Transcription

MCSA 70-410 Cert Guide:Installing and ConfiguringWindows Server 2012 R2Don PoultonDavid Camardella800 East 96th StreetIndianapolis, Indiana 46240 USA

MCSA 70-410 Cert Guide:Installing and Configuring Windows Server 2012 R2Associate PublisherDave DusthimerDon PoultonDavid CamardellaAcquisitions EditorBetsy BrownCopyright 2015 by Pearson IT CertificationAll rights reserved. No part of this book shall be reproduced, stored ina retrieval system, or transmitted by any means, electronic, mechanical,photocopying, recording, or otherwise, without written permission fromthe publisher. No patent liability is assumed with respect to the use ofthe information contained herein. Although every precaution has beentaken in the preparation of this book, the publisher and author assumeno responsibility for errors or omissions. Nor is any liability assumed fordamages resulting from the use of the information contained herein.ISBN-13: 978-0-7897-4880-5ISBN-10: 0-7897-4880-0Library of Congress Control Number: 2014944428Printed in the United States of AmericaSecond Printing: February 2015TrademarksAll terms mentioned in this book that are known to be trademarks or service marks have been appropriately capitalized. Pearson IT Certificationcannot attest to the accuracy of this information. Use of a term in thisbook should not be regarded as affecting the validity of any trademark orservice mark.Warning and DisclaimerEvery effort has been made to make this book as complete and as accurate as possible, but no warranty or fitness is implied. The informationprovided is on an “as is” basis. The authors and the publisher shall haveneither liability nor responsibility to any person or entity with respect toany loss or damages arising from the information contained in this bookor from the use of the CD or programs accompanying it.Special SalesFor information about buying this title in bulk quantities, or for specialsales opportunities (which may include electronic versions; custom coverdesigns; and content particular to your business, training goals, marketing focus, or branding interests), please contact our corporate sales department at [email protected] or (800) 382-3419.For government sales inquiries, please [email protected] questions about sales outside the U.S., please [email protected] EditorsChristopher Cleveland,Ellie BruManaging EditorSandra SchroederProject EditorSeth KerneyCopy EditorMegan Wade-TaxterIndexerCheryl LenserProofreaderJess DeGabrieleTechnical EditorChris CraytonEditorial AssistantVanessa EvansMultimedia DeveloperLisa MatthewsBook DesignerGary AdairPage LayoutBumpy Design

Contents at a GlanceCHAPTER 1Introducing Windows Server 2012 R2CHAPTER 2Installing and Configuring Windows Server 2012 R234CHAPTER 3Configuring Windows Server 2012 R2 Local Storage78CHAPTER 4Configuring Access to Files and SharesCHAPTER 5Configuring and Monitoring Print and Document ServicesCHAPTER 6Configuring Remote Management of ServersCHAPTER 7Configuring Hyper-VCHAPTER 8Creating and Configuring Virtual Machine Storage 324CHAPTER 9Creating and Configuring Virtual NetworksCHAPTER 10Configuring IPv4 and IPv6 AddressingCHAPTER 11Configuring Dynamic Host Configuration Protocol476CHAPTER 12Deploying and Configuring Domain Name System522CHAPTER 13Installing Domain ControllersCHAPTER 14Active Directory User and Computer AccountsCHAPTER 15Active Directory Groups and Organizational UnitsCHAPTER 16Creating and Applying Group Policy ObjectsCHAPTER 17Configuring Security PoliciesCHAPTER 18Configuring Application Restriction PoliciesCHAPTER 19Configuring Windows FirewallPractice Exam 1120240280376420566638708752784810884Answers to the ‘Do I Know This Already?’ QuizzesGlossaryIndex670856Answers to Practice Exam 1APPENDIX A2934954On the CD:Practice Exam 2Answers to Practice Exam 2APPENDIX BMemory TablesAPPENDIX CMemory Tables Answer Key902192

