Details

<p> Contents</p> <p>Introduction xxi</p> <p>Assessment Test xxx</p> <p><b>Chapter 1 Installing Active Directory 1</b></p> <p>Verifying the File System 2</p> <p>Resilient File System (ReFS) 3</p> <p>NTFS 4</p> <p>Verifying Network Connectivity 7</p> <p>Basic Connectivity Tests 7</p> <p>Tools and Techniques for Testing Network Configuration 8</p> <p>Understanding Domain and Forest Functionality 10</p> <p>About the Domain Functional Level 10</p> <p>About Forest Functionality 12</p> <p>Planning the Domain Structure 13</p> <p>Installing Active Directory 14</p> <p>New to Active Directory 14</p> <p>Read-Only Domain Controllers 15</p> <p>Adprep 15</p> <p>Active Directory Prerequisites 16</p> <p>The Installation Process 16</p> <p>Deploying Active Directory in Windows Azure 24</p> <p>Installing Additional Domain Controllers</p> <p>by Using Install from Media 24</p> <p>Verifying Active Directory Installation 25</p> <p>Using Event Viewer 25</p> <p>Using Active Directory Administrative Tools 27</p> <p>Testing from Clients 29</p> <p>Creating and Configuring Application Data Partitions 30</p> <p>Creating Application Data Partitions 31</p> <p>Managing Replicas 32</p> <p>Removing Replicas 33</p> <p>Using ntdsutil to Manage Application l Data Partitions 33</p> <p>Configuring DNS Integration with Active Directory 35</p> <p>Summary 37</p> <p>Exam Essentials 37</p> <p>Review Questions 39</p> <p><b>Chapter 2 Administer Active Directory 43</b></p> <p>Active Directory Overview 44</p> <p>Understanding Active Directory Features 45</p> <p>Understanding Security Principals 46</p> <p>An Overview of OUs 47</p> <p>The Purpose of OUs 48</p> <p>Benefits of OUs 48</p> <p>Planning the OU Structure 49</p> <p>Logical Grouping of Resources 49</p> <p>Understanding OU Inheritance 51</p> <p>Delegating Administrative Control 51</p> <p>Applying Group Policies 53</p> <p>Creating OUs 53</p> <p>Managing OUs 57</p> <p>Moving, Deleting, and Renaming OUs 57</p> <p>Administering Properties of OUs 58</p> <p>Delegating Control of OUs 59</p> <p>Troubleshooting OUs 62</p> <p>Creating and Managing Active Directory Objects 63</p> <p>Overview of Active Directory Objects 63</p> <p>Managing Object Properties 70</p> <p>Understanding Groups 74</p> <p>Filtering and Advanced Active Directory Features 76</p> <p>Moving, Renaming, and Deleting Active</p> <p>Directory Objects 77</p> <p>Resetting an Existing Computer Account 79</p> <p>Understanding Dynamic Access Control 79</p> <p>Managing Security and Permissions 80</p> <p>Using ACLs and ACEs 81</p> <p>Using Group Policy for Security 82</p> <p>Fine-Grained Password Policies 84</p> <p>Publishing Active Directory Objects 86</p> <p>Making Active Directory Objects Available to Users 87</p> <p>Publishing Printers 87</p> <p>Publishing Shared Folders 88</p> <p>Querying Active Directory 89</p> <p>Using the Active Directory Administrative Center 90</p> <p>Using the Command Prompt for Active Directory</p> <p>Configuration 94</p> <p>PowerShell for Active Directory 95</p> <p>Summary 97</p> <p>Exam Essentials 97</p> <p>Review Questions 99</p> <p><b>Chapter 3 Maintaining Active Directory 103</b></p> <p>Overview of Network Planning 104</p> <p>The Three Types of Networks 105</p> <p>Exploring Network Constraints 105</p> <p>Overview of Active Directory Replication and Sites 106</p> <p>Replicating Active Directory 107</p> <p>Understanding Active Directory Site Concepts 107</p> <p>Understanding Distributed File System Replication 111</p> <p>Implementing Sites and Subnets 112</p> <p>Creating Sites 113</p> <p>Creating Subnets 115</p> <p>Configuring Sites 116</p> <p>Configuring Replication 117</p> <p>Intrasite Replication 118</p> <p>Intersite Replication 118</p> <p>RODCs and Replication 124</p> <p>Configuring Server Topology 125</p> <p>Using Universal Group Membership Caching 128</p> <p>Configuring DNS SRV Records 129</p> <p>Monitoring and Troubleshooting Active Directory Replication 129</p> <p>About System Monitor 130</p> <p>Troubleshooting Replication 130</p> <p>Reasons for Creating Multiple Domains 132</p> <p>Reasons for Using Multiple Domains 132</p> <p>Drawbacks of Multiple Domains 135</p> <p>Creating Domain Trees and Forests 135</p> <p>Planning Trees and Forests 136</p> <p>The