book

Windows Server® 2012 Pocket Consultant

by William R. Stanek

September 2012

Intermediate to advanced

720 pages

25h 11m

English

Microsoft Press

Read now

Unlock full access

Who Is This Book For?How This Book Is OrganizedConventions Used in This BookOther ResourcesErrata & Book SupportWe Want to Hear from YouStay in Touch
Windows Server 2012 and Windows 8Getting to Know Windows Server 2012Power Management OptionsNetworking Tools and ProtocolsUnderstanding Networking OptionsWorking with Networking ProtocolsDomain Controllers, Member Servers, and Domain ServicesWorking with Active DirectoryUsing Read-Only Domain ControllersUsing Restartable Active Directory Domain ServicesName-Resolution ServicesUsing Domain Name SystemUsing Windows Internet Name ServiceUsing Link-Local Multicast Name ResolutionFrequently Used ToolsWindows PowerShell 3.0Windows Remote ManagementEnabling and Using WinRMConfiguring WinRM
Server Roles, Role Services, and Features for Windows Server 2012Full-Server, Minimal-Interface, and Server Core InstallationsNavigating Server CoreInstalling Windows Server 2012Performing a Clean InstallationPerforming an Upgrade InstallationPerforming Additional Administration Tasks During InstallationUsing the Command Line During InstallationForcing Disk Partition Removal During InstallationLoading Disk Device Drivers During InstallationCreating, Formatting, Deleting, and Extending Disk Partitions During InstallationCreating Disk Partitions During InstallationFormatting Disk Partitions During InstallationDeleting Disk Partitions During InstallationExtending Disk Partitions During InstallationChanging the Installation TypeConverting Full-Server and Minimal-Interface InstallationsConverting Server Core InstallationsManaging Roles, Role Services, and FeaturesPerforming Initial Configuration TasksServer Manager Essentials and BinariesManaging Your Servers RemotelyConnecting to and Working with Remote ServersAdding and Removing Roles, Role Services, and FeaturesManaging System PropertiesThe Computer Name TabThe Hardware TabThe Advanced TabSetting Windows PerformanceSetting Application PerformanceConfiguring Virtual MemoryConfiguring Data Execution PreventionUsing and Configuring DEPUnderstanding DEP CompatibilityConfiguring System and User Environment VariablesCreating an Environment VariableEditing an Environment VariableDeleting an Environment VariableConfiguring System Startup and RecoverySetting Startup OptionsSetting Recovery OptionsThe Remote Tab
Managing Applications, Processes, and PerformanceTask ManagerViewing and Working with ProcessesAdministering ProcessesViewing System ServicesViewing and Managing System PerformanceCPU Usage: The BasicsMemory Usage: The BasicsNetwork Usage: The BasicsViewing and Managing Remote User SessionsManaging System ServicesNavigating Services in Server ManagerNavigating Services in Computer ManagementStarting, Stopping, and Pausing ServicesConfiguring Service StartupConfiguring Service LogonConfiguring Service RecoveryDisabling Unnecessary ServicesEvent Logging and ViewingAccessing Events in Server ManagerAccessing Events in Event ViewerFiltering Event LogsSetting Event Log OptionsClearing Event LogsArchiving Event LogsArchive Log FormatsCreating Log