Configuring Server 2012 (70-412)

Explore configuring file and storage solutions in Windows Server 2012, including File Server Resource Manager and dynamic access controls. Discover data deduplication, branch cache, and storage spaces to optimize storage.

Configure advanced file services in Windows Server 2012 to optimize storage utilization with storage spaces and the file server resource manager, audit access, and branch cache.

Explore storage optimization on Windows Server 2012 with File Server Resource Manager. Learn to configure quotas, file screening, classifications, dynamic access control, and data deduplication for efficient storage management.

Configure Windows Server 2012 file classifications using classification properties and rules to automatically or manually tag files for dynamic access control.

Enable data deduplication on Windows Server 2012 and configure features on demand to reclaim disk space while optimizing storage on file servers.

Configure file access auditing in Windows Server 2012 to monitor object and global object access, using dynamic access control with conditional expressions and group policy to push SACL entries.

Explore branch cache in Windows Server 2012, a caching feature reducing bandwidth between branch offices and corporate by storing http, https, and smb content locally in hosted or distributed modes.

Enable branch cache for network files on Windows Server 2012, configure hash publication via Group Policy, and set distributed mode to speed access across land links.

Monitor BranchCache status and configuration via netsh branchcache context and Get-BCStatus in PowerShell, verify client cache enabled, and troubleshoot using Event Viewer and performance counters to assess bandwidth savings.

Explore how data deduplication jobs optimize storage on Windows Server 2012 by eliminating redundant content across file server drives, unlike branch cache or quotas.

Configure file services in Windows Server 2012 to optimize storage with file server resource manager, file classifications, and data deduplication, and extend auditing with dynamic access control and branch cache.

Explore dynamic access control to protect sensitive data on network file servers beyond traditional NTFS permissions. Learn its features, benefits, and components for planning and implementing a secure network.

Explore dynamic access control in Windows Server 2012, using central access policies, central access rules, file classifications, and claims to authorize data access across locations.

Evaluate business requirements and plan dynamic access control components, including central axis policies, object access auditing, and file classifications to assign properties to files and folders across servers.

Evaluate business requirements for dynamic access control to enhance security beyond NTFS, enable content-based authorization, enforce compliance with file classification, and reduce group complexity.

Plan central access policies to implement dynamic access control across multiple servers. Define central access rules based on user attributes and resource classifications to ensure authorized access and data protection.

Configure standard, advanced, and dynamic auditing to track object access across file servers, using group policy, central auditing policy, and conditional expressions for precise, secure monitoring.

Configure file classifications to automate properties and enable dynamic access control in Windows Server 2012, plan classification types and manual or automated application with content or location scanning.

Implement dynamic access control by defining prerequisites, creating user and device claims and resource properties, and building central access rules into a policy for file servers, including access denied assistance.

Identify prerequisites for dynamic access control in Windows Server 2012: file server resource manager role, domain controllers or schema update, and support for user and device claims.

Configure claims and resource properties for dynamic access control in Active Directory Domain Services. Define central access rules and policies to authorize user and device access.

Create central access rules and policies to enforce dynamic access control across servers using resource properties and conditional expressions, then publish and test permissions with group policy and event logs.

Enable access denied assistant in Windows Server 2012 using Group Policy or File Server Resource Manager to deliver meaningful denial messages and allow users to request access, reducing support calls.

Enable access denied assistance to give meaningful error messages and allow users to request access from the folder owner when access is blocked.

Explore dynamic access control in Windows Server 2012, enhancing traditional access with central rules and policies for consistent, secure access across multiple file servers via user and device claims.

Explore storage spaces in Windows Server 2012 to flexibly manage local and network storage and integrate iSCSI over Ethernet.

Configure storage spaces in Windows Server 2012 to create storage pools from direct attached disks, add hot spares, and build virtual disks with simple, mirror, or parity layouts for storage.

Configure and manage iSCSI on Windows Server 2012 by setting up iSCSI targets and initiators, enabling MCS and MPIO for high availability, and using CHAP authentication.

Identify the correct sequence to configure storage spaces in Windows Server 2012 by creating a storage pool from iSCSI disks before creating a virtual disk and volume.

Explore storage space in Windows Server 2012 to create storage pools from direct-attached disks with redundancy options and manage iSCSI disks using the target service and initiator.

Explore configuring file services in Windows Server 2012, including quotas with File Server Resource Manager, branch cache, dynamic access control, storage spaces, and iSCSI integration for SAN.

Explore DHCP deployment and high availability in Windows Server 2012, then implement DNS securely and leverage IPAM to manage multiple DNS and DHCP servers across the enterprise.

Explore how the dynamic host configuration protocol supports networks and how Windows Server 2012 implements DHCP, including DNS-DHCP integration in Active Directory, super scopes, IPv6 scopes, and high availability.

DHCP assigns IP addresses, subnet masks, and options like gateways and DNS servers to clients, and Windows Server 2012 includes scope designs, high availability with failover, and Network Access Protection.

