Category Archives: 70-290 exam

Microsoft shop: No part of this publication may be reproduced

By default, Windows Server 2008 includes several built-in local user accounts within Active Directory for the purpose of administration. Each of these accounts serves a different purpose that can be used at various levels of administration. In total, these accounts are as follows:Although local groups have been included in this book because they ’re often used for various purposes throughout the enterprise, you will rarely encounter questions on the certification exam specifically asking you about the purpose of a built-in local group.

If you are a member of the Account Operators, Domain Admins, or Enterprise Admins in Active Directory, you have the option of changing the scope of a group if the current scope of your defined group is not to your liking. You can do this by using the Active Directory Users and Computers MMC; just right-click the individual group, and select Properties. On the General tab, in the Group Scope section, click the Group scope, as shown in Figure 5.8.

With Windows Server 2008, the following conversions are possible:Global to universal This is possible if the group to be changed is not a member of another global scope group.Domain local to universal This is possible if the group does not have another domain local group as a member.Universal to global This is possible if the group does not have a universal group as a member.Select Start Administrative Tools Active Directory Users and Computers. Select the Users folder to display the complete list of users.Right-click an area of whitespace within the Active Directory Users and Computers tool, and select New Group.Select the Universal radio button and the Security radio button, and then name the group AllUsers .Double-click the group, or right-click the group and select Properties.Add a user of your choice. In this case, I’ll use the previously created user snuffleupagus. Click the Locations button, and select another domain in your forest.

Microsoft updates xp: Active Directory database storage allocation

Organizational units form the basis for a lot of our work as administrators because they are the most easily mutable form of object collection available. As you know, OUs can comprise accounts, groups, computers, printers, or various other objects and can be very robust in their composition. They’re generally implemented for one of two reasons: delegation or Group Policy. More often than not, administrators use OUs for delegation because of how easy they are to assemble. In fact, they go further than just being easy to use, because OUs can contain other OUs in what is called OU nesting . And as OUs nest, they can create more and more complex infrastructures. Accordingly, on the 70-647 certification exam, a good deal of time is spent understanding OU design and understanding how to create the OU hierarchy.

If you’ve read Chapter 1, “Designing a Complex Windows Server 2008 Infrastructure,” you’re probably already familiar with the concept of breaking down organizations into more logical structures. Similarly, in this section, you’ll explore how to break OUs down into more logical structures.

The reason I haven’t covered this in detail up until this point is that in most small organizations, there really isn’t as much of a need for this. Consider a business with, say, 50 employees. With 50 employees, there is almost no way that there could be more than 50 organizational units. There may be the rare case where someone could think up an OU structure that would make even the most seasoned administrator set down his glasses and say, “Well, that’s a doozy.” But more often than not, a small office will most likely look something like Figure 5.1.

The design is not very complex. But imagine you decided to apply this design to an orga- nization with, say, 10,000 employees. Take a look at what happens in Figure 5.2, which shows the breakdown of just one OU, Sales.

MCITP For Dummies: Configuring Windows Defender

Terminal Services Web Access Lets users use RemoteApp programs and Remote Desktop connections through the Internet Terminal Services Gateway Allows users to connect to internal servers running remote applications via an Internet device that can run Remote Desktop connections.Terminal Services Licensing Maintains client access licenses for users of devices.Terminal Services Session Broker Provides load balancing for Terminal Services in an enterprise.Terminal Services Server Load.One of the most convenient and useful features of Terminal Services is that it puts an extraordinarily light load on the server. As of this writing, Microsoft has not released a prescribed load for applying Terminal Services throughout a given enterprise. However, two tried and true methods for determining server load have existed since the release of Terminal Services and (for that matter) have been in release since most computers were first functioning. Those two methods are experimentation and extrapolation. For particulars on using Roboserver and Roboclient, check MICROSOFT.COM ; the Enterprise Administrator exam will not test you on the particulars, so I will not discuss them here as to ease the burden of information.

