Senior Acquisitions Editor: Kenyon Brown

Development Editor: Kim Wimpsett

Technical Editors: Rodney R. Fournier and Chris Crayton

Senior Production Editor: Rebecca Anderson and Christine O’Connor

Copy Editor: Judy Flynn

Editorial Manager: Mary Beth Wakefield

Production Manager: Kathleen Wisor

Executive Editor: Jim Minatel

Book Designers: Bill Gibson and Judy Fung

Proofreader: Nancy Carrasco

Indexer: Jack Lewis

Project Coordinator, Cover: Brent Savage

Cover Designer: Wiley

Cover Image: Getty Images Inc./Jeremy Woodhouse

Published simultaneously in Canada

ISBN: 978-1-119-35914-2

ISBN: 978-1-119-35916-6 (ebk.)

ISBN: 978-1-119-35915-9 (ebk.)

Manufactured in the United States of America

No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning or otherwise, except as permitted under Sections 107 or 108 of the 1976 United States Copyright Act, without either the prior written permission of the Publisher, or authorization through payment of the appropriate per-copy fee to the Copyright Clearance Center, 222 Rosewood Drive, Danvers, MA 01923, (978) 750-8400, fax (978)
646-8600. Requests to the Publisher for permission should be addressed to the Permissions Department, John Wiley & Sons, Inc., 111 River Street, Hoboken, NJ 07030, (201) 748-6011, fax (201) 748-6008, or online at http://www.wiley.com/go/permissions.

Limit of Liability/Disclaimer of Warranty: The publisher and the author make no representations or warranties with respect to the accuracy or completeness of the contents of this work and specifically disclaim all warranties, including without limitation warranties of fitness for a particular purpose. No warranty may be created or extended by sales or promotional materials. The advice and strategies contained herein may not be suitable for every situation. This work is sold with the understanding that the publisher is not engaged in rendering legal, accounting, or other professional services. If professional assistance is required, the services of a competent professional person should be sought. Neither the publisher nor the author shall be liable for damages arising herefrom. The fact that an organization or Web site is referred to in this work as a citation and/or a potential source of further information does not mean that the author or the publisher endorses the information the organization or Web site may provide or recommendations it may make. Further, readers should be aware that Internet Web sites listed in this work may have changed or disappeared between when this work was written and when it is read.

For general information on our other products and services or to obtain technical support, please contact our Customer Care Department within the U.S. at (877) 762-2974, outside the U.S. at (317) 572-3993 or fax (317) 572-4002.

Wiley publishes in a variety of print and electronic formats and by print-on-demand. Some material included with standard print versions of this book may not be included in e-books or in print-on-demand. If this book refers to media such as a CD or DVD that is not included in the version you purchased, you may download this material at http://booksupport.wiley.com. For more information about Wiley
products, visit www.wiley.com.

Library of Congress Control Number: 2018932871

TRADEMARKS: Wiley, the Wiley logo, and the Sybex logo are trademarks or registered trademarks of John Wiley & Sons, Inc. and/or its affiliates, in the United States and other countries, and may not be used without written permission. Windows Server is a registered trademark of Microsoft Corporation. All other trademarks are the property of their respective owners. John Wiley & Sons, Inc. is not associated with any product or vendor mentioned in this book.

Contents

About the Author

Acknowledgments

Introduction

The Microsoft Certification Program
Who Should Read This Book?
What’s Inside?
What’s Included with the Book
Recommended Home Lab Setup
How to Contact Sybex/Author
Certification Objectives Maps

Assessment Test

Answers to Assessment Test

Chapter 1 Installing Windows Server 2016

Features and Advantages of Windows Server 2016
Planning the Windows Server 2016 Installation
Activating and Servicing Windows
Using Windows Deployment Services
Understanding Features On Demand
Summary
Video Resources
Exam Essentials
Review Questions

Chapter 2 Installing in the Enterprise

Understanding Automated Deployment Options
Deploying Unattended Installations
Understanding Hyper-V
Summary
Video Resources
Exam Essentials
Review Questions

Chapter 3 Configuring Storage and Replication

Understanding File Systems
Storage in Windows Server 2016
Configuring Permissions
Configuring Disk Quotas
Windows PowerShell
Using Server Manager
Understanding Data Deduplication
Summary
Video Resources
Exam Essentials
Review Questions

Chapter 4 Understanding Hyper-V

Hyper-V Overview
Hyper-V Installation and Configuration
Configuring Virtual Machines
PowerShell Commands
Summary
Video Resources
Exam Essentials
Review Questions

Chapter 5 Configuring High Availability

Components of High Availability
Achieving High Availability
Understanding Network Load Balancing
Achieving High Availability with Hyper-V
Summary
Video Resources
Exam Essentials
Review Questions

Chapter 6 Understanding Clustering

Achieving High Availability with Failover Clustering
Windows Server 2016 Clustering Features
PowerShell Commands for Clustering
Implementing Storage Spaces Direct
Summary
Video Resources
Exam Essentials
Review Questions

Chapter 7 Configuring Windows Containers

Understanding Windows Containers
Using PowerShell for Containers
Summary
Video Resources
Exam Essentials
Review Questions

Chapter 8 Maintaining Windows Server

Configuring Windows Server Updates
Understanding Backups
PowerShell Commands
Summary
Video Resources
Exam Essentials
Review Questions

Chapter 9 Understanding Monitoring

Overview of Windows Server 2016 Performance Monitoring
Using Windows Server 2016 Performance Tools
Summary
Video Resources
Exam Essentials
Review Questions

Chapter 10 Configuring TCP/IP

Understanding TCP/IP
Understanding IP Addressing
Subnetting a Network
Understanding IPv6
Summary
Exam Essentials
Review Questions