Learn how dhcp automatically updates dns host and ptr records as clients obtain or release ips, with dhcp name protection and dhcid tracking to prevent name squatting in multi-server environments.

Configure advanced dhcp scope designs in Windows Server 2012, including super scopes for grouping logical subnets and multicast scopes for IPv4 with MADCAP, plus IPv6 stateless and stateful options.

Discover how to implement high availability for DHCP in Windows Server 2012 by configuring failover between servers, including hot standby and load sharing, with shared secrets and automatic failover options.

Windows Server 2012 introduces DHCP failover for high availability, enabling two servers to share scopes through hot standby or load sharing, with lease replication and shared secret authentication.

Explore implementing dhcp solutions in Windows Server 2012, covering dhcp components, dns integration, dns update options, name protection, advanced scope designs, and high availability via dhcp failover.

Learn to implement dns solutions in windows server 2012, optimize name resolution with stub zones, manage dns for troubleshooting and disaster recovery, and enable global names and dnssec protections.

Explore how the domain name system resolves FQDNs to IP addresses on TCP/IP networks and optimize name resolution in Windows Server 2012 with forwarding, conditional forwarding, and root hints.

Explore configuring, monitoring, and maintaining DNS services in Windows Server 2012, including resource records aging and scavenging, backups, delegation, and troubleshooting with Event Viewer and PowerShell.

Enable global name support in Windows Server 2012 to let clients resolve single-label names across multiple domains by using a global name zone with CNAME records mapping to FQDNs.

Explore how DNS security protects critical network information by guarding against DNS spoofing and cache poisoning, and configure DNSSEC, cache locking, and source port randomization in Windows Server 2012.

Monitor and manage DNS in Windows Server 2012, including aging and scavenging of resource records, event logs, backups, and delegation and forwarders via DNS management tools, DNS CMD, and PowerShell.

Configure and optimize name resolution in Windows Server 2012 through DNS server options, including aging and scavenging, delegation, subdomain authority, and global names for single-label resolution; secure responses with DNSSEC.

Explore IPAM in Windows Server 2012, designed for larger networks with multiple static addresses or DHCP servers, and learn its overview, installation, configuration, and ongoing management across the enterprise.

Discover how IPAM in Windows Server 2012 simplifies managing IP address space, DHCP and DNS across multiple servers, with discovery, auditing, monitoring, forecasting, planning, and capacity planning.

Configure ipam on Windows Server 2012 with hardware requirements (dual-core processor up to 2.0 GHz or higher, 4 gb ram, 80 gb disk), domain member status, and server manager installation.

Explore IPAM in Windows Server 2012 for discovering and managing IPv4/IPv6 address space, tracking utilization, and provisioning DHCP/DNS integration for capacity planning.

Manage and monitor DHCP and DNS servers across the network with IPAM, view IP address space, monitor DHCP scopes and DNS zones, and organize servers into groups for centralized administration.

Evaluate centralized management and monitoring of DNS, servers, and network infrastructure with Windows Server 2012, and understand EPAM’s capabilities and its limitation with non-Windows devices.

Master IP address management with IPAM in Windows Server 2012, covering installation, configuration, console views, static and dynamic address space, and DNS/DHCP server monitoring for distributed networks.

Configure network services on Windows Server 2012, implementing DHCP with failover for high availability and DNS with namespace optimization, plus IPAM for monitoring and managing IP space and DNS/DHCP servers.

Explore configuring Active Directory distributed environments, covering logical and physical infrastructure, replication of the Active Directory database, and sites and site links to optimize replication.

Explore the implementation of Active Directory domain services across distributed environments, examining forests, domains, and a trust relationship that enables single sign-on and cross-domain authorization.

Explore the logical structure of Active Directory, including domains, trees, and forests, and learn how replication, boundaries, and DNS integration shape secure, scalable administration.

Explore deploying a distributed Active Directory environment by installing domain controllers, creating domains and forests, and managing domain and forest functional levels to enable new features.

Learn to promote a Windows Server 2012 to a domain controller by installing the ad ds role and using the ad ds configuration wizard to create domains or forests.

Upgrade domain controllers or add Windows Server 2012 domain controllers to migrate an Active Directory infrastructure, using the Active Directory Migration Tool and establishing trust relationships to upgrade the schema.

Raise domain and forest functional levels after all domain controllers run the OS version to unlock features like last login timestamps, selective authentication, DFS replication, and Active Directory recycle bin.

Configure and understand active directory trust relationships to enable single sign-on across domains and forests, including automatic and manual, transitive and non-transitive, external, realm, shortcut, and forest trusts.

Learn to use shortcut trust in an Active Directory forest to provide direct access to resources across separate domain trees, reducing long trust paths.

Examine complex Active Directory designs, including domains, trees, and forests, and learn to upgrade and migrate to Windows Server 2012 with trust relationships that enable cross-domain single sign-on.

Explore how Active Directory changes replicate across domain controllers in AD DS, using sites to control service localization and replication, and learn configurable options for managing replication.

Understand how Active Directory Domain Services uses multimaster replication across domain controllers, covering domain, configuration, and schema partitions, with sites, site links, and the KCC shaping replication.