ArchivesViewing Log ArchivesMonitoring Server Performance and ActivityWhy Monitor Your Server?Getting Ready to MonitorUsing the Monitoring ConsolesChoosing Counters to MonitorPerformance LoggingCreating and Managing Data Collector SetsCollecting Performance Counter DataCollecting Performance Trace DataCollecting Configuration DataViewing Data Collector ReportsConfiguring Performance Counter AlertsTuning System PerformanceMonitoring and Tuning Memory UsageMonitoring and Tuning Processor UsageMonitoring and Tuning Disk I/OMonitoring and Tuning Network Bandwidth and Connectivity
Understanding Group PoliciesGroup Policy EssentialsIn What Order Are Multiple Policies Applied?When Are Group Policies Applied?Group Policy Requirements and Version CompatibilityNavigating Group Policy ChangesManaging Local Group PoliciesLocal Group Policy ObjectsAccessing the Top-Level Local Policy SettingsLocal Group Policy Object SettingsAccessing Administrator, Non-Administrator, and User-Specific Local Group PolicyManaging Site, Domain, and Organizational Unit PoliciesUnderstanding Domain and Default PoliciesUsing the Group Policy Management ConsoleGetting to Know the Policy EditorUsing Administrative Templates to Set PoliciesCreating and Linking GPOsCreating and Using Starter GPOsDelegating Privileges for Group Policy ManagementBlocking, Overriding, and Disabling PoliciesMaintaining and Troubleshooting Group PolicyRefreshing Group PolicyConfiguring the Refresh IntervalModeling Group Policy for Planning PurposesCopying, Pasting, and Importing Policy ObjectsBacking Up and Restoring Policy ObjectsDetermining Current Group Policy Settings and Refresh StatusDisabling an Unused Part of Group PolicyChanging Policy Processing PreferencesConfiguring Slow-Link DetectionRemoving Links and Deleting GPOsTroubleshooting Group PolicyFixing Default Group Policy ObjectsManaging Users and Computers with Group PolicyCentrally Managing Special FoldersRedirecting a Special Folder to a Single LocationRedirecting a Special Folder Based on Group MembershipRemoving RedirectionUser and Computer Script ManagementAssigning Computer Startup and Shutdown ScriptsAssigning User Logon and Logoff ScriptsDeploying Software Through Group PolicyGetting to Know Software Installation PolicyDeploying Software Throughout Your OrganizationConfiguring Software Deployment OptionsUpdating Deployed SoftwareUpgrading Deployed SoftwareAutomatically Enrolling Computer and User CertificatesManaging Automatic Updates in Group PolicyConfiguring Automatic UpdatesOptimizing Automatic UpdatesUsing Intranet Update Service Locations
Using Security TemplatesUsing the Security Templates and Security Configuration And Analysis Snap-insReviewing and Changing Template SettingsChanging Settings for Account, Local, and Event Log PoliciesConfiguring Restricted GroupsEnabling, Disabling, and Configuring System ServicesConfiguring Security Settings for Registry and File System PathsAnalyzing, Reviewing, and Applying Security TemplatesDeploying Security Templates to Multiple ComputersUsing the Security Configuration WizardCreating Security PoliciesEditing Security PoliciesApplying Security PoliciesRolling Back the Last-Applied Security PolicyDeploying a Security Policy to Multiple Computers