When using experimentation , you take an existing server, give it a full test load of vari- ous applications, and place it under heavy use with various users requesting different appli- cations at once. The information you derive from this experiment lets you determine where your Terminal Services server needs to be placed and what kind of hardware it will require. To aid in this process, when Microsoft released the Windows Server Deployment Kit, it included two useful tools: Roboserver ( ROBOSRV.EXE ) and Roboclient ( ROBOCLI.EXE ). Using these tools, an administrator can place a heavy server load without having to go through the process of creating a custom load from scratch.

With extrapolation , you examine a previously existing instance of Terminal Services and plan accordingly based on the overall deployment needs of your organization. For example, if you have a currently running server with 10 users that is at maximum capacity (which, by the way, is pretty unlikely), you would extrapolate from that existing load that an orga- nization that has 1000 users will require 100 servers to reach capacity. In both methods, you are primarily concerned with the following:If any one of these server requirements becomes a bottleneck, you will have to adjust your server deployment method and hardware accordingly.

Project+,Installing DNS of exporting and importing virtual machines

You should be able to explain how to create a virtual machine, what options you have to install an operating system in a virtual machine, and how to install the Hyper-V Integration Components on a virtual machine. Don’t forget about the virtual machine states and the virtual machine settings!

Have a good understanding of the concept of exporting and importing virtual machines, how snapshots work, and what lies behind a Quick Migration. Understand how you can export a virtual machine, what you should consider when moving it to a new host machine, and what happens after importing it to the import folder. The same applies to snapshots: You need to know what options you have available and what each option will do. Especially recognize the difference between applying and reverting a snapshot.

Configuring Windows Deployment Services, Install from media (IFM), capture Windows Deployment Services images, deploy Windows Deployment Services images, server core.
Deploy images using Windows Deployment Services. May include but is not limited to: Install from media (IFM); configure Windows Deployment Services; capture Windows Deployment Services images; deploy Windows Deployment Services images; server core

Configure Microsoft Windows activation. May include but is not limited to: install a KMS server; create a DNS SRV record, replicate volume license data.Windows Deployment Services is a tool that allows adminis- trators to easily deploy and manage images, scripts, and the unattended installation of computer systems. This service can prove to be invaluable to those tasked with the administration of a medium or large corporate network.

Windows Deployment Services can help with basic tasks such as formatting and partition- ing a physical system, deploying a consistent set of standards across the network, simplifying the installation of operating systems, and performing post-installation tasks.

Before the development of tools such as Microsoft Windows Deployment Services (WDS), a network administrator was tasked with manually con?guring all of the systems in a network to upgrade or install an operating system. This would involve many man-hours, costing organizations time and money. Deployment Services reduces that need to physically install or upgrade systems, allowing IT administrators to manage the installation of systems from a central location, which can result in more time to devote to other, more important tasks. Several modi ?cations have been made to Windows Deployment Services from the previous version, which was known as Remote Installation Services (RIS) and Windows Deployment Services on Windows Server 2003.

Pass Network+ Exam, Pointer Records

Snapshots are extremely useful in training classes or testing environments. When your company goes to test new software, you can make sure to do snapshots at every single step so you can immediately go back if some problems or issues arise. In training classes, you can prepare each virtual machine for your students according to your special require- ments, and once the course is finished, you just revert all virtual machines to their initial configuration. No hassles with experienced users that change your configuration without letting you know anymore.

Creating a Snapshot of a Virtual Machine
Follow these steps to create and rename a snapshot of a virtual machine using Hyper-V Manager:

1.Click Start Administrative Tools Hyper-V Manager.

2.In Hyper-V Manager, in the Virtual Machines pane, right-click the virtual machine. In the Actions pane, select Snapshot.

3.Once the snapshot is taken, it should appear in the Snapshots pane in Hyper-V Manager. Right-click the snapshot and select Settings.