Chapter 11 Configuring DNS

Introducing DNS
Introducing DNS Database Zones
Advantages of DNS in Windows Server 2016
Introducing DNS Record Types
Configuring DNS
Monitoring and Troubleshooting DNS
DNS PowerShell Commands
Summary
Exam Essentials
Review Questions

Chapter 12 Configuring DHCP

Understanding DHCP
Installing and Authorizing DHCP
Creating and Managing DHCP Scopes
Working with Advanced DHCP Configuration Options
PowerShell Commands
Summary
Exam Essentials
Review Questions

Chapter 13 Implement IP Address Management

Understanding IPAM
Managing Services
IPAM Access and Auditing
PowerShell Commands for IPAM
Summary
Exam Essentials
Video Resources
Review Questions

Chapter 14 Configuring Network Access

Overview of Dial-Up Networking
Overview of Virtual Private Networks
Configuring Your Remote Access Server
Understanding a VPN
Configuring a VPN
Managing Your Remote Access Server
Configuring a VPN Client
Configuring a Web Application Proxy
Understanding DirectAccess
Overview of Wireless Access
Remote Access Security
Configuring User Access
Configuring Security
PowerShell for Remote Access
Summary
Exam Essentials
Video Resources
Review Questions

Chapter 15 Understanding File Services

Configuring File Server Resource Manager
Configure File and Disk Encryption
Configuring Distributed File System
Configure Advanced File Services
Implementing an Audit Policy
Configure and Optimize Storage
Summary
Exam Essentials
Review Questions

Chapter 16 Configuring High Availability

Components of High Availability
Achieving High Availability
Understanding Network Load Balancing
Achieving High Availability with Failover Clustering
Windows Server 2016 Clustering Features
PowerShell Commands for Clustering
Implementing Storage Spaces Direct
Achieving High Availability with Hyper-V
Summary
Exam Essentials
Video Resources
Review Questions

Chapter 17 Implementing Software Defined Networking

Understanding Software Defined Networking
Hyper-V Overview
Hyper-V Installation and Configuration
Configuring Virtual Machines
PowerShell Commands
Summary
Exam Essentials
Review Questions

Chapter 18 Installing Active Directory

Verifying the File System
Verifying Network Connectivity
Understanding Domain and Forest Functionality
Planning the Domain Structure
Installing Active Directory
Verifying Active Directory Installation
Creating and Configuring Application Data Partitions
Configuring DNS Integration with Active Directory
Summary
Exam Essentials
Review Questions

Chapter 19 Administer Active Directory

Active Directory Overview
An Overview of OUs
Planning the OU Structure
Creating OUs
Managing OUs
Troubleshooting OUs
Creating and Managing Active Directory Objects
Using Group Policy for Security
Publishing Active Directory Objects
Using the Command Prompt for Active Directory Configuration
PowerShell for Active Directory
Summary
Exam Essentials
Review Questions

Chapter 20 Maintaining Active Directory

Overview of Network Planning
Overview of Active Directory Replication and Sites
Implementing Sites and Subnets
Configuring Replication
Monitoring and Troubleshooting Active Directory Replication
Reasons for Creating Multiple Domains
Creating Domain Trees and Forests
Demoting a Domain Controller
Managing Multiple Domains
Maintain Active Directory
Summary
Exam Essentials
Review Questions

Chapter 21 Implementing GPOs

Introducing Group Policy
Planning a Group Policy Strategy
Implementing Group Policy
Managing Group Policy
Deploying Software Through a GPO
Implementing Software Deployment
Configuring Software Deployment Settings
Troubleshooting Group Policies
Summary
Exam Essentials
Review Questions

Chapter 22 Understanding Certificates

Features of Windows Server 2016 Certificate Services
PowerShell for AD CS
Summary
Exam Essentials
Review Questions

Chapter 23 Configure Access and Information Protection Solutions

Implement Active Directory Federation Services
Workplace Join
Active Directory Rights Management Services
Configuring a Web Application Proxy
PowerShell Commands
Summary
Exam Essentials
Review Questions

Appendix Answers to the Review Questions

Chapter 1: Installing Windows Server 2016
Chapter 2: Installing in the Enterprise
Chapter 3: Configuring Storage and Replication
Chapter 4: Understanding Hyper-V
Chapter 5: Configuring High Availability
Chapter 6: Understanding Clustering
Chapter 7: Configuring Windows Containers
Chapter 8: Maintaining Windows Server
Chapter 9: Understanding Monitoring
Chapter 10: Configuring TCP/IP
Chapter 11: Configuring DNS
Chapter 12: Configuring DHCP
Chapter 13: Implement IP Address Management
Chapter 14: Configuring Network Access
Chapter 15: Understanding File Services
Chapter 16: Configuring High Availability
Chapter 17: Implementing Software Defined Networking
Chapter 18: Installing Active Directory
Chapter 19: Administer Active
Directory
Chapter 20: Maintaining Active Directory
Chapter 21: Implementing GPOs
Chapter 22: Understanding Certificates
Chapter 23: Configure Access and Information Protection Solutions