Introducing Active DirectoryActive Directory and DNSRead-Only Domain Controller DeploymentActive Directory Features for Windows Server 2008 R2Active Directory Features for Windows Server 2012Working with Domain StructuresUnderstanding DomainsUnderstanding Domain Forests and Domain TreesUnderstanding Organizational UnitsUnderstanding Sites and SubnetsWorking with Active Directory DomainsUsing Computers with Active DirectoryWorking with Domain Functional LevelsUsing Windows Server 2003 Functional LevelUsing Windows Server 2008 Functional LevelUsing Windows Server 2008 R2 Functional LevelUsing Windows Server 2012 Functional LevelRaising or Lowering Domain and Forest FunctionalityUnderstanding the Directory StructureExploring the Data StoreExploring Global CatalogsUniversal Group Membership CachingReplication and Active DirectoryActive Directory and LDAPUnderstanding Operations Master RolesUsing the Active Directory Recycle BinPreparing Schema for the Recycle BinRecovering Deleted ObjectsUsing Ldp.exe for Basic RecoveryUsing Windows PowerShell for Basic and Advanced RecoveryUsing the Enhanced Recycle Bin for Recovery
Tools for Managing Active DirectoryActive Directory Administration ToolsActive Directory Command-Line ToolsActive Directory Support ToolsUsing Active Directory Users And ComputersActive Directory Administrative Center and Windows PowerShellManaging Computer AccountsCreating Computer Accounts on a Workstation or ServerCreating Computer Accounts in Active Directory Administrative CenterCreating Computer Accounts in Active Directory Users And ComputersViewing and Editing Computer Account PropertiesDeleting, Disabling, and Enabling Computer AccountsResetting Locked Computer AccountsMoving Computer AccountsManaging ComputersJoining a Computer to a Domain or WorkgroupUsing Offline Domain JoinManaging Domain Controllers, Roles, and CatalogsInstalling and Demoting Domain ControllersViewing and Transferring Domainwide RolesViewing and Transferring the Domain Naming Master RoleViewing and Transferring Schema Master RolesTransferring Roles Using the Command LineSeizing Roles Using the Command LineConfiguring Global CatalogsConfiguring Universal Group Membership CachingManaging Organizational UnitsCreating Organizational UnitsViewing and Editing Organizational Unit PropertiesRenaming and Deleting Organizational UnitsMoving Organizational UnitsManaging SitesCreating SitesCreating SubnetsAssociating Domain Controllers with SitesConfiguring Site LinksConfiguring Site Link BridgesMaintaining Active DirectoryUsing ADSI EditExamining Intersite TopologyTroubleshooting Active Directory
The Windows Server Security ModelAuthentication ProtocolsAccess ControlsClaims-Based Access ControlsCentral Access PoliciesDifferences Between User and Group AccountsUser AccountsLogon Names, Passwords, and Public CertificatesSecurity Identifiers and User AccountsGroup AccountsGroup TypesGroup ScopeSecurity Identifiers and Group AccountsWhen to Use Domain Local, Global, and Universal GroupsDefault User Accounts and GroupsBuilt-in User AccountsPredefined User AccountsThe Administrator AccountThe Guest AccountBuilt-in and Predefined GroupsImplicit Groups and Special IdentitiesAccount CapabilitiesPrivilegesLogon RightsBuilt-in Capabilities for Groups in Active DirectoryUsing Default Group AccountsGroups Used by AdministratorsImplicit Groups and IdentitiesUser Account Setup and OrganizationAccount Naming PoliciesRules for Display NamesRules for Logon NamesNaming SchemesPassword and Account PoliciesUsing Secure PasswordsSetting Account PoliciesConfiguring Account PoliciesConfiguring Password PoliciesEnforce Password HistoryMaximum Password AgeMinimum Password AgeMinimum Password LengthPasswords Must Meet Complexity RequirementsStore Password Using Reversible Encryption For All UsersConfiguring Account Lockout PoliciesAccount Lockout ThresholdAccount Lockout DurationReset Account Lockout Counter AfterConfiguring Kerberos PoliciesEnforce User Logon RestrictionsMaximum LifetimeMaximum ToleranceConfiguring User Rights PoliciesConfiguring Global User RightsConfiguring Local User RightsAdding a User AccountCreating Domain User AccountsCreating Local User AccountsAdding a Group AccountCreating a Global GroupCreating a Local Group and Assigning MembersHandling Global Group MembershipManaging Individual MembershipManaging Multiple Memberships in a GroupSetting the Primary Group for Users and ComputersImplementing Managed AccountsCreating and Using Managed Service AccountsConfiguring Services to Use Managed Service AccountsRemoving Managed Service AccountsMoving Managed Service AccountsUsing Virtual Accounts