Promotion Process 139</p> <p>Creating a Domain Tree 140</p> <p>Joining a New Domain Tree to a Forest 142</p> <p>Adding Additional Domain Controllers 142</p> <p>Demoting a Domain Controller 143</p> <p>Managing Multiple Domains 144</p> <p>Managing Single-Master Operations 145</p> <p>Managing Trusts 149</p> <p>Managing UPN Suffixes 153</p> <p>Name Suffix Routing 153</p> <p>Managing Global Catalog Servers 153</p> <p>Managing Universal Group Membership Caching 155</p> <p>Upgrading Existing Domains and Forests 156</p> <p>Maintain Active Directory 157</p> <p>Overview of the Windows Server 2016 Backup Utility 158</p> <p>Setting Up an Active Directory Backup 163</p> <p>Restoring Active Directory 164</p> <p>Active Directory Recycle Bin 166</p> <p>Restartable Active Directory 166</p> <p>Offline Maintenance 167</p> <p>Monitoring Replication 169</p> <p>Using the ADSI Editor 170</p> <p>Wbadmin Command-Line Utility 170</p> <p>Summary 171</p> <p>Exam Essentials 172</p> <p>Review Questions 175</p> <p><b>Chapter 4 Implementing GPOs 179</b></p> <p>Introducing Group Policy 180</p> <p>Understanding Group Policy Settings 181</p> <p>The Security Settings Section of the GPO 184</p> <p>Client-Side Extensions 185</p> <p>Group Policy Objects 185</p> <p>Group Policy Inheritance 186</p> <p>Planning a Group Policy Strategy 187</p> <p>Implementing Group Policy 188</p> <p>Creating GPOs 188</p> <p>Linking Existing GPOs to Active Directory 191</p> <p>Forcing a GPO to Update 191</p> <p>Managing Group Policy 193</p> <p>Managing GPOs 193</p> <p>Security Filtering of a Group Policy 195</p> <p>Delegating Administrative Control of GPOs 197</p> <p>Controlling Inheritance and Filtering Group Policy 198</p> <p>Assigning Script Policies 199</p> <p>Understanding the Loopback Policy 201</p> <p>Managing Network Configuration 201</p> <p>Configuring Network Settings 203</p> <p>Automatically Enrolling User and</p> <p>Computer Certificates in Group Policy 203</p> <p>Redirecting Folders 205</p> <p>Managing GPOs with Windows PowerShell Group Policy Cmdlets 206</p> <p>Item-Level Targeting 207</p> <p>Back Up, Restore, Import, Copy, and Migration Tables 208</p> <p>Deploying Software Through a GPO 211</p> <p>The Software Management Life Cycle 211</p> <p>The Windows Installer 213</p> <p>Deploying Applications 217</p> <p>Implementing Software Deployment 218</p> <p>Preparing for Software Deployment 218</p> <p>Software Restriction Policies 219</p> <p>Using AppLocker 220</p> <p>Group Policy Slow Link Detection 220</p> <p>Publishing and Assigning Applications 220</p> <p>Applying Software Updates 222</p> <p>Verifying Software Installation 223</p> <p>Configuring Automatic Updates in Group Policy 224</p> <p>Configuring Software Deployment Settings 224</p> <p>The Software Installation Properties Dialog Box 225</p> <p>Removing Programs 228</p> <p>Microsoft Windows Installer Settings 229</p> <p>Troubleshooting Group Policies 229</p> <p>RSoP in Logging Mode 231</p> <p>RSoP in Planning Mode 233</p> <p>Using the gpresult.exe Command 234</p> <p>Using the Group Policy Infrastructure Status Dashboard 236</p> <p>Summary 236</p> <p>Exam Essentials 237</p> <p>Review Questions 239</p> <p><b>Chapter 5 Understanding Certificates 243</b></p> <p>Features of Windows Server 2016 Certificate Services 244</p> <p>Active Directory Certificate Services Roles 245</p> <p>Planning the Certificate Authority Hierarchy 246</p> <p>Installing AD CS 252</p> <p>Configuring Active Directory Certificate Services 255</p> <p>PowerShell for AD CS 266</p> <p>Summary 267</p> <p>Exam Essentials 268</p> <p>Review Questions 269</p> <p>Chapter 6 Configure Access and Information Protection Solutions 273</p> <p>Implement Active Directory Federation Services 274</p> <p>What Is a Claim? 274</p> <p>What’s New for AD FS in Windows Server 2016? 278</p> <p>Active Directory Federation Services Installation 280</p> <p>Workplace Join 292</p> <p>Device Registration Service 292</p> <p>Workplace Join Your Device 292</p> <p>Active Directory Rights Management Services 293</p> <p>Considerations and Requirements for AD RMS 294</p> <p>Installing AD RMS 296</p> <p>Managing AD RMS: AD RMS Service Connection Point 298</p> <p>Configuring a Web Application Proxy 306</p> <p>Publishing Applications 306</p> <p>Configuring Pass-Through Authentication 307</p> <p>Authentication Capabilities 308</p> <p>PowerShell Commands 309</p> <p>Summary 311</p> <p>Exam Essentials 311</p> <p>Review Questions 313</p> <p>Appendix Answers to Review Questions 315</p> <p>Chapter 1: Installing Active Directory 316</p> <p>Chapter 2: Administer Active Directory 317</p> <p>Chapter 3: Maintaining Active Directory 317</p> <p>Chapter 4: Implementing GPOs 318</p> <p>Chapter 5: Understanding Certificates 319</p> <p>Chapter 6: Configure Access and Information</p> <p>Protection Solutions 320</p> <p>Index 321</p>