This page intentionally left blank

Table of ContentsAbout the Authors xxiDedicationxxiiiAcknowledgmentsReader ServicesIntroductionChapter 1xxiiixxvxxviiIntroducing Windows Server 2012 R2 2“Do I Know This Already?” Quiz 4Foundation Topics 8What’s New in Windows Server 2012 and Windows Server 2012 R2 8What’s New in Windows Server 2012 R2 12Windows Server 2012 R2 Editions 14Windows Server 2012 R2 User Interface 15Server Manager 18Adding Roles and Features 21Planning for Server Installation and Upgrades 23Identifying Hardware Requirements 23Choosing an Install Method 23Considering Upgrades 24Server Roles and Role Migration 26Windows Server 2012 R2 Server Roles 26Role Migration 30Features on Demand 31Exam Preparation Tasks 32Review All the Key Topics32Complete the Tables and Lists from Memory 33Definitions of Key Terms 33Chapter 2Installing and Configuring Windows Server 2012 R2 34“Do I Know This Already?” Quiz 35Foundation Topics 40Windows Server 2012 R2 Hardware Requirements 40Installing Windows Server 2012 R2 41

viMCSA 70-410 Cert GuideInstalling a Windows Server Core Computer 42Installing the Full GUI Server 48Upgrading a Windows Server 2008 Computer 49Converting Between Core and GUI 50Delegation of Server Administration 51Preparing for a Delegation Model 52Establishing Delegate Access 53Leveraging Active Directory 54Identifying Administration Tools 55Windows PowerShell Desired State Configuration 56Configuring Offline Server Images 59Deployment Image Servicing and Management 60Using DISM to Enable Remote Desktop Services 62Configuring Remote Server Roles 65Configuring Windows Server 2012 R2 Services 68Services.msc 69SC Commands 71Configuring NIC Teaming 72Configure NIC Teaming via GUI 73Configure Basic NIC Teaming via PowerShell 75Exam Preparation Tasks 76Review All the Key Topics76Complete the Tables and Lists from Memory 77Definitions of Key Terms 77Chapter 3Configuring Windows Server 2012 R2 Local Storage 78“Do I Know This Already?” Quiz 79Foundation Topics 83Designing Storage Spaces 83Optimal Storage Allocation 83Improved Administrative Control 84Scalability84High Availability 85Configuring Basic and Dynamic Disks 86Configuring MBR and GPT Disks 88Managing Volumes 89

ContentsConverting Disks 94RAID Volumes 96Creating a RAID 0 Volume 97Creating a Spanned Volume 99Creating a Mirrored Volume 99Creating a RAID-5 Volume 99Creating and Mounting Virtual Hard Disks 101Creating VHDs 102Mounting VHDs 103Configuring Storage Pools and Disk Pools 105Creating Storage Spaces 110Creating and Managing Volumes 115Using PowerShell 117Exam Preparation Tasks 118Review All the Key Topics118Complete the Tables and Lists from Memory 119Definitions of Key Terms 119Chapter 4Configuring Access to Files and Shares 120“Do I Know This Already?” Quiz 121Foundation Topics 127Shared Folders in Windows Server 2012 R2 127Understanding the File and Storage Services Role in Windows Server2012 R2 127Creating a Shared Folder 130Offline Files 144Configuring Servers for Offline Files 145Configuring Client Computers 147Configuring Offline File Policies 147Using the Always Offline Mode 149Configuring Transparent Caching of Offline Files 151Creating and Configuring Work Folders 152Enabling and Configuring Work Folders 154Configuring Client Computers for Work Folders 159NTFS Permissions 161NTFS File and Folder Permissions 161vii

viiiMCSA 70-410 Cert GuideEffective Permissions 171Copying and Moving Files and Folders 173Practical Guidelines on Sharing and Securing Folders 175Access-Based Enumeration of Files and Folders 176Configuring Volume Shadow Copy Service 178Configuring Shadow Copies of Shared Folders 179Guidelines for Using VSS 182Configuring NTFS Quotas 182Using File Explorer to Enable Disk Quotas 183Using FSRM to Create Quota Templates 186Some Guidelines for Using Quotas 188Exam Preparation Tasks 189Review All the Key Topics189Complete the Tables and Lists from Memory 191Definitions of Key Terms 191Chapter 5Configuring and Monitoring Print and Document Services 192“Do I Know This Already?” Quiz 193Foundation Topics 199Printing Terminology in Windows Server 2012 R2 199The Printing Process 200New Features of Print and Document Services in WindowsServer 2012 R2 202Installing, Sharing, and Publishing Printers 204Installing the Print and Document Services Role 204Installing Printers 208Sharing Printers 212Publishing Printers in Active Directory 213Using Group Policy to Deploy Printer Connections 215Branch Office Direct Printing 216Configuring Drivers Including the Easy Print Driver 218Printer Driver Challenges 218Easy Print Driver 220Managing and Troubleshooting Printers 221Using the Printer Properties Dialog box 222Migrating Print Queues and Printer Settings 228