Managing User Contact InformationSetting Contact InformationSearching for Users and Groups in Active DirectoryConfiguring the User’s Environment SettingsSystem Environment VariablesLogon ScriptsAssigning Home DirectoriesSetting Account Options and RestrictionsManaging Logon HoursConfiguring Logon HoursEnforcing Logon HoursSetting Permitted Logon WorkstationsSetting Dial-in and VPN PrivilegesSetting Account Security OptionsManaging User ProfilesLocal, Roaming, and Mandatory ProfilesWorking with Roaming and Mandatory ProfilesRestricting Roaming ProfilesCreating Local ProfilesCreating Roaming ProfilesCreating Mandatory ProfilesUsing the System Utility to Manage Local ProfilesCreating a Profile by HandCopying an Existing Profile to a New User AccountCopying or Restoring a ProfileDeleting a Local Profile and Assigning a New OneChanging the Profile TypeUpdating User and Group AccountsRenaming User and Group AccountsCopying Domain User AccountsImporting and Exporting AccountsDeleting User and Group AccountsChanging and Resetting PasswordsEnabling User AccountsAccount DisabledAccount Locked OutAccount ExpiredManaging Multiple User AccountsSetting Profiles for Multiple AccountsSetting Logon Hours for Multiple AccountsSetting Permitted Logon Workstations for Multiple AccountsSetting Logon, Password, and Expiration Properties for Multiple AccountsTroubleshooting Logon ProblemsViewing and Setting Active Directory Permissions
Managing the File Services RoleAdding Hard Disk DrivesPhysical DrivesPreparing a Physical Drive for UseUsing Disk ManagementRemovable Storage DevicesInstalling and Checking for a New DriveUnderstanding Drive StatusWorking with Basic, Dynamic, and Virtual DisksUsing Basic and Dynamic DisksSpecial Considerations for Basic and Dynamic DisksChanging Drive TypesConverting a Basic Disk to a Dynamic DiskChanging a Dynamic Disk Back to a Basic DiskReactivating Dynamic DisksRescanning DisksMoving a Dynamic Disk to a New SystemManaging Virtual Hard DisksUsing Basic Disks and PartitionsPartitioning BasicsCreating Partitions and Simple VolumesFormatting PartitionsCompressing Drives and DataCompressing DrivesCompressing Directories and FilesExpanding Compressed DrivesExpanding Compressed Directories and FilesEncrypting Drives and DataUnderstanding Encryption and the Encrypting File SystemEncrypting Directories and FilesWorking with Encrypted Files and FoldersConfiguring Recovery PolicyDecrypting Files and Directories
Using Volumes and Volume SetsUnderstanding Volume BasicsUnderstanding Volume SetsCreating Volumes and Volume SetsDeleting Volumes and Volume SetsManaging VolumesImproving Performance and Fault Tolerance with RAIDImplementing RAID on Windows Server 2012Implementing RAID-0: Disk StripingImplementing RAID-1: Disk MirroringCreating a Mirror Set in Disk ManagementMirroring an Existing VolumeImplementing RAID-5: Disk Striping with ParityCreating a Striped Set with Parity in Disk ManagementManaging RAID and Recovering from FailuresBreaking a Mirrored SetResynchronizing and Repairing a Mirrored SetRepairing a Mirrored System Volume to Enable BootRemoving a Mirrored SetRepairing a Striped Set Without ParityRegenerating a Striped Set with ParityStandards-Based Storage ManagementGetting Started with Standards-Based StorageWorking with Standards-Based StorageCreating Storage Pools and Allocating SpaceCreating a Storage SpaceCreating a Virtual Disk in a Storage SpaceCreating a Standard VolumeManaging Existing Partitions and DrivesAssigning Drive Letters and PathsChanging or Deleting the Volume LabelDeleting Partitions and DrivesConverting a Volume to NTFSThe Convert Utility SyntaxUsing the Convert UtilityResizing Partitions and VolumesRepairing Disk Errors and Inconsistencies AutomaticallyChecking Disks ManuallyRunning Check Disk InteractivelyAnalyzing and Optimizing Disks
