MCSA Windows Server 2016 Study Guide: Exam 70-742

William Panek, MCP, MCSE, MCSA, MCTS, MCITP, CCNA, is a four-time Microsoft MVP winner. He has taught at Boston University, Clark University, and the University of Maryland, and presently conducts live online classes for StormWind Studios (www.stormwind.com). Will has been a consultant and trainer for the United States Secret Service, Cisco, the United States Air Force, and the United States Army. He also creates training videos to help students prepare for various Microsoft exams.

• ContentsIntroduction xxiAssessment Test xxxChapter 1 Installing Active Directory 1Verifying the File System 2Resilient File System (ReFS) 3NTFS 4Verifying Network Connectivity 7Basic Connectivity Tests 7Tools and Techniques for Testing Network Configuration 8Understanding Domain and Forest Functionality 10About the Domain Functional Level 10About Forest Functionality 12Planning the Domain Structure 13Installing Active Directory 14New to Active Directory 14Read-Only Domain Controllers 15Adprep 15Active Directory Prerequisites 16The Installation Process 16Deploying Active Directory in Windows Azure 24Installing Additional Domain Controllersby Using Install from Media 24Verifying Active Directory Installation 25Using Event Viewer 25Using Active Directory Administrative Tools 27Testing from Clients 29Creating and Configuring Application Data Partitions 30Creating Application Data Partitions 31Managing Replicas 32Removing Replicas 33Using ntdsutil to Manage Application l Data Partitions 33Configuring DNS Integration with Active Directory 35Summary 37Exam Essentials 37Review Questions 39Chapter 2 Administer Active Directory 43Active Directory Overview 44Understanding Active Directory Features 45Understanding Security Principals 46An Overview of OUs 47The Purpose of OUs 48Benefits of OUs 48Planning the OU Structure 49Logical Grouping of Resources 49Understanding OU Inheritance 51Delegating Administrative Control 51Applying Group Policies 53Creating OUs 53Managing OUs 57Moving, Deleting, and Renaming OUs 57Administering Properties of OUs 58Delegating Control of OUs 59Troubleshooting OUs 62Creating and Managing Active Directory Objects 63Overview of Active Directory Objects 63Managing Object Properties 70Understanding Groups 74Filtering and Advanced Active Directory Features 76Moving, Renaming, and Deleting ActiveDirectory Objects 77Resetting an Existing Computer Account 79Understanding Dynamic Access Control 79Managing Security and Permissions 80Using ACLs and ACEs 81Using Group Policy for Security 82Fine-Grained Password Policies 84Publishing Active Directory Objects 86Making Active Directory Objects Available to Users 87Publishing Printers 87Publishing Shared Folders 88Querying Active Directory 89Using the Active Directory Administrative Center 90Using the Command Prompt for Active DirectoryConfiguration 94PowerShell for Active Directory 95Summary 97Exam Essentials 97Review Questions 99Chapter 3 Maintaining Active Directory 103Overview of Network Planning 104The Three Types of Networks 105Exploring Network Constraints 105Overview of Active Directory Replication and Sites 106Replicating Active Directory 107Understanding Active Directory Site Concepts 107Understanding Distributed File System Replication 111Implementing Sites and Subnets 112Creating Sites 113Creating Subnets 115Configuring Sites 116Configuring Replication 117Intrasite Replication 118Intersite Replication 118RODCs and Replication 124Configuring Server Topology 125Using Universal Group Membership Caching 128Configuring DNS SRV Records 129Monitoring and Troubleshooting Active Directory Replication 129About System Monitor 130Troubleshooting Replication 130Reasons for Creating Multiple Domains 132Reasons for Using Multiple Domains 132Drawbacks of Multiple Domains 135Creating Domain Trees and Forests 135Planning Trees and Forests 136The Promotion Process 139Creating a Domain Tree 140Joining a New Domain Tree to a Forest 142Adding Additional Domain Controllers 142Demoting a Domain Controller 143Managing Multiple Domains 144Managing Single-Master Operations 145Managing Trusts 149Managing UPN Suffixes 153Name Suffix Routing 153Managing Global Catalog Servers 153Managing Universal Group Membership Caching 155Upgrading Existing Domains and Forests 156Maintain Active Directory 157Overview of the Windows Server 2016 Backup Utility 158Setting Up an Active Directory Backup 163Restoring Active Directory 164Active Directory Recycle Bin 166Restartable Active Directory 166Offline Maintenance 167Monitoring Replication 169Using the ADSI Editor 170Wbadmin Command-Line Utility 170Summary 171Exam Essentials 172Review Questions 175Chapter 4 Implementing GPOs 179Introducing Group Policy 180Understanding Group Policy Settings 181The Security Settings Section of the GPO 184Client-Side Extensions 185Group Policy Objects 185Group Policy Inheritance 186Planning a Group Policy Strategy 187Implementing Group Policy 188Creating GPOs 188Linking Existing GPOs to Active Directory 191Forcing a GPO to Update 191Managing Group Policy 193Managing GPOs 193Security Filtering of a Group Policy 195Delegating Administrative Control of GPOs 197Controlling Inheritance and Filtering Group Policy 198Assigning Script Policies 199Understanding the Loopback Policy 201Managing Network Configuration 201Configuring Network Settings 203Automatically Enrolling User andComputer Certificates in Group Policy 203Redirecting Folders 205Managing GPOs with Windows PowerShell Group Policy Cmdlets 206Item-Level Targeting 207Back Up, Restore, Import, Copy, and Migration Tables 208Deploying Software Through a GPO 211The Software Management Life Cycle 211The Windows Installer 213Deploying Applications 217Implementing Software Deployment 218Preparing for Software Deployment 218Software Restriction Policies 219Using AppLocker 220Group Policy Slow Link Detection 220Publishing and Assigning Applications 220Applying Software Updates 222Verifying Software Installation 223Configuring Automatic Updates in Group Policy 224Configuring Software Deployment Settings 224The Software Installation Properties Dialog Box 225Removing Programs 228Microsoft Windows Installer Settings 229Troubleshooting Group Policies 229RSoP in Logging Mode 231RSoP in Planning Mode 233Using the gpresult.exe Command 234Using the Group Policy Infrastructure Status Dashboard 236Summary 236Exam Essentials 237Review Questions 239Chapter 5 Understanding Certificates 243Features of Windows Server 2016 Certificate Services 244Active Directory Certificate Services Roles 245Planning the Certificate Authority Hierarchy 246Installing AD CS 252Configuring Active Directory Certificate Services 255PowerShell for AD CS 266Summary 267Exam Essentials 268Review Questions 269Chapter 6 Configure Access and Information Protection Solutions 273Implement Active Directory Federation Services 274What Is a Claim? 274What’s New for AD FS in Windows Server 2016? 278Active Directory Federation Services Installation 280Workplace Join 292Device Registration Service 292Workplace Join Your Device 292Active Directory Rights Management Services 293Considerations and Requirements for AD RMS 294Installing AD RMS 296Managing AD RMS: AD RMS Service Connection Point 298Configuring a Web Application Proxy 306Publishing Applications 306Configuring Pass-Through Authentication 307Authentication Capabilities 308PowerShell Commands 309Summary 311Exam Essentials 311Review Questions 313Appendix Answers to Review Questions 315Chapter 1: Installing Active Directory 316Chapter 2: Administer Active Directory 317Chapter 3: Maintaining Active Directory 317Chapter 4: Implementing GPOs 318Chapter 5: Understanding Certificates 319Chapter 6: Configure Access and InformationProtection Solutions 320Index 321