4.In the Settings window, on the Management pane, click Name and type in First Snapshot as the name.

5.You can also add some notes to make it easy to identify.

6.Click OK to apply the changes.

Once you create a snapshot for a virtual machine, you will also have the Revert option available in the virtual machine name’s pane in Hyper-V Manager. Reverting basically means that you restore the last snapshot made. You also see the last snapshot taken marked with a green arrow in the Snapshots pane.

However, you will also have options available directly on the snapshot level that let you perform certain actions:Settings This opens the settings window of the virtual machine. The only settings you can change are the name and the notes field. All others are read-only.

Apply Applying a snapshot to a virtual machine technically means that you copy the virtual machine state from the snapshot to the active virtual machine. You can look at this as a “restore this snapshot” option. Because you would lose all unsaved data and settings from the active virtual machine, you will be asked if you want to create another snapshot before you apply this snapshot. If you just click Apply, the active machine will be overwritten and reverted back to the state it was in when the snapshot was made. This snapshot will not be removed.

MCSE Certifications:Using Other Advanced Boot Options Menu Modes

Side-by-side comparison of a RemoteApp and a local application

Using Task Manager, you can see which application is running locally and which application is running as a TS RemoteApp. Figure 2.6 shows the WordPad in Task Manager and indicates which application is running remotely.

Prepare and Configure Terminal Services Gateway (TS Gateway)

Terminal Services Gateway is a role for Windows Server 2008 that encapsulates Remote Desktop Protocol (RDP) traf ?c over HTTP with SSL encryption (HTTPS) and provides a secure link for authorized remote users on the Internet to access internal terminal server applications without creating a virtual private network (VPN) connection. Instead of using TCP port 3389, TS Gateway transmits the RDP traf ?cover TCP port 443, so little or no modi ?cation is needed to the external ?rewall because this port is usually already open for other HTTPS traf ?c. The TS Gateway server sits behind the external, and when the ?rewall receives RDP over HTTP traf ?c, it strips off the HTTP header and passes the RDP packets to the TS Gateway sever. The TS Gateway server will then check the Network Policy Server (NPS) service and Active Directory to authenticate the remote user. Once authentication has completed, the user will be allowed access to the internal terminal servers to run the TS Web Access–enabled TS RemoteApp programs.

Preparing the Necessary TS Gateway Role Services

Very similar to installing TS RemoteApps, TS Gateway requires that additional roles be installed on the Windows 2008 server. To install the TS Gateway role, the following roles services are also required:

Remote Procedure Call (RPC) over HTTP Proxy

Web Server (Internet Information Services 7.0)

Network Policy and Access Services

MCSE 2003:Using Event Viewer

Configuring SSO on a Client Computer

Follow these steps to con?gure Single Sign-On on a Windows Vista computer.

1.Open Local Group Policy Editor. Click Start-Run-type gpedit.msc, and press Enter.

2.Expand and navigate to Computer Con?guration- Administrative Templates- System-Credentials Delegation.

3. Double-click Allow Delegating Default Credentials.

4. In Properties on the Setting tab, click Enable and click Show.

5. In Show Contents, click Add and add the terminal servers to the policy list by typing
the pre?x termsrv/ in front of the server name (for example, termsrv/TServ1 ).

6. Click OK three times to close all the dialog boxes.

Prepare and Configure the Use of Terminal Services RemoteApp (TS RemoteApp)

In the following sections, we’ll discuss a new feature of Terminal Services for Windows 2008 called Terminal Services RemoteApp (TS RemoteApp). In previous versions of Termi- nal Services, the only option was to publish the full Desktop, but with TS RemoteApp, now individual applications can be published. What this means is that, instead of launching a new Desktop session to run an application that is running on the terminal server, you can publish an individual application from the terminal server and it will appear as if is it is running on the client’s local computer. No longer will users have to deal with the confusion of running two different Desktops to run all their applications. Before we dive too deep into TS RemoteApp and its features, we need to install the Terminal Server role on our Windows 2008 server.

