODCsPreparing for an RODC InstallationInstalling an RODCInstalling an RODC from MediaManaging Password Replication PolicyWorking with Password Replication PolicyAllowing or Denying Accounts in Password Replication PolicyViewing and Managing Credentials on an RODCDetermining Whether an Account Is Allowed or Denied AccessResetting CredentialsDelegating Administrative Permissions
35. Managing Users, Groups, and Computers
Managing Domain User AccountsTypes of UsersConfiguring User Account PoliciesEnforcing Password PolicyConfiguring Account Lockout PolicySetting Kerberos PolicyCreating Password Settings Objects and Applying Secondary SettingsUnderstanding User Account Capabilities, Privileges, and RightsAssigning User RightsAssigning User Rights for a Domain or OUAssigning User Rights on a Specific ComputerCreating and Configuring Domain User AccountsViewing and Setting User Account PropertiesObtaining Effective PermissionsConfiguring Account OptionsConfiguring Profile OptionsTroubleshooting User AccountsManaging User ProfilesProfile EssentialsImplementing and Creating Preconfigured ProfilesConfiguring Local User ProfilesConfiguring Roaming User ProfilesImplementing Mandatory User ProfilesSwitching Between a Local and a Roaming User ProfileManaging User DataUsing Folder RedirectionUsing Offline FilesConfiguring Offline Files on File ServersConfiguring Offline Files on ClientsConfiguring Offline Files in Group PolicyManaging File SynchronizationMaintaining User AccountsDeleting User AccountsDisabling and Enabling User AccountsMoving User AccountsRenaming User AccountsResetting a User’s Domain PasswordUnlocking User AccountsCreating a User Account Password BackupManaging GroupsUnderstanding GroupsTypes of GroupsUnderstanding the Scopes of GroupsDomain Local GroupsGlobal GroupsUniversal GroupsWhich Group Scope Should You Use?Why Use Domain Local Groups?Why Use Global Groups?Why Use Universal Groups?Creating a GroupAdding Members to GroupsDeleting a GroupModifying GroupsFinding a GroupManaging the Properties of GroupsModifying Other Group SettingsManaging Computer AccountsCreating a Computer Account in Active DirectoryJoining Computers to a DomainMoving a Computer AccountDisabling a Computer AccountDeleting a Computer AccountManaging a Computer AccountResetting a Computer AccountConfiguring Properties of Computer AccountsTroubleshooting Computer Accounts
36. Managing Group Policy
Understanding Group PolicyLocal and Active Directory Group PolicyGroup Policy SettingsGroup Policy ArchitectureAdministrative TemplatesImplementing Group PolicyWorking with Local Group PolicyWorking with the Group Policy Management ConsoleUsing the Group Policy Management ConsoleAccessing Forests, Domains, and Sites in the Group Policy Management ConsoleCreating and Linking a New GPO in the Group Policy Management ConsoleEditing an Existing GPO in the Group Policy Management ConsoleLinking to an Existing GPO in the Group Policy Management ConsoleWorking with Starter GPOsDeleting an Existing GPO in the Group Policy Management ConsoleWorking with the Default Group Policy ObjectsManaging Group Policy Through DelegationManaging GPO Creation RightsReviewing Group Policy Management PrivilegesDelegating Group Policy Management PrivilegesDelegating Privileges for Links and RSoPManaging Group Policy Inheritance and ProcessingGroup Policy InheritanceChanging Link Order and PrecedenceOverriding InheritanceBlocking InheritanceEnforcing InheritanceFiltering Group Policy ApplicationGroup Policy ProcessingModifying Group Policy ProcessingModifying User Policy Preference Using Loopback ProcessingUsing Scripts in Group PolicyConfiguring Computer Startup and Shutdown ScriptsConfiguring User Logon and Logoff ScriptsApplying Group Policy Through Security TemplatesWorking with Security TemplatesApplying Security TemplatesMaintaining and Troubleshooting Group PolicyGroup Policy RefreshModifying Group Policy RefreshViewing Applicable GPOs and Last RefreshModeling GPOs for PlanningRefreshing Group Policy ManuallyBacking Up GPOsRestoring GPOsFixing Default Group Policy
37. Active Directory Site Administration
Managing Sites and SubnetsCreating an Active Directory SiteCreating a Subnet and Associating It with a SiteAssociating Domain Controllers with a SiteManaging Site Links and Intersite ReplicationUnderstanding IP and SMTP Replication TransportsCreating a Site LinkConfiguring Replication Schedules for Site LinksConfiguring Site Link BridgesDetermining the ISTGConfiguring Site Bridgehead ServersConfiguring Advanced Site Link OptionsMonitoring and Troubleshooting ReplicationUsing the Replication AdministratorMonitoring ReplicationModifying Intersite Replication for Testing