<p><b>William Panek, MCP, MCSE, MCSA, MCTS, MCITP, CCNA,</b> is a four-time Microsoft MVP winner. He has taught at Boston University, Clark University, and the University of Maryland, and presently conducts live online classes for StormWind Studios (www.stormwind.com). Will has been a consultant and trainer for the United States Secret Service, Cisco, the United States Air Force, and the United States Army. He also creates training videos to help students prepare for various Microsoft exams.

<p>Covers 100% of Identity with Windows Server 2016 exam objectives, including install and configure Active Directory Domain Services (AD DS), manage and maintain AD DS, create and manage Group Policy, implement Active Directory Certificate Services (AD CS), implement identity federation and access solutions, and much more... Includes online interactive learning environment with: <p><b>+ Custom practice exam</b><br> <b>+50 electronic flashcards</b><br> <b>+Searchable key term glossary</b><br> <b>+Vioeos for the chapter exercises</b> <p><b>Your complete study guide to the final MCSA exam, fully updated for Windows Server 2016</b> <p>You're ready for the third and final MCSA exam. This edition of the bestselling, comprehensive study guide covers 100% of the objectives for Exam 70-742, getting you fully prepared. Four-time Microsoft MVP William Panek covers server deployment, maintenance, and management; file and print server configuration; network services and access; Active Directory; Group Policy; server infrastructure, and much more. You will reinforce your study with hands-on exercises, monitor your progress with practice tests, and understand practical application through real-world scenarios. Access to the Sybex online interactive learning environment lets you review from anywhere on any device. You'll face the exam with complete confidence. <p><b>Coverage of 100% of all exam objectives in this Study Guide means you'll be ready to:</b> <ul> <li>Installing and configuring Active Directory Domain Services</li> <li>Managing and maintaining AD DS</li> <li>Creating and managing Group Policy</li> <li>Implementing Active Directory Certificate Services</li> <li>Implementing identity federation and access solutions</li> <li>. . . and much more</li> </ul> <p><b>Interactive learning environment</b> <p>Take your exam prep to the next level with Sybex's superior interactive online study tools. To access our learning environment, simply visit <b>www.wiley.com/go/sybextestprep</b>, type in your unique PIN, and instantly gain access to: <ul> <b><li>FREE access to Sybex's online inter- active learning environment and study tools for one year.</li></b> <b><li>Interactive test bank includes a practice exam to help you identify areas where further review is needed. Get more than 90% of the answers correct, and you're ready to take the certification exam.</li></b> <b><li>50 electronic flashcards to reinforce learning and last-minute prep before the exam.</li></b> <b><li>Comprehensive glossary in PDF format gives you instant access to the key terms so you are fully prepared.</li></b> <b><li>Videos to accompany many chapter exercises.</li></b> </ul> <p><b>ABOUT THE MCSA WINDOWS SERVER CERTIFICATION</b> <p>The Microsoft Certified Solutions Associate (MCSA) program verifies your skills. To earn the MCSA Server 2016 certification, you must successfully complete three exams: 70-740, 70-741, and 70-742. This study guide covers everything you need to know to pass the third and final exam, 70-742. Visit https:// www.microsoft.com/en-us/learning/ mcsa-windows-server-2016-certification.aspx for more information.

US