Installing Programs to Be Used with TS RemoteApp

TS RemoteApp is made available through the installation of Terminal Services on Windows Server 2008. As the administrator of the server installs applications on the server, they can be added to a published list of programs that users will be able to access. In Exercise 2.10, you’ll install the Terminal Services role and change the user mode to allow applications to be installed correctly on a TS server.

Installing the Terminal Services Role

Follow these steps to install the Terminal Services Role for Window Server 2008.

1.Open Server Manager. Click Start-Administrative Tools-Server Manager.

2. Under Roles Summary, click Add Roles.

3. In the Add Role Wizard, on the Before You Begin page, click Next.

4.On the Select Server Roles page, check Terminal Services. If Terminal Services is already installed, this check box will be grayed out.

5. Click Next.

6. On the Introduction to Terminal Services page, click Next.

7. On the Select Role Services page, select Terminal Server and click Next.

8. On the Uninstall and Reinstall Applications for Compatibility page, click Next.

9. On the Specify Authentication Method for Terminal Server page, select the authenti- cation you will be using and click Next. If you select Require Network Level Authen- tication, only computers running Windows Vista with RDC 6.0 or higher will be allowed to connect to the server. If you select Do Not Require Network Level Authen- tication, any RDC client can connect to the TS server.

10. On the Specify Licensing Mode page, select the licensing mode you will be using and click Next.

11. On the Select User Groups Allowed Access to this Terminal Server page, add the
users or groups that you will allow to connect and click Next.

12. On the Con?rm Installation Selections page, verify settings and click Install.

13. After the installation, you will be prompted to restart the server to ?nish the installation process. Click Close and Yes to restart the server.

After you install the Terminal Services role, you need to install the programs that are going to be published. Before you install a program on a terminal server, the server needs to be placed in install mode, and after installation is complete, the server needs to placed back into execute mode.

To change the system to install mode, type change user /install at the command prompt.

To change the system to execute mode, type change user /execute at the command prompt.

To get additional information or help, type change user or change user /? at the command prompt.

MCITP Test:Monitoring and Optimizing Memory

On the Con?rm Installation Selections page, verify that Storage Manager for SANs is the feature that will be installed. Click Install.

After the installation, when the Installation Results page appears, verify that the installation was successful and click Close.

To launch Storage Manager for SANs, click Start-Administrative Tools-Storage Manager for SANs.

Opening Storage Manager for SANs, you will notice three main sections: LUN Management, Subsystems, and Drives. All the tasks that can be preformed are performed within these three sections.

In the LUN Management section, the following tasks can be preformed:

View information about the LUNs on your Fibre Channel and iSCSI storage systems.

Create, rename, extend, delete, assign, and unassign LUNs.

Add servers to your SAN and enable HBAs and iSCSI initiators.

Create, remove, and configure security settings and log on to iSCSI targets.

In the Subsystems section, the following tasks can be preformed:

View information about the storage systems that have been discovered by VDS.

Rename a storage system.In the Drives section, the following tasks can be preformed:

View information about the disk drives in the storage systems that have been discovered.

Make a drive light blink.

Storage Explorer

Storage Explorer is used by administrators to view and manage Fibre Channel and iSCSI fabrics available in the environment. The Storage Explorer interface provides a tree-struc- tured view of the components by using APIs to collect data about the storage devices. The following detailed information can be found in Storage Explorer:

HBA information

Fibre Channel switches

iSCSI initiators

iSCSI targets

An administrator can also perform various iSCSI-related tasks from Storage Explorer:

Log on to iSCSI targets.

Configure iSCSI security.

Add iSCSI target portals.

Add iSNS servers.

Manage discovery domains.

Manage discovery domain sets.

Figure 1.7 shows the Storage Explorer interface with an iSCSI initiator selected and also illustrates the management options that are available.