Advert

EULA

List of Tables

Introduction

TABLE I.1
TABLE I.2
TABLE I.3

Chapter 1

TABLE 1.1
TABLE 1.2
TABLE 1.3
TABLE 1.4
TABLE 1.5

Chapter 2

TABLE 2.1
TABLE 2.2
TABLE 2.3
TABLE 2.4
TABLE 2.5
TABLE 2.6
TABLE 2.7
TABLE 2.8

Chapter 3

TABLE 3.1
TABLE 3.2
TABLE 3.3

Chapter 4

TABLE 4.1
TABLE 4.2
TABLE 4.3
TABLE 4.4
TABLE 4.5
TABLE 4.6

Chapter 5

TABLE 5.1
TABLE 5.2
TABLE 5.3

Chapter 6

TABLE 6.1
TABLE 6.2
TABLE 6.3

Chapter 7

TABLE 7.1
TABLE 7.2
TABLE 7.3
TABLE 7.4
TABLE 7.5

Chapter 8

TABLE 8.1
TABLE 8.2
TABLE 8.3
TABLE 8.4
TABLE 8.5

Chapter 9

TABLE 9.1

Chapter 10

TABLE 10.1
TABLE 10.2
TABLE 10.3
TABLE 10.4
TABLE 10.5
TABLE 10.6
TABLE 10.7
TABLE 10.8

Chapter 11

TABLE 11.1
TABLE 11.2
TABLE 11.3
TABLE 11.4
TABLE 11.5
TABLE 11.6
TABLE 11.7
TABLE 11.8
TABLE 11.9
TABLE 11.10

Chapter 12

TABLE 12.1

Chapter 13

TABLE 13.1

Chapter 14

TABLE 14.1
TABLE 14.2
TABLE 14.3

Chapter 15

TABLE 15.1
TABLE 15.2
TABLE 15.3
TABLE 15.4
TABLE 15.5

Chapter 16

TABLE 16.1
TABLE 16.2
TABLE 16.3
TABLE 16.4
TABLE 16.5
TABLE 16.6

Chapter 17

TABLE 17.1
TABLE 17.2
TABLE 17.3
TABLE 17.4
TABLE 17.5
TABLE 17.6

Chapter 18

Table 18.1
Table 18.2
Table 18.3

Chapter 19

Table 19.1
Table 19.2
Table 19.3
Table 19.4

Chapter 20

Table 20.1
Table 20.2
Table 20.3
Table 20.4

Chapter 21

Table 21.1
Table 21.2
Table 21.3

Chapter 22

Table 22.1
Table 22.2
Table 22.3

Chapter 23

Table 23.1
Table 23.2
Table 23.3
Table 23.4
Table 23.5
Table 23.6
Table 23.7
Table 23.8

List of Illustrations

Chapter 1

FIGURE 1.1 Available roles in Windows Server 2016
FIGURE 1.2 Windows Server 2016 Setup
FIGURE 1.3 Windows Server Edition
FIGURE 1.4 Windows Server Installation
FIGURE 1.5 Installing Windows screen
FIGURE 1.6 Customize settings
FIGURE 1.7 Windows Server Edition
FIGURE 1.8 Change Password Screen
FIGURE 1.9 Password Changed Screen
FIGURE 1.10 Server Core Command Prompt
FIGURE 1.11 Nano Server Image Builder
FIGURE 1.12 Nano Server Image Builder Destination
FIGURE 1.13 Nano Server Image Choice
FIGURE 1.14 Deployment Type
FIGURE 1.15 Advanced Configuration Screen
FIGURE 1.16 Verifying the Created VHD

Chapter 2

FIGURE 2.1 Microsoft Deployment Toolkit console
FIGURE 2.2 Microsoft Deployment Toolkit Download
FIGURE 2.3 Microsoft Deployment Toolkit Setup Screen
FIGURE 2.4 Microsoft Deployment Toolkit Setup Screen
FIGURE 2.5 Ready to Install Screen
FIGURE 2.6 Deployment Workbench
FIGURE 2.7 Microsoft Deployment Toolkit Setup Screen
FIGURE 2.8 Descriptive Name Screen
FIGURE 2.9 Options Screen
FIGURE 2.10 Summary Screen
FIGURE 2.11 Confirmation Screen
FIGURE 2.12 Unattended installation with distribution share and a target computer

Chapter 3

FIGURE 3.1 Format options on Windows Server 2016
FIGURE 3.2 Disk Management
FIGURE 3.3 Converting a disk
FIGURE 3.4 Select Disks page of the New Mirrored Volume Wizard
FIGURE 3.5 Newly created mirrored volume set
FIGURE 3.6 Multipath I/O
FIGURE 3.7 Discovery Domain Tab
FIGURE 3.8 DiskPart commands
FIGURE 3.9 Setting up compression on a folder
FIGURE 3.10 Setting up encryption on a folder
FIGURE 3.11 Security settings on the StormWind Documents folder
FIGURE 3.12 Individual permissions
FIGURE 3.13 Setting up permissions on a shared folder
FIGURE 3.14 NTFS security and shared permissions example
FIGURE 3.15 NTFS security and shared permissions
FIGURE 3.16 Advanced Sharing
FIGURE 3.17 Using Server Manager
FIGURE 3.18 Selecting Data Deduplication
FIGURE 3.19 Enabling Data Deduplication
FIGURE 3.20 Data Deduplication setup

Chapter 4

FIGURE 4.1 Hyper-V architecture
FIGURE 4.2 Warning window that Hyper-V cannot be installed
FIGURE 4.3 Server Manager Add Features
FIGURE 4.4 Virtual switch screen
FIGURE 4.5 Hyper-V in Server Manager
FIGURE 4.6 Hyper-V Manager
FIGURE 4.7 Hyper-V Settings
FIGURE 4.8 Virtual Network Manager
FIGURE 4.9 Virtual network card
FIGURE 4.10 In Disk Management, you can set disks as Offline.
FIGURE 4.11 The Edit Virtual Hard Disk Wizard
FIGURE 4.12 Hyper-V Manager
FIGURE 4.13 Specify Generation screen
FIGURE 4.14 VM RAM
FIGURE 4.15 Networking page
FIGURE 4.16 Virtual Hard Disk page
FIGURE 4.17 Installing OS screen
FIGURE 4.18 Completing the New Virtual Machine Wizard screen
FIGURE 4.19 Options available when right-clicking a virtual machine
FIGURE 4.20 Delete Virtual Machine warning window
FIGURE 4.21 Virtual Machine Connection window when the machine is turned off
FIGURE 4.22 Virtual Machine Connection window showing a running Windows Server 2016 virtual machine
FIGURE 4.23 New Virtual Machine