ContentsIsolating Printer Drivers 230Configuring Location-Aware Printer Settings 231Delegating Print Management 232Troubleshooting Printer Problems 234Exam Preparation Tasks 237Review All the Key Topics237Complete the Tables and Lists from Memory 238Definitions of Key Terms 238Chapter 6Configuring Remote Management of Servers 240“Do I Know This Already?” Quiz 241Foundation Topics 245Configuring WinRM 245Installation and Configuration of WinRM 245Windows Remote Shell 247Configuring Down-level Server Management 248Preparing Down-level Server Core Installations 249Configuring Multiple Server Management 249Using Server Manager for Remote Management 249Remote Management of Server Core Machines 258Remote Server Administration Tools 258Microsoft Management Console 260Windows PowerShell 267Configuring Daily Management Tasks 270Task Scheduler 270Active Directory Administrative Center 276Exam Preparation Tasks 277Review All the Key Topics277Complete the Tables and Lists from Memory 278Definitions of Key Terms 278Chapter 7Configuring Hyper-V 280“Do I Know This Already?” Quiz 281Foundation Topics 285Introduction to Hyper-V 285What’s New in Hyper-V Server 286Installing the Hyper-V Server Role 288ix

xMCSA 70-410 Cert GuideInstall Hyper-V Using PowerShell 294Creating and Configuring Virtual Machine Settings 294Configuring a Virtual Machine 296Additional Virtual Machine Components 308Managing Virtual Machines 312Configuring Dynamic Memory 314Configuring Smart Paging 316Configuring Resource Metering 317Configuring Guest Integration Services 319Exam Preparation Tasks 322Review All the Key Topics322Complete the Tables and Lists from Memory 323Definitions of Key Terms 323Chapter 8Creating and Configuring Virtual Machine Storage 324“Do I Know This Already?” Quiz 325Foundation Topics 329Creating and Configuring Virtual Hard Disks and Differencing Drives 329Fixed-Size Disks 329Dynamically Expanding Disks 334Differencing Disks 335Virtual Hard Disk Management 344Hard Disk Sharing 355Storage Quality of Service 355Importing, Exporting, Migrating, and Replicating Virtual Machines 356Configuring Pass-Through Disks 364Managing Checkpoints 367Creating and Reverting to a Previous Checkpoint 368Managing Multiple Checkpoints 369Implementing Virtual Fibre Channel Adapters 370Virtual SAN Support 371Advanced Fibre Channel Adapter Features 373Exam Preparation Tasks 374Review All the Key Topics374Complete the Tables and Lists from Memory 374Definitions of Key Terms 375

ContentsChapter 9Creating and Configuring Virtual Networks 376“Do I Know This Already?” Quiz 377Foundation Topics 381Network Virtualization Using Hyper-V 381Planning for Network Virtualization 383Network Virtualization Components 383Configuring Virtual Network Switches 388Optimizing Virtual Network Performance 395Configuring MAC Addresses 398Dynamic MAC Addresses 398Static MAC Addresses 400MAC Address Spoofing 401Configuring Network Isolation 402Virtual Switch Trunking 403Using PVLANs for Isolation 404Configure PVLAN Ports 405Configuring Virtual Network Adapters 406Configuring an Emulated (Legacy) Network Adapter 407Configuring a Network Adapter 408Configure a Virtual NIC Team 411Advanced Adapter Features 412Hyper-V Network Virtualization PowerShell Cmdlets 416Exam Preparation Tasks 418Review All the Key Topics418Complete the Tables and Lists from Memory 419Definitions of Key Terms 419Chapter 10Configuring IPv4 and IPv6 Addressing 420“Do I Know This Already?” Quiz 422Foundation Topics 426Concepts of TCP/IP 426TCP/IP History in Brief 426The TCP/IP Protocol Stack 427The TCP/IP Component Protocols 429New and Improved Networking Technologies in WindowsServer 2012 R2 433xi