MCITP Certification:Using Windows Fax and Scan

Select Disks page of the New Mirrored Volume Wizard

To complete the process, you must select a second disk by highlighting the appropriate disk and adding it to the volume set. Once the second disk has been added, the Add button becomes unavailable and the Next button is available to complete the mirrored volume set creation (see Figure 1.2).

Windows Server 2008 Storage Services

Adding the second disk to complete a mirrored volume set

After you clicking Next, the creation of the Mirrored Volume set is again just like the rest of the steps, 7 through 11, in Exercise 1.3. A drive letter will have to be assigned and the volume will need to be formatted. The new mirrored volume set will appear in Disk Management. In Figure 1.3, notice that the capacity of the volume equals one disk even though two has been selected.

Storage in Windows Server 2008

To create a RAID-5 volume set, you use the same process you use to create a mirrored volume set. The only difference is that a RAID-5 volume set requires that a minimum of three disks be selected to complete the volume creation. The process is simple: Select New RAID-5 Volume and then select the three disks that will be used in the volume set. Assign a drive letter and format the volume. Figure 1.4 shows a newly created RAID-5 volume set in Disk Management.

Newly created RAID-5 volume set

With the ever increasing demands of storage, mount points are used to surpass the limita- tion of 26 drive letters and to join to volumes into a folder on a separate physical disk drive. A mount point allows you to con ?gure a volume to be accessed from a folder on another existing disk. Through Disk Management, a mount point folder can be assigned to a drive instead of using a drive letter and can be used on basic or dynamic volumes that are for- matted with NTFS. However, mount point folders can be created only on empty folders within a volume. Additionally, mount point folder paths cannot be modi ?ed; they can only be removed once they have been created. Exercise 1.4 shows steps
to create a mount point.

Either type the path to an empty folder on an NTFS volume or click Browse to select or make a new folder for the mount point.

When you explore the drive, you’ll see the new Folder created. Notice that the icon indicates that it is a mount point.

Get Network+ Certified Fast:Managing Dynamic Storage

Glossary Throughout each chapter, you will be introduced to important terms and con- cepts that you will need to know for the exam. These terms appear in italic within the chapters, and at the end of the book, a detailed glossary gives de? nitions for these terms as well as other general terms you should know.

Review questions, complete with detailed explanations
Each chapter is followed by a set of review questions that test what you learned in the chapter. The questions are written with the exam in mind, meaning that they are designed to have the same look and feel as what you’ll see on the exam.

Exercises In each chapter, you’ll ?nd exercises designed to give you the important hands- on experience that is critical for your exam preparation. The exercises support the topics of the chapter, and they walk you through the steps necessary to perform particular functions. Real World Scenarios Because reading a book isn’t enough for you to learn how to apply these topics in your everyday duties, we have provided Real World Scenarios in special side- bars. These explain when and why a particular solution would make sense, in a working environment you’d actually encounter.

Interactive CD Every Sybex Study Guide comes with a CD complete with additional questions, ?ashcards for use with an interactive device, and the book in electronic format. Details are in the following section.

What ’s on the CD?

With this new member of our best-selling Study Guide series, we are including quite an array of training resources. The CD offers bonus exams and ?ashcards to help you study for the exam. We have also included the complete contents of the Study Guide in electronic form. The CD’s resources are described here:

The Sybex E-book for Windows Server 2008 Applications Infrastructure
Many people

like the convenience of being able to carry their whole Study Guide on a CD. They also like being able to search the text via computer to ?nd speci ?c information quickly and easily.

Introduction

For these reasons, the entire contents of this Study Guide are supplied on the CD, in PDF. We’ve also included Adobe Acrobat Reader, which provides the interface for the PDF contents as well as the search capabilities.

The Sybex Test Engine
This is a collection of multiple-choice questions that will help you prepare for your exam. There are four sets of questions: Two bonus exams designed to simulate the actual live exam.