Chapter 5

FIGURE 5.1 Network Load Balancing
FIGURE 5.2 New Cluster
FIGURE 5.3 Host Name setup
FIGURE 5.4 Add IP address
FIGURE 5.5 Cluster Parameters
FIGURE 5.6 Port Rules
FIGURE 5.7 VM Advanced Features
FIGURE 5.8 Live Migration Advanced Features
FIGURE 5.9 Storage Migration Settings

Chapter 6

FIGURE 6.1 Using Failover Clustering to cluster SQL Server
FIGURE 6.2 Failing the SQL Server service to another node
FIGURE 6.3 Majority needed
FIGURE 6.4 Failover Cluster feature
FIGURE 6.5 Confirmation screen
FIGURE 6.6 The Validate A Configuration Wizard
FIGURE 6.7 Cluster Tests
FIGURE 6.8 Validate A Configuration Wizard results
FIGURE 6.9 High availability roles
FIGURE 6.10 Configuring a generic application
FIGURE 6.11 Resource dependencies
FIGURE 6.12 Resource policies
FIGURE 6.13 Resource Advanced Policies

Chapter 7

FIGURE 7.1 Regedit version
FIGURE 7.2 Server Configuration screen
FIGURE 7.3 Install NuGet
FIGURE 7.4 Install Docker
FIGURE 7.5 Checking the Docker service
FIGURE 7.6 Docker Info
FIGURE 7.7 Docker information
FIGURE 7.8 Docker images
FIGURE 7.9 Container created
FIGURE 7.10 Docker images
FIGURE 7.11 Docker run command
FIGURE 7.12 Docker info command
FIGURE 7.13 Docker Network Info
FIGURE 7.14 Docker Network Info
FIGURE 7.15 Docker Search Microsoft

Chapter 8

FIGURE 8.1 Windows Update control panel
FIGURE 8.2 Seeing the Update Status
FIGURE 8.3 Viewing your Update History
FIGURE 8.4 Viewing Advanced Options
FIGURE 8.5 Choosing to install WSUS
FIGURE 8.6 Select Role screen
FIGURE 8.7 Content Location Selection screen
FIGURE 8.8 Confirmation screen
FIGURE 8.9 Status screen
FIGURE 8.10 Status screen
FIGURE 8.11 Administrative Tools
FIGURE 8.12 WSUS Options
FIGURE 8.13 Connect to Upstream Server
FIGURE 8.14 Choose Products screen
FIGURE 8.15 The main screen of the Windows Server 2016 Backup utility
FIGURE 8.16 Viewing the Archive attributes for a folder
FIGURE 8.17 Bare Metal Restore option
FIGURE 8.18 Selecting Windows Server Backup
FIGURE 8.19 Backup Options screen
FIGURE 8.20 Select Items for Backup screen
FIGURE 8.21 Specify Destination screen

Chapter 9

FIGURE 9.1 Adding a new Performance Monitor counter
FIGURE 9.2 Viewing information in Performance Monitor Line view
FIGURE 9.3 Viewing information in Performance Monitor Histogram view
FIGURE 9.4 Viewing information in Performance Monitor Report view
FIGURE 9.5 General tab of the Performance Monitor Properties dialog box
FIGURE 9.6 Source tab of the Performance Monitor Properties dialog box
FIGURE 9.7 The Data tab of the Performance Monitor Properties dialog box
FIGURE 9.8 The Graph tab of the Performance Monitor Properties dialog box
FIGURE 9.9 The Appearance tab of the Performance Monitor Properties dialog box
FIGURE 9.10 Viewing process statistics and information using Task Manager
FIGURE 9.11 Viewing CPU and memory performance information using Task Manager
FIGURE 9.12 Viewing user information using Task Manager
FIGURE 9.13 Viewing applications that are currently running using Task Manager
FIGURE 9.14 Viewing services information using Task Manager
FIGURE 9.15 Event Viewer
FIGURE 9.16 Information, errors, and warnings in Event Viewer
FIGURE 9.17 An Event Properties dialog box
FIGURE 9.18 The applications and services DNS Server log
FIGURE 9.19 Create Custom View dialog box
FIGURE 9.20 Subscription Properties dialog box
FIGURE 9.21 Resource Monitor
FIGURE 9.22 Resource Monitor CPU tab
FIGURE 9.23 Resource Monitor Memory tab
FIGURE 9.24 Resource Monitor Disk tab
FIGURE 9.25 Resource Monitor Network tab

Chapter 10

FIGURE 10.1 TCP/IP model
FIGURE 10.2 TCP/IP process
FIGURE 10.3 A sample subnet
FIGURE 10.4 Network vs. host addresses
FIGURE 10.5 The network address and its subnet
FIGURE 10.6 The subnet mask revealed
FIGURE 10.7 Different ways to represent the same mask
FIGURE 10.8 Applying the subnet mask
FIGURE 10.9 Converting the subnet mask to decimal
FIGURE 10.10 An example of a smaller subnet address
FIGURE 10.11 Will’s IPv4 subnetting chart
FIGURE 10.12 Subnet mask represented by 1s
FIGURE 10.13 IPv4/IPv6 comparison
FIGURE 10.14 TCP/IPv6 Properties window
FIGURE 10.15 IPv6 configuration as seen from the command prompt
FIGURE 10.16 IPv6 dual IP layer diagram
FIGURE 10.17 IPv6 interface identifier for ipconfig display