Using and Enabling File SharingConfiguring Standard File SharingViewing Existing SharesCreating Shared Folders in Computer ManagementCreating Shared Folders in Server ManagerChanging Shared Folder SettingsManaging Share PermissionsVarious Share PermissionsViewing and Configuring Share PermissionsManaging Existing SharesUnderstanding Special SharesConnecting to Special SharesViewing User and Computer SessionsManaging Sessions and SharesEnding Individual SessionsEnding All SessionsManaging Open ResourcesClosing an Open FileClosing All Open FilesStopping File and Folder SharingConfiguring NFS SharingUsing Shadow CopiesUnderstanding Shadow CopiesCreating Shadow CopiesRestoring a Shadow CopyReverting an Entire Volume to a Previous Shadow CopyDeleting Shadow CopiesDisabling Shadow CopiesConnecting to Network DrivesMapping a Network DriveDisconnecting a Network DriveObject Management, Ownership, and InheritanceObjects and Object ManagersObject Ownership and TransferObject InheritanceFile and Folder PermissionsUnderstanding File and Folder PermissionsSetting Basic File and Folder PermissionsSetting Special Permissions on Files and FoldersSetting Claims-Based PermissionsAuditing System ResourcesSetting Auditing PoliciesAuditing Files and FoldersAuditing the RegistryAuditing Active Directory ObjectsUsing, Configuring, and Managing NTFS Disk QuotasUnderstanding NTFS Disk Quotas and How NTFS Quotas Are UsedSetting NTFS Disk Quota PoliciesEnabling NTFS Disk Quotas on NTFS VolumesViewing Disk Quota EntriesCreating Disk Quota EntriesDeleting Disk Quota EntriesExporting and Importing NTFS Disk Quota SettingsDisabling NTFS Disk QuotasUsing, Configuring, and Managing Resource Manager Disk QuotasUnderstanding Resource Manager Disk QuotasManaging Disk Quota TemplatesCreating Resource Manager Disk Quotas
Creating a Backup and Recovery PlanFiguring Out a Backup PlanThe Basic Types of BackupDifferential and Incremental BackupsSelecting Backup Devices and MediaCommon Backup SolutionsBuying and Using Backup MediaSelecting a Backup UtilityBacking Up Your Data: The EssentialsInstalling the Windows Backup and Recovery UtilitiesGetting Started with Windows Server BackupGetting Started with the Backup Command-Line UtilityWorking with Wbadmin CommandsUsing General-Purpose CommandsUsing Backup Management CommandsUsing Recovery Management CommandsPerforming Server BackupsConfiguring Scheduled BackupsModifying or Stopping Scheduled BackupsCreating and Scheduling Backups with WbadminRunning Manual BackupsRecovering Your Server from Hardware or Startup FailureRecovering from a Failed StartStarting a Server in Safe ModeBacking Up and Restoring the System StateRestoring Active DirectoryRestoring the Operating System and the Full SystemRestoring Applications, Nonsystem Volumes, and Files and FoldersManaging Encryption Recovery PolicyUnderstanding Encryption Certificates and Recovery PolicyConfiguring the EFS Recovery PolicyBacking Up and Restoring Encrypted Data and CertificatesBacking Up Encryption CertificatesRestoring Encryption Certificates
Navigating Networking in Windows Server 2012Managing Networking in Windows 8 and Windows Server 2012Installing TCP/IP NetworkingConfiguring TCP/IP NetworkingConfiguring Static IP AddressesUsing the ping Command to Check an AddressConfiguring a Static IPv4 or IPv6 AddressConfiguring Dynamic IP Addresses and Alternate IP AddressingConfiguring Multiple GatewaysConfiguring Networking for Hyper-VManaging Network ConnectionsChecking the Status, Speed, and Activity for Network ConnectionsEnabling and Disabling Network ConnectionsRenaming Network Connections