6. Windows Server 2008 Disaster Planning and Recovery
38. Planning for High Availability
Planning for Software NeedsPlanning for Hardware NeedsPlanning for Support Structures and FacilitiesPlanning for Day-to-Day OperationsPlanning for Deploying Highly Available Servers
39. Preparing and Deploying Server Clusters
Introducing Server ClusteringBenefits and Limitations of ClusteringCluster OrganizationCluster Operating ModesMultisite Options for ClustersUsing Network Load BalancingUsing Network Load Balancing ClustersNetwork Load Balancing ConfigurationNetwork Load Balancing Port and Client Affinity ConfigurationsPlanning Network Load Balancing ClustersManaging Network Load Balancing ClustersCreating a New Network Load Balancing ClusterAdding Nodes to a Network Load Balancing ClusterRemoving Nodes from a Network Load Balancing ClusterConfiguring Event Logging for Network Load Balancing ClustersControlling Cluster and Host TrafficUsing Failover ClusteringFailover Cluster ConfigurationsUnderstanding Failover Cluster ResourcesOptimizing Hardware for Failover ClustersOptimizing Networking for Failover ClustersRunning Failover ClustersThe Cluster Service and Cluster ObjectsThe Cluster HeartbeatThe Cluster DatabaseThe Cluster Quorum ResourceThe Cluster Interface and Network StatesCreating Failover ClustersValidating a ConfigurationCreating a Failover ClusterAdd Nodes to a ClusterManaging Failover Clusters and Their ResourcesAdding Storage to a ClusterModifying Cluster Network SettingsConfiguring Cluster Quorum SettingsCreating Clustered ResourcesControlling the Cluster ServiceConfiguring Resource Failover and FailbackCreating a Shared Folder on a Clustered File ServerConfiguring Print Settings for a Clustered Print Server
40. Disaster Planning
Preparing for a DisasterDeveloping Contingency ProceduresImplementing Problem Escalation and Response ProceduresCreating a Problem Resolution Policy DocumentDisaster Preparedness ProceduresPerforming BackupsUsing Startup RepairGetting Outside HelpOther Windows Recovery Environment FeaturesSetting Startup and Recovery Options
41. Backup and Recovery
Developing Backup StrategiesCreating Your Backup StrategyBackup Strategy ConsiderationsSelecting the Optimal Backup TechniquesUnderstanding Backup TypesUsing Media Rotation and Maintaining Additional Media SetsBacking Up and Recovering Your DataUsing the Backup UtilityBacking Up Your DataScheduling BackupsPerforming a One-Time BackupTracking Scheduled and Manual BackupsRecovering Your DataRecovering Data from the Current ServerRecovering Data from Another ServerRecovering the System StateRestoring the Operating System and the Full SystemBacking Up and Restoring Active DirectoryBackup and Recovery Strategies for Active DirectoryPerforming a Nonauthoritative Restore of Active DirectoryPerforming an Authoritative Restore of Active DirectoryRestoring Sysvol DataRestoring a Failed Domain Controller by Installing a New Domain ControllerTroubleshooting Startup and ShutdownResolving Startup IssuesRepairing Missing or Corrupted System FilesResolving Restart or Shutdown Issues
A. Index to Troubleshooting Topics
B. About the Author
C. Additional Resources for IT Professionals from Microsoft Press
Windows ServerWindows ClientSQL Server 2005Exchange Server 2007Scripting
D. More Great Resources for IT Professionals from Microsoft Press
Administrator’s Pocket ConsultantAdministrator’s CompanionResource KitSelf-Paced Training Kit
Index
About the Author
Copyright

Content preview from Windows Server® 2008 Inside Out

Chapter 30. Designing and Managing the Domain Environment

Design Considerations for Active Directory Replication

Design Considerations for Active Directory Search and Global Catalogs

Design Considerations for Compatibility

Design Considerations for Active Directory Authentication and Trusts

Delegating Authentication

Design Considerations for Active Directory Operations Masters

As you learned in the previous chapter, the physical structure of Active Directory is tightly integrated with the security architecture of the Microsoft Windows operating system. At a high level, Active Directory provides interfaces to which clients can connect, and the directory physically exists on disk in a database file called Ntds.dit. When you install Active Directory ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9780735624382Purchase book

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Windows Server® 2008 Inside Out

by William R. Stanek

Chapter 30. Designing and Managing the Domain Environment

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.