Chapter 11

FIGURE 11.1 HOSTS file
FIGURE 11.2 The DNS hierarchy
FIGURE 11.3 Setting the Dynamic Updates option
FIGURE 11.4 DHCP settings for DNS
FIGURE 11.5 A sample DNS query
FIGURE 11.6 Setting up an Active Directory Integrated zone
FIGURE 11.7 DNS stub zone type
FIGURE 11.8 DNS Notify dialog box
FIGURE 11.9 DNS Zone Transfers tab
FIGURE 11.10 DNS zone replication scope
FIGURE 11.11 The Root Hints tab of the DNS server’s Properties dialog box
FIGURE 11.12 The Start Of Authority (SOA) tab of the zone Properties dialog box
FIGURE 11.13 The Name Servers tab of the zone Properties dialog box
FIGURE 11.14 The Event Logging tab of the server’s Properties dialog box
FIGURE 11.15 The Monitoring tab of the server’s Properties dialog box
FIGURE 11.16 Enabling BIND Secondaries

Chapter 12

FIGURE 12.1 Choosing DHCP
FIGURE 12.2 DHCP snap-in
FIGURE 12.3 Choosing Authorize
FIGURE 12.4 Choosing Unauthorize
FIGURE 12.5 Welcome page of the New Scope Wizard
FIGURE 12.6 IP Address Range page of the New Scope Wizard
FIGURE 12.7 Add Exclusions And Delay page of the New Scope Wizard
FIGURE 12.8 Lease Duration page of the New Scope Wizard
FIGURE 12.9 Configure DHCP Options page of the New Scope Wizard
FIGURE 12.10 Router (Default Gateway) page of the New Scope Wizard
FIGURE 12.11 Domain Name And DNS Servers page of the New Scope Wizard
FIGURE 12.12 WINS Servers page of the New Scope Wizard
FIGURE 12.13 Activate Scope page of the New Scope Wizard
FIGURE 12.14 IPv6 Scope Name page of the New Scope Wizard
FIGURE 12.15 Scope Prefix page of the New Scope Wizard
FIGURE 12.16 General tab of the scope’s Properties dialog box for an IPv4 scope
FIGURE 12.17 General tab of the IPv4 Properties dialog box for the server
FIGURE 12.18 Advanced tab of the IPv4 Properties dialog box for the server
FIGURE 12.19 New Reservation dialog box for IPv4 and IPv6
FIGURE 12.20 DNS tab of the scope’s IPv4 Properties dialog box

Chapter 13

FIGURE 13.1 Choosing the IPAM feature
FIGURE 13.2 Confirmation Screen
FIGURE 13.3 IPAM Overview screen
FIGURE 13.4 Select Provisioning
FIGURE 13.5 GPOs Needed
FIGURE 13.6 New GPOs
FIGURE 13.7 Configuring server discovery
FIGURE 13.8 Server Inventory screen
FIGURE 13.9 IPAM DNS Management
FIGURE 13.10 Adding DNS records
FIGURE 13.11 Adding A Record
FIGURE 13.12 Verifying the DNS record
FIGURE 13.13 Managing the DNS Zone
FIGURE 13.14 DNS Zone Advanced Properties
FIGURE 13.15 Configuring DHCP using IPAM
FIGURE 13.16 Create DHCP Scope
FIGURE 13.17 DHCP Scope settings
FIGURE 13.18 Configuring DHCP Policy
FIGURE 13.19 DHCP Policy settings
FIGURE 13.20 IPAM event catalog
FIGURE 13.21 IPAM Access Control
FIGURE 13.22 Add User Role
FIGURE 13.23 User Operations
FIGURE 13.24 Event Catalog
FIGURE 13.25 DHCP Event Catalog
FIGURE 13.26 DNS Event Catalog

Chapter 14

FIGURE 14.1 Drilling a tunnel through the Internet
FIGURE 14.2 The encapsulation process
FIGURE 14.3 The PPP tab of the RRAS server’s Properties dialog box
FIGURE 14.4 The IPv4 tab of the RRAS server’s Properties dialog box
FIGURE 14.5 The IPv6 tab of the RRAS Server’s Properties dialog box
FIGURE 14.6 Remote Access check box
FIGURE 14.7 Remote Access
FIGURE 14.8 Remote Access configuration needed
FIGURE 14.9 Opening the Getting Started Wizard
FIGURE 14.10 VPNs provide private connections between clients and servers across the Internet.
FIGURE 14.11 Remote access choice
FIGURE 14.12 The Log File tab
FIGURE 14.13 Change Log File Properties
FIGURE 14.14 The Port Status dialog box
FIGURE 14.15 Network Layout
FIGURE 14.16 General tab of the VPN Connection Properties dialog box
FIGURE 14.17 Options tab of the VPN Connection Properties dialog box
FIGURE 14.18 Security tab of the VPN Connection Properties dialog box
FIGURE 14.19 Networking tab of the VPN Connection Properties dialog box
FIGURE 14.20 Sharing tab of the VPN Connection Properties dialog box
FIGURE 14.21 The Dial-In tab of the user’s Properties dialog box
FIGURE 14.22 The Security tab of the RRAS server’s Properties dialog box

Chapter 15

FIGURE 15.1 Select Server Roles
FIGURE 15.2 DFS Management console
FIGURE 15.3 Adding a Namespace
FIGURE 15.4 Adding a Namespace
FIGURE 15.5 New Folder
FIGURE 15.6 Home Folder
FIGURE 15.7 BranchCache Option