xiiMCSA 70-410 Cert GuideIPv4 Addressing 434Static IPv4 Addressing 435Subnetting and Supernetting in IPv4 437Dynamic IP Addressing 441Configuring IPv4 Address Options 441Using the Command Line to Configure IPv4 Addressing Options 445IPv6 Addressing 447IPv6 Address Syntax 448Connecting to a TCP/IP Version 6 Network 451TCP/IPv6 PowerShell Cmdlets 453Interoperability Between IPv4 and IPv6 Addresses 454Compatibility Addresses 455ISATAP Addresses 4556to4 Addresses 456Teredo Addresses 458Using Group Policy to Configure IPv6 Transition Technologies 459Resolving IPv4 and IPv6 Network Connectivity Issues 461Windows Server 2012 R2 Network Diagnostics Tools 461Using TCP/IP Utilities to Troubleshoot TCP/IP 463Troubleshooting IPv4 and IPv6 Problems 469Exam Preparation Tasks 473Review All the Key Topics473Complete the Tables and Lists from Memory 474Definitions of Key Terms 474Chapter 11Configuring Dynamic Host Configuration Protocol (DHCP) 476“Do I Know This Already?” Quiz 477Foundation Topics 482How DHCP Works 482What’s New with DHCP in Windows Server 2012 and WindowsServer 2012 R2 482The Four-Phase DHCP IPv4 Leasing Process 484Renewing an IPv4 Lease 487How DHCPv6 Works 488Installing and Configuring a DHCP Server 489Using Server Manager to Install DHCP 490Using Windows PowerShell to Install DHCP 492

ContentsDHCP Scopes and Options 493Creating DHCP Scopes 493Configuring DHCP Scope Properties 498Configuring DHCP Options 499Configuring PXE Boot 508Configuring DHCP Options for PXE 508Monitoring and Troubleshooting a DHCP Server 510Managing and Authorizing DHCP Servers 513Authorizing a DHCP Server in Active Directory 513Configuring DHCP Relay Agents 515Exam Preparation Tasks 519Review All the Key Topics519Complete the Tables and Lists from Memory 520Definitions of Key Terms 520Chapter 12Deploying and Configuring Domain Name System (DNS) 522“Do I Know This Already?” Quiz 523Foundation Topics 528Introduction to DNS 528The Hierarchical Nature of DNS 529The DNS Name Resolution Process 533What’s New in Windows Server 2012 R2? 536Installing DNS in Windows Server 2012 R2 537Using PowerShell to Install DNS 539Using PowerShell for DNS Server Administration 539Zone Types and Their Uses 541DNS Zone Types 542Configuring DNS Server Properties 545Interfaces Tab 545Forwarders Tab 546Advanced Tab 548Root Hints Tab 550Debug Logging Tab 552Event Logging Tab 553Monitoring Tab 554Security Tab 555xiii

xivMCSA 70-410 Cert GuideConfiguring Common Resource Records 556New Host (A or AAAA) Records 558New Alias (CNAME) 559New Mail Exchanger (MX) 560Additional New Resource Records 560Deleting Resource Records 562Using the Command Line to Create Resource Records 563Exam Preparation Tasks 563Review All the Key Topics563Complete the Tables and Lists from Memory 564Definitions of Key Terms 564Chapter 13Installing Domain Controllers 566“Do I Know This Already?” Quiz 568Foundation Topics 572The Building Blocks of Active Directory 572Namespaces 572Objects573ContainersSchemas573574Global Catalogs 574Partitions 575Naming Standards of X.500 and LDAP 576Logical Components of Active Directory 578Physical Components of Active Directory 583New Features of Active Directory in Windows Server 2012 andWindows Server 2012 R2 588Planning the Active Directory Namespace 589Subdividing the Active Directory Namespace 590Administrative or Geographical Organization of Domains 591Use of Multiple Trees 592Best Practices 593Creating Forests and Domains 594Requirements for Installing Active Directory Domain Services 594Installing Active Directory Domain Services 595Performing Unattended Installations of Active Directory 606