Understanding DHCPUsing Dynamic IPv4 Addressing and ConfigurationUsing Dynamic IPv6 Addressing and ConfigurationChecking IP Address AssignmentUnderstanding ScopesInstalling a DHCP ServerInstalling DHCP ComponentsStarting and Using the DHCP ConsoleConnecting to Remote DHCP ServersStarting and Stopping a DHCP ServerAuthorizing a DHCP Server in Active DirectoryConfiguring DHCP ServersConfiguring Server BindingsUpdating DHCP StatisticsDHCP Auditing and TroubleshootingIntegrating DHCP and DNSIntegrating DHCP and NAPAvoiding IP Address ConflictsSaving and Restoring the DHCP ConfigurationManaging DHCP ScopesCreating and Managing SuperscopesCreating SuperscopesAdding Scopes to a SuperscopeRemoving Scopes from a SuperscopeActivating and Deactivating a SuperscopeDeleting a SuperscopeCreating and Managing ScopesCreating Normal Scopes for IPv4 AddressesCreating Normal Scopes for IPv6 AddressesCreating Multicast ScopesSetting Scope OptionsViewing and Assigning Server OptionsViewing and Assigning Scope OptionsViewing and Assigning Reservation OptionsModifying ScopesActivating and Deactivating ScopesEnabling the Bootstrap ProtocolRemoving a ScopeConfiguring Multiple Scopes on a NetworkCreating and Managing Failover ScopesCreating Failover ScopesModifying or Removing Failover ScopesManaging the Address Pool, Leases, and ReservationsViewing Scope StatisticsEnabling and Configuring MAC Address FilteringSetting a New Exclusion RangeReserving DHCP AddressesReleasing Addresses and LeasesModifying Reservation PropertiesDeleting Leases and ReservationsBacking Up and Restoring the DHCP DatabaseBacking Up the DHCP DatabaseRestoring the DHCP Database from BackupUsing Backup and Restore to Move the DHCP Database to a New ServerForcing the DHCP Server Service to Regenerate the DHCP DatabaseReconciling Leases and Reservations
Understanding DNSIntegrating Active Directory and DNSEnabling DNS on the NetworkConfiguring Name Resolution on DNS ClientsInstalling DNS ServersInstalling and Configuring the DNS Server ServiceConfiguring a Primary DNS ServerConfiguring a Secondary DNS ServerConfiguring Reverse LookupsConfiguring Global NamesManaging DNS ServersAdding and Removing Servers to ManageStarting and Stopping a DNS ServerUsing DNSSEC and Signing ZonesCreating Child Domains Within ZonesCreating Child Domains in Separate ZonesDeleting a Domain or SubnetManaging DNS RecordsAdding Address and Pointer RecordsAdding a PTR Record LaterAdding DNS Aliases with CNAMEAdding Mail Exchange ServersAdding Name ServersViewing and Updating DNS RecordsUpdating Zone Properties and the SOA RecordModifying the SOA RecordAllowing and Restricting Zone TransfersNotifying Secondaries of ChangesSetting the Zone TypeEnabling and Disabling Dynamic UpdatesManaging DNS Server Configuration and SecurityEnabling and Disabling IP Addresses for a DNS ServerControlling Access to DNS Servers Outside the OrganizationCreating Nonforwarding and Forwarding-Only ServersCreating Forwarding ServersConfiguring Conditional ForwardingEnabling and Disabling Event LoggingUsing Debug Logging to Track DNS ActivityMonitoring a DNS Server

Content preview from Windows Server® 2012 Pocket Consultant

Chapter 7. Core Active Directory Administration

Core Active Directory administration focuses on key tasks you perform routinely with Active Directory Domain Services (AD DS), such as creating computer accounts or joining computers to a domain. In this chapter, you’ll learn about the tools you can use to manage Active Directory as well as about specific techniques for managing computers, domain controllers, and organizational units.

Tools for Managing Active Directory

Several sets of tools are available for managing Active Directory, including ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Start your free trial

Windows Server® 2008 Administrator's Pocket Consultant

William Stanek

Microsoft® Windows Server™ 2003 Administrator's Pocket Consultant, Second Edition

William R. Stanek

Self-Paced Training Kit (Exam 70-640): Configuring Windows Server® 2008 Active Directory® (2nd Edition)

Nelson Ruest Dan Holme Danielle Ruest, and Jason Kellington

Active Directory® for Microsoft® Windows® Server 2003 Technical Reference

Stan Reimer, Mike Mulcare

Publisher Resources

ISBN: 9780735668614Purchase book