Chapter 16

FIGURE 16.1 Network Load Balancing
FIGURE 16.2 New Cluster
FIGURE 16.3 Host Name setup
FIGURE 16.4 Add IP address
FIGURE 16.5 Cluster Parameters
FIGURE 16.6 Port Rules
FIGURE 16.7 Using Failover Clustering to cluster SQL Server
FIGURE 16.8 Failing the SQL Server service to another node
FIGURE 16.9 Majority needed
FIGURE 16.10 Failover Cluster Feature
FIGURE 16.11 Confirmation Screen
FIGURE 16.12 The Validate a Configuration Wizard
FIGURE 16.13 Cluster Tests
FIGURE 16.14 Validate a Configuration Wizard results
FIGURE 16.15 High availability roles
FIGURE 16.16 Configuring a generic application
FIGURE 16.17 Resource dependencies
FIGURE 16.18 Resource policies
FIGURE 16.19 Resource Advanced Policies
FIGURE 16.20 VM Advanced Features
FIGURE 16.21 Live Migration Advanced Features
FIGURE 16.22 Storage Migration Settings

Chapter 17

FIGURE 17.1 Hyper-V architecture
FIGURE 17.2 Warning window that Hyper-V cannot be installed
FIGURE 17.3 Server Manager Add Features
FIGURE 17.4 Virtual Switch Screen
FIGURE 17.5 Hyper-V in Server Manager
FIGURE 17.6 Hyper-V Manager
FIGURE 17.7 Hyper-V Settings
FIGURE 17.8 Virtual Network Manager
FIGURE 17.9 Virtual Switch Manager
FIGURE 17.10 In Disk Management, you can set disks as Offline.
FIGURE 17.11 The Edit Virtual Hard Disk Wizard
FIGURE 17.12 Hyper-V Manager
FIGURE 17.13 Specify Generation Screen
FIGURE 17.14 VM RAM
FIGURE 17.15 Networking Page
FIGURE 17.16 Virtual Hard Disk Page
FIGURE 17.17 Installing OS screen
FIGURE 17.18 Completing the New Virtual Machine Wizard screen
FIGURE 17.19 Options available when right-clicking a virtual machine
FIGURE 17.20 Delete Virtual Machine warning window
FIGURE 17.21 Virtual Machine Connection window when the machine is turned off
FIGURE 17.22 Virtual Machine Connection window showing a running Windows Server 2016 virtual machine
FIGURE 17.23 New Virtual Machine

Chapter 18

FIGURE 18.1 Format options on Windows Server 2016
FIGURE 18.2 Disk Management
FIGURE 18.3 Viewing TCP/IP information with the ipconfig utility
FIGURE 18.4 New Forest screen
FIGURE 18.5 Domain Controller Options
FIGURE 18.6 Review Options screen
FIGURE 18.7 Prerequisites Check screen
FIGURE 18.8 Viewing Active Directory information using the Active Directory Users and Computers tool
FIGURE 18.9 Viewing ntdsutil commands on the local domain controller
FIGURE 18.10 General Tab of DNS zone properties

Chapter 19

FIGURE 19.1 Active Directory OUs
FIGURE 19.2 Mapping a business organization to an OU structure
FIGURE 19.3 A geographically based OU structure
FIGURE 19.4 New OU dialog box
FIGURE 19.5 The General tab of the OUs Properties dialog box
FIGURE 19.6 The Managed By tab of the OUs Properties dialog box
FIGURE 19.7 User Properties
FIGURE 19.8 New Group dialog box
FIGURE 19.9 The Filter Options dialog box
FIGURE 19.10 Advanced Features in the System folder of the Active Directory Users and Computers tool
FIGURE 19.11 Administrative Center Overview screen
FIGURE 19.12 Password Settings Container
FIGURE 19.13 New Password Settings
FIGURE 19.14 PSO settings
FIGURE 19.15 Select Users or Groups

Chapter 20

FIGURE 20.1 Potential relationships between domains and sites
FIGURE 20.2 Using a bridgehead server
FIGURE 20.3 Active Directory replication objects
FIGURE 20.4 Renaming the site to CorporateHQ
FIGURE 20.5 Configuring intersite replication schedules
FIGURE 20.6 An example of site links and site link bridges
FIGURE 20.7 Choosing a new site for a specific server
FIGURE 20.8 A replication scenario using bridgehead servers
FIGURE 20.9 Enabling the global catalog on an Active Directory domain controller
FIGURE 20.10 A domain tree
FIGURE 20.11 A single forest consisting of multiple trees
FIGURE 20.12 Default trusts in an Active Directory forest
FIGURE 20.13 Example of a forest
FIGURE 20.14 The main screen of the Windows Server 2016 Backup utility
FIGURE 20.15 Viewing the Archive attributes for a folder
FIGURE 20.16 Bare Metal Recovery option

Chapter 21

FIGURE 21.1 Group Policy configuration settings
FIGURE 21.2 Group Policy options
FIGURE 21.3 Viewing GPO links to an Active Directory OU
FIGURE 21.4 A GPO’s Security Settings dialog box
FIGURE 21.5 Setting the Enforced GPO option
FIGURE 21.6 Viewing Startup/Shutdown script policy settings
FIGURE 21.7 Setting scripting options
FIGURE 21.8 Viewing Group Policy User network configuration options
FIGURE 21.9 Viewing the properties of an MSI package file
FIGURE 21.10 Deployment tab of the Software Installation Properties dialog box
FIGURE 21.11 Advanced Deployment dialog box
FIGURE 21.12 The Categories tab of the Software Installation Properties dialog box
FIGURE 21.13 Removing a software package
FIGURE 21.14 The Computer Selection page of the Group Policy Results Wizard
FIGURE 21.15 The User Selection page of the Group Policy Results Wizard
FIGURE 21.16 The Summary Of Selections page of the Group Policy Results Wizard
FIGURE 21.17 The User Selection page for the administrator on computer WinSRV2016
FIGURE 21.18 The Details tab of the object’s Properties window
FIGURE 21.19 The Infrastructure Dashboard