ContentsAdding, Removing, and Upgrading Domain Controllers 608Forest and Domain Functional Levels 609The Adprep Utility 611Upgrading a Windows Server 2008 Domain Controller 612Removing Active Directory 614Installing a Server Core Domain Controller 617Using the Install from Media Option 617Creating Installation Media 618Deploying Domain Controllers Using the IFM Option 619Configuring Global Catalog Servers 621Planning the Placement of Global Catalog Servers 621Promoting Domain Controllers to Global Catalog Servers 623Deploying Active Directory Infrastructure as a Service in WindowsAzure 624Installing an AD DS Forest in Windows Azure 625Installing a Replica Domain Controller on Windows Azure 627Troubleshooting Active Directory Installations 628Verifying the Proper Installation of Active Directory 628Resolving SRV Record Registration Issues 634Exam Preparation Tasks 636Review All the Key Topics636Complete the Tables and Lists from Memory 637Definitions of Key Terms 637Chapter 14Active Directory User and Computer Accounts 638“Do I Know This Already?” Quiz 639Foundation Topics 644Creating User and Computer Accounts 644Introducing User Accounts 644Manually Creating User Accounts 645Creating Computer Accounts 649Using Template Accounts 650Using Bulk Import to Automate Account Creation 651Configuring the UPN 656Configuring Contacts 659Managing and Maintaining Accounts 660Password Resets 660xv

xviMCSA 70-410 Cert GuideProtected Admin 661Offline Domain Join 663Configuring User Rights 665Inactive and Disabled Accounts 666Exam Preparation Tasks 667Review All the Key Topics667Complete the Tables and Lists from Memory 668Definitions of Key Terms 668Chapter 15Active Directory Groups and Organizational Units (OUs) 670“Do I Know This Already?” Quiz 671Foundation Topics 676Creating and Managing Group Accounts 676Creating Group Accounts 681Configuring Group Membership 683Creating Distribution Lists 685AGDLP/AGUDLP686Local Versus Domain Groups 688Enumerating Group Membership 690Creating and Managing Organizational Units 691Planning the OU Structure of Your Domain 691Creating Organizational Units 694Managing Organizational Units 696Delegating Active Directory Object Management 700Exam Preparation Tasks 705Review All the Key Topics705Complete the Tables and Lists from Memory 706Definitions of Key Terms 706Chapter 16Creating and Applying Group Policy Objects 708“Do I Know This Already?” Quiz 709Foundation Topics 713Overview of Group Policy 713Components of Group Policy 713New Features of Group Policy in Windows Server 2012 and WindowsServer 2012 R2 716

ContentsCreating and Applying GPOs 719Using Starter GPOs 724Shell Access Policies 726Managing GPOs and Their Links 727Linking GPOs 727Managing GPO Links 729Deleting a GPO 730Disabling GPOs or Portions of GPOs 731Specifying a Domain Controller 731Using Windows PowerShell 733Configuring Multiple Local Group Policies 735MMC and Multiple Local Group Policies 736Using Multiple Local Group Policies 737Managing Restricted Groups 738Local Users and Groups Extension 741Configuring Group Policy Common Options 744Configuring Security Filtering 746Denying the Application of a GPO 746Windows Management Instrumentation 748Exam Preparation Tasks 749Review All the Key Topics749Complete the Tables and Lists from Memory 750Definitions of Key Terms 750Chapter 17Configuring Security Policies 752“Do I Know This Already?” Quiz 753Foundation Topics 759Configuring User Rights Assignment 759Configuring Security Options Settings 762Using Additional Security Configuration Tools 765Password and Account Lockout Policies 767Auditing of Active Directory Services 770New Audit Functionality 770Active Directory Auditing 770Using GPOs to Configure Auditing 771Using Auditpol.exe to Configure Auditing 777xvii

xviiiMCSA 70-410 Cert GuideConfiguring User Account Control 778Using Control Panel to Configure UAC 779Configuring UAC via Policy 779Exam Preparation Tasks 781Review All the Key Topics781Complete the Tables and Lists from Memory 781Definitions of Key Terms 782Chapter 18Configuring Application Restriction Policies 784“Do I Know This Already?” Quiz 785Foundation Topics 790Introducing Rule Enforcement 790Configuring Software Restriction Policies 790Configuring AppLocker Rules 797Capabilities of AppLocker 797Basic Configuration of AppLocker Policies 799Creating Additional AppLocker Rules 802Exam Preparation Tasks 808Review All the Key Topics808Complete the Tables and Lists from Memory 808Definitions of Key Terms 808Chapter 19Configuring Windows Firewall 810“Do I Know This Already?” Quiz 811Foundation Topics 818Configuring Windows Firewall 818Basic Windows Firewall Configuration 819Configuring Windows Firewall Using PowerShell 825Using the Windows Firewall with Advanced Security Snap-in 826Overview of Default Windows Firewall with Advanced SecurityRules 828Configuring Multiple Firewall Profiles 828Configuring Security Rules 830Configuring Inbound Rules or Outbound Rules 830Configuring Connection Security Rules 836Configuring Rule Properties 842Configuring Notifications 847