Chapter 22

FIGURE 22.1 Cryptography for CA screen
FIGURE 22.2 Two-tier PKI hierarchy model
FIGURE 22.3 Specifying the name of the CA
FIGURE 22.4 Request Handling tab of the Certificate Templates Management console

Chapter 23

FIGURE 23.1 Active Directory Federation Certificate Console screen
FIGURE 23.2 AD FS claim descriptions
FIGURE 23.3 Adding a claim description
FIGURE 23.4 Claim transformation claim rule
FIGURE 23.5 Editing the claims rules
FIGURE 23.6 Example of Web Proxy setup

Table of Exercises

EXERCISE 1.1 Installing Windows Server 2016 Datacenter (Desktop Experience)

EXERCISE 1.2 Installing Windows Server 2016 Using Server Core

EXERCISE 1.3 Creating a Nano Server VHD

EXERCISE 2.1 Downloading and Installing MDT 2013

EXERCISE 2.2 Configuring MDT 2013

EXERCISE 2.3 Prepare a System for Imaging by Using the System Preparation Tool

EXERCISE 2.4 Installing Windows Server 2016 from a Disk Image

EXERCISE 2.5 Installing the Microsoft Assessment and Planning Toolkit

EXERCISE 2.6 Configuring MAP

EXERCISE 3.1 Viewing Disk Configurations

EXERCISE 3.2 Initializing Disk Drives

EXERCISE 3.3 Converting a Basic Disk to a Dynamic Disk

EXERCISE 3.4 Creating a Volume Set

EXERCISE 3.5 Creating Mount Points

EXERCISE 3.6 Installing Microsoft MPIO

EXERCISE 3.7 Configuring iSCSI Storage Connection

EXERCISE 3.8 Installing the iSNS Feature

EXERCISE 3.9 Configuring Shared and NTFS Settings

EXERCISE 3.10 Configure the NFS Data Store

EXERCISE 3.11 Configuring Disk Quotas

EXERCISE 3.12 Starting the Windows PowerShell Utility

EXERCISE 4.1 Installing Hyper-V in Full Installation Mode

EXERCISE 4.2 Creating an Internal Virtual Network

EXERCISE 4.3 Creating a Differencing Hard Disk

EXERCISE 4.4 Creating a New Virtual Machine

EXERCISE 4.5 Installing Hyper-V Integration Components

EXERCISE 4.6 Creating a Linux Virtual Machine

EXERCISE 4.7 Updating Linux Ubuntu 16.10

EXERCISE 5.1 Installing NLB Nodes

EXERCISE 6.1 Installing the Failover Cluster Feature

EXERCISE 6.2 Running the Validate A Configuration Wizard

EXERCISE 6.3 Creating a Cluster

EXERCISE 6.4 Clustering the Print Services Role

EXERCISE 6.5 Using the Dependency Viewer

EXERCISE 7.1 Installing Docker

EXERCISE 7.2 Installing a Base Operating System

EXERCISE 7.3 Adding an Image to a Container

EXERCISE 7.4 Uninstalling an Image

EXERCISE 8.1 Installing a WSUS Server

EXERCISE 8.2 Setting WSUS Server Options

EXERCISE 8.3 Configuring a GPO for WSUS

EXERCISE 8.4 Backing Up Active Directory

EXERCISE 9.1 Using Performance Monitor

EXERCISE 9.2 Installing SNMP

EXERCISE 9.3 Configuring SNMP

Subnet Mask Exercise 10.1 Class C, 10 Hosts per Subnet

Subnet Mask Exercise 10.2 Class C, 20 Hosts per Subnet

Subnet Mask Exercise 10.3 Class C, Five Subnets

Subnet Mask Exercise 10.4 Class B, 1,500 Hosts per Subnet

Subnet Mask Exercise 10.5 Class B, 3,500 Hosts per Subnet

EXERCISE 11.1 Installing and Configuring the DNS Service

EXERCISE 11.2 Configuring a Zone for Dynamic Updates

EXERCISE 11.3 Creating a Delegated DNS Zone

EXERCISE 11.4 Manually Creating DNS RRs

EXERCISE 11.5 Simple DNS Testing

EXERCISE 11.6 Using the nslookup Command

EXERCISE 11.7 Enabling DHCP-DNS Integration

EXERCISE 12.1 Installing the DHCP Service

EXERCISE 12.2 Authorizing a DHCP Server

EXERCISE 12.4 Creating a New Scope

EXERCISE 12.5 Configuring User Class Options

EXERCISE 12.6 Creating a Superscope

EXERCISE 12.7 Creating a New Multicast Scope

EXERCISE 12.8 Enabling DHCP-DNS Integration

EXERCISE 12.9 Creating and Activating a New DHCPv6 Scope

EXERCISE 12.10 Configuring DHCP Failover

EXERCISE 12.11 Configuring DHCP Filtering

EXERCISE 12.12 Enabling DHCP Name Protection

EXERCISE 13.1 Installing the IPAM Feature

EXERCISE 13.2 Provisioning an IPAM Server

EXERCISE 13.3 Configuring IPAM Server Discovery

EXERCISE 13.4 Manually Add IPAM IP Address and Blocks

EXERCISE 13.5 Adding Resource Records

EXERCISE 13.6 Managing the DNS zone

EXERCISE 13.7 Creating a DHCP Scope

EXERCISE 13.8 Setting up DHCP Policies

EXERCISE 13.9 Configuring Role-Based Access Control

EXERCISE 13.10 Configuring Auditing

EXERCISE 14.1 Installing the Remote Access Role

EXERCISE 14.2 Setting Up a VPN Server

EXERCISE 14.3 Changing Remote Access Logging Settings

EXERCISE 14.4 Creating a Network Access Policy

EXERCISE 14.5 Restricting a User Profile for Dial-In Access

EXERCISE 14.6 Configuring Encryption

EXERCISE 14.7 Creating a VPN Network Access Policy

EXERCISE 15.1 Enabling BitLocker in Windows Server 2016

EXERCISE 15.2 Installing the DFS Namespace Service

EXERCISE 15.3 Setting Up a DFS Namespace

EXERCISE 15.4 Configure the NFS Data Store

EXERCISE 15.5 Configuring BranchCache Firewall Exceptions

EXERCISE 15.6 Installing BranchCache on Windows Server 2016

EXERCISE 15.7 Enabling Auditing of Active Directory Objects

EXERCISE 15.8 Generating and Viewing Audit Logs

EXERCISE 15.9 Configuring iSCSI Storage Connection

EXERCISE 15.10 Installing the iSNS Feature on Windows Server 2016

EXERCISE 16.1 Installing NLB Nodes

EXERCISE 16.2 Installing the Failover Cluster Feature

EXERCISE 16.3 Running the Validate a Configuration Wizard

EXERCISE 16.4 Creating a Cluster

EXERCISE 16.5 Clustering the Print Services Role

EXERCISE 16.6 Using the Dependency Viewer

EXERCISE 17.1 Installing Hyper-V in Full Installation Mode

EXERCISE 17.2 Creating an Internal Virtual Network

EXERCISE 17.3 Creating a Differencing Hard Disk

EXERCISE 17.4 Creating a New Virtual Machine

EXERCISE 17.5 Installing Hyper-V Integration Components

EXERCISE 17.6 Creating a Linux Virtual Machine

EXERCISE 17.7 Updating Linux Ubuntu 16.10

EXERCISE 18.1 Viewing the Disk Configurations

EXERCISE 18.2 Promoting a Domain Controller

EXERCISE 18.3 Installing AD DS on Server Core Using PowerShell

EXERCISE 18.4 Creating an RODC Server

EXERCISE 18.5 Viewing the Active Directory Event Log

EXERCISE 18.6 Joining a Computer to an Active Directory Domain

EXERCISE 18.7 Configuring DNS Integration with Active Directory

EXERCISE 19.1 Creating an OU Structure

EXERCISE 19.2 Modifying OU Structure

EXERCISE 19.3 Using the Delegation of Control Wizard

EXERCISE 19.4 Delegating Custom Tasks

EXERCISE 19.5 Creating Active Directory Objects

EXERCISE 19.6 Creating a User Template

EXERCISE 19.7 Managing Object Properties

EXERCISE 19.8 Moving Active Directory Objects

EXERCISE 19.9 Resetting an Existing Computer Account

EXERCISE 19.10 Applying Security Policies by Using Group Policy

EXERCISE 19.11 Fine-Grained Password Policy

EXERCISE 19.12 Creating and Publishing a Printer

EXERCISE 19.13 Creating and Publishing a Shared Folder

EXERCISE 19.14 Finding Objects in Active Directory

EXERCISE 19.15 Creating a PSO Using the Active Directory Administrative Center

EXERCISE 20.1 Creating Sites

EXERCISE 20.2 Creating Subnets

EXERCISE 20.3 Configuring Sites

EXERCISE 20.4 Creating Site Links and Site Link Bridges

EXERCISE 20.5 Moving Server Objects Between Sites

EXERCISE 20.6 Creating a New Subdomain

EXERCISE 20.7 Assigning Single-Master Operations

EXERCISE 20.8 Managing Trust Relationships

EXERCISE 20.9 Adding a UPN Suffix

EXERCISE 20.10 Managing GC Servers

EXERCISE 20.11 Managing Universal Group Membership Caching

EXERCISE 20.12 Backing Up Active Directory

EXERCISE 21.1 Creating a Group Policy Object Using the GPMC

EXERCISE 21.2 Linking Existing GPOs to Active Directory

EXERCISE 21.3 Filtering Group Policy Using Security Groups

EXERCISE 21.4 Delegating Administrative Control of Group Policy

EXERCISE 21.5 Configuring Automatic Certificate Enrollment in Group Policy

EXERCISE 21.6 Configuring Folder Redirection in Group Policy

EXERCISE 21.7 Creating a Software Deployment Share

EXERCISE 21.8 Publishing and Assigning Applications Using Group Policy

EXERCISE 21.9 Applying Software Updates

EXERCISE 22.1 Installing AD CS Through Server Manager

EXERCISE 22.2 Configuring AD CS Through Server Manager

EXERCISE 22.3 Configure an Auto-Enrollment Group Policy for a Domain

EXERCISE 22.4 Creating a Certificate Template

EXERCISE 22.5 Publishing a Certificate Template

EXERCISE 22.6 Revoking a Certificate

EXERCISE 22.7 Configuring CA Policy Auditing

EXERCISE 22.8 Backing Up the Certificate Authority Server

EXERCISE 23.1 Installing the AD FS Role on a Computer Using Server Manager

EXERCISE 23.2 Configuring the AD FS Role on the Computer Using Server Manager

EXERCISE 23.3 Configuring Multifactor Authentication

EXERCISE 23.4 Workplace Joining a Device

EXERCISE 23.5 Installing an AD RMS Role on the Local Computer Using Server Manager

EXERCISE 23.6 Backing Up an AD RMS Database

EXERCISE 23.7 Adding a Trusted User Domain

EXERCISE 23.8 Exporting the Trusted User Domain

EXERCISE 23.9 Exporting the Trusted Publishing Domain

EXERCISE 23.10 Adding the Trusted Publishing Domain

MCSA
Windows Server^® 2016

Complete Study Guide Exam 70-740, 70-741, 70-742

Acknowledgments

About the Author

Table of Exercises