ContentsConfiguring Firewall Properties and Authenticated Exceptions 848Creating Windows Firewall with Advanced Security Policies 848Windows Firewall Group Policy Property Settings 850Configuring Authenticated Bypass 851Exporting and Importing Firewall Settings 853Exam Preparation Tasks 854Review All the Key Topics854Definitions of Key Terms 855Practice Exam 1 856Answers to Practice Exam 1 884Appendix A Answers to the “Do I Know This Already?” Quizzes 902Glossary 934Index954On The CD:Practice Exam 2Answers to Practice Exam 2Appendix B Memory TablesAppendix C Memory Tables Answer Keyxix

This page intentionally left blank

About the AuthorsDon Poulton (A , Network , Security , MCSA, MCSE) is an independent consultant who has been involved with computers since the days of 80-column punchcards. After more than 20 years in environmental science, Don switched careers andtrained as a Windows NT 4.0 MCSE. He has been involved in consulting with acouple of small training providers as a technical writer, during which time he wrotetraining and exam prep materials for Windows NT 4.0, Windows 2000, and Windows XP. Don has written or contributed to several titles, including Security LabManual (Que, 2004); MCSA/MCSE 70-299 Exam Cram 2: Implementing and Administering Security in a Windows 2003 Network (Exam Cram 2) (Que, 2004); MCSE70-294 Exam Prep: Planning, Implementing, and Maintaining a Microsoft WindowsServer 2003 Active Directory Infrastructure (Que, 2006); MCTS 70-620 Exam Prep:Microsoft Windows Vista, Configuring (Que, 2008); MCTS 70-680 Cert Guide: Microsoft Windows 7, Configuring (Que, 2011); MCTS 70-640 Cert Guide: Windows Server2008 Active Directory, Configuring (Que, 2011); MCTS 70-642 Cert Guide: WindowsServer 2008 Network Infrastructure, Configuring (Que, 2012); and MCSA 70-687 CertGuide: Configuring Microsoft Windows 8.1 (Que, 2014).In addition, he has worked on programming projects, both in his days as an environmental scientist and more recently with Visual Basic to update an older statisticalpackage used for multivariate analysis of sediment contaminants.When not working on computers, Don is an avid amateur photographer who hashad his photos displayed in international competitions and published in magazinessuch as Michigan Natural Resources Magazine and National Geographic Traveler. Donalso enjoys traveling and keeping fit.Don lives in Burlington, Ontario, with his wife, Terry.David G. Camardella has more than 14 years of experience as a systems architect,network engineer, and IT manager. Throughout his career, David has used his technical and leadership skills to successfully support infrastructures from small to largeorganizations.David’s experience includes managing a North American datacenter, branch officeserver rooms, LAN/WLAN/WAN infrastructures, Active Directory/Messaginginfrastructures, private clouds, and client computing systems.Over the years, David has performed technical editing for several Microsoft andCisco books. He holds a bachelor of science in business management as well as several levels of IT certifications, including MCSE.In his spare time, David enjoys spending time with his family and engaging in outdoor activities and home brewing.

This page intentionally left blank

DedicationI would like to dedicate this book to my wife Terry, who has stood by myside and encouraged me throughout the days spent writing this book.This project would not have been possible without her love and support.—Don PoultonI would like to dedicate this book to my family.I give thanks to my parents for instilling core values in me,to my wife for her continued love and support,and to my children who inspire me to succeed.—Dave CamardellaAcknowledgmentsI would like to thank all the staff at Pearson IT Certification and in particularBetsy Brown for making this project possible. My sincere thanks goes out to ChrisCrayton for his helpful technical suggestions, as well as development editors ChrisCleveland and Ellie Bru for their improvements to the manuscript. Thanks especially to Dave Camardella for his contributions, without which this entire projectwould never have been possible. Thank you all.—Don PoultonI want to send a special thanks to Betsy Brown for providing me with the opportunity to write for Pearson IT Certification. I would also like to thank Don Poultonfor guiding me through this journey. Additional thanks goes out to Chris Craytonfor his technical feedback, Chris Cleveland, and all of the Pearson IT Certificationstaff for your guidance, feedback, and suggestions. Thank you.—Dave Camardella

This page intentionally left blank

We Want to Hear from You!As the reader of this book, you are our most important critic and commentator. Wevalue your opinion and want to know what we’re doing right, what we could do better, what areas you’d like to see us publish in, and any other words of wisdom you’rewilling to pass our way.We welcome your comments. You can email or write to let us know what you did ordidn’t like about this book—as well as what we can do to make our books better.Please note that we cannot help you with technical problems related to the topic of this book.When you write, please be sure to include this book’s title and authors as well asyour name, email address, and phone number. We will carefully review your comments and share them with the authors and editors who worked on the :ATTN: Reader FeedbackPearson IT Certification800 East 96th StreetIndianapolis, IN 46240 USAReader ServicesVisit our website and register this book at www.pearsonitcertification.com/registerfor convenient access to any updates, downloads, or errata that might be availablefor this book.

This page intentionally left blank

IntroductionIntroductionThe MCSA Installing and Configuring Windows Server 2012 Cert Guide (Exam70-410) is designed for individuals responsible for designing, implementing, configuring, or administering Windows Desktop/Server infrastructures. The Cert Guidecontains materials needed to install and configure Windows Server 2012 R2. It isstructured to prepare those pursuing the Microsoft Certified Solutions Associate(MCSA) or Microsoft Certified Solutions Expert (MCSE) certification for WindowsServer 2012 R2.This book covers the “Installing and Configuring Windows Server 2012” exam(70-410), the first of three exams under the MCSA certification track. For thoseworking toward the MCSE certification, the 70-410 exam is the first of five examsrequired. The exam is designed to measure your skill and ability to install and configure Windows Server 2012 R2, roles and features, Hyper-V, Active Directory,Group Policy, DNS, and other core network services. Microsoft not only tests youon your knowledge of the server operating system, but also has purposefully developed questions on the exam that force you to solve problems in the same way youwould when presented with scenarios or issues supporting an organization. Passingthis exam demonstrates your competency to install and configure all editions ofWindows Server 2012 R2.This book covers all the objectives that Microsoft has established for exam 70-410.It doesn’t offer end-to-end coverage of the Windows Server 2012 R2 operating system; rather, it helps you develop the specific core competencies you need to masteras an administrator or engineer.Goals and MethodsThe number-one goal of this book is a simple one: to help you pass the 70-410 Certification Exam and thereby earn the first requirement toward the MCSA or MCSEcertification. Because Microsoft certification exams stress problem-solving abilitiesand reasoning more than memorization of terms and facts, our goal is to help youmaster and understand the required objectives for the 70-410 exam.To aid you in mastering and understanding the MCTS certification objectives, thisbook uses the following methods: Opening Topics List: This defines the topics to be covered in the chapter. Do I Know This Already? Quizzes: At the beginning of each chapter is a quiz.The quizzes, and answers/explanations (found in Appendix A), are meant togauge your knowledge of the subjects. If the answers to the questions don’tcome readily to you, be sure to read the entire chapter.xxvii

xxviiiMCSA 70-410 Cert Guide Foundation Topics: The heart of the chapter. Explains the topics from ahands-on and a theory-based standpoint. This includes in-depth descriptions,tables, and figures geared to build your knowledge so that you can pass theexam. The chapters are broken down into several topics each. Key Topics: The key topics indicate important figures, tables, and lists ofinformation that you should know for the exam. They are interspersedthroughout the chapter and are listed in table form at the end of the chapter. Memory Tables: These can be found on the CD-ROM within Appendix B,“Memory Tables.” Use them to he

vi MCSA 70-410 Cert Guide Installing a Windows Server Core Computer 42 Installing the Full GUI Server 48 Upgrading a Windows Server 2008 Computer 49 Converting Between Core and GUI 50 Delegation of Server Administration 51 Preparing