Explore implementing Active Directory sites to control replication and logon traffic, create and assign subnet objects, configure site links, and ensure automatic site coverage for non-DC sites.

Configure Active Directory replication by creating and linking sites, adjusting replication frequency and cost, and using site link bridging to shape topology and improve convergence.

Identify the service that generates the replication topology and connection objects on each domain controller—the knowledge consistency checker (KCC). This automatic process runs on all domain controllers to manage replication.

Discover how Active Directory sites control login and replication traffic within a site using multimaster replication at the attribute level with robust conflict resolution and scheduling options.

Configure and optimize Active Directory replication by implementing read-only domain controllers and DFS replication for sis file folder structure, improving monitoring of replication traffic on Windows Server 2008 and later.

Explore read-only domain controllers (ROTC) for branch offices, replicating only selected attributes and caching passwords per policy while forwarding authentication to writable domain controllers.

Monitor and troubleshoot Active Directory replication using repadmin, dcdiag, BPA, LDP, and Site and Services to ensure consistent domain controller data and topology.

Migrate from file replication service to DFS-R on domain controllers to keep AD defaults, GPO templates, and login scripts consistent across replicas, using RDC compression and scheduled replication.

Create a Cleveland-only sales group and add it to the default password replication policy to cache only those users' passwords.

optimize Active Directory replication with read-only domain controllers, monitoring tools, and DFS replication, ensuring efficient, consistent data across multiple domain controllers.

Explore distributed environments with Active Directory, covering logical and physical infrastructure, AD replication, site and site link concepts, and replication optimization for Windows Server 2012 administrators.

Explore identity and access solutions on Windows Server 2012, implementing PKI with certificate authorities, AD FS for single sign-on, and AD RMS to protect data in transit.

Explore Active Directory Certificate Services as the foundation of a PKI, covering certificate authorities, digital certificates for authentication and encryption, and certificate management in Windows Server 2012.

Understand how public key infrastructure secures data through authentication and encryption using digital certificates. Explore PKI components such as certificate authorities, CRLs, AIA/CDP, and Windows Server 2012 AD CS enrollment.

Install and configure the certificate authority in Windows Server 2012 to build a PKI, choosing root or subordinate, stand-alone or enterprise, online or offline, with policy and issuing roles.

Explore certificate templates in Active Directory and how they define request methods and purposes. Distribute to clients via manual and automatic enrollment, CA administration, revocation, and Windows Server 2012 basics.

Configure certificate templates in Active Directory Certificate Services to define usage, enrollment permissions, and auto enrollment, and manage versions and deployment on Windows Server 2012.

Explore certificate distribution in Windows Server 2012, configuring auto-enrolment via group policy while also detailing manual enrollment, CA web enrollment, enrollment agents, and NDES with SCEP for network devices.

Configure certificate revocation using CRL publishing or OCSP online responder in Windows Server 2012 AD CS, including AIA and CDP locations and OCSP response signing certificates.

Implement role-based administration for the certificate authority by assigning permissions to individuals for specific tasks, enabling dedicated roles such as CA administrator, certificate manager, backup operator, auditor, and enrollees.

Configure key archival and recovery for a certificate authority to protect private keys, enable retrieval by recovery agents, and demonstrate key recovery from the database for disaster resilience.

Install the certificate authority web enrollment role service on Windows Server 2012 to streamline requesting and installing certificates for both domain and non-domain users across internal and external clients.

Implement Active Directory Certificate Services in Windows Server 2012 by deploying root and subordinate CAs, configuring templates, distribution methods, revocation via CRL or Online Responder, and key archival for recovery.

Explore the implementation of Active Directory Federations Services (ADFIS) in Windows Server 2012, outlining its features, components, and deployment scenarios to assess fit and enable cross-platform single sign-on.

Understand ADFS and identity federation to enable cross-organization single sign-on via claims-based authentication, with federation trusts and web services standards securing access.

Explore the key components of Active Directory Federation Services, including the federation server, claims provider, relying party, and federation service proxy, and how tokens and certificates secure identity across organizations.

Explore AD FS implementation scenarios, including single-organization scenario and business-to-business federation, and learn how account resource locations and target applications within or outside organizational boundaries shape configuration.

Configure a single-organization AD FS deployment by establishing claims provider and relying party trusts, defining claim types and rules, and securing communications with certificate-based tokens.

Explore business-to-business federation between two organizations, detailing account partner and resource partner roles. Learn how federation servers, attribute stores, claims, relying party trusts, and claim rules enable secure cross-organization access.

Engage in a knowledge check on configuring a federated trust with a partner organization, authenticating internal AD DS accounts, and using claims to grant remote access to resources.

Explore how Active Directory Federation Services extends single sign-on across boundaries with the federation server role, federated trust, and components like claims providers and relying parties in Windows Server 2012.

Protect digital content by implementing Active Directory Rights Management Services in Windows Server 2012, configuring information rights management, encryption, and rights policy templates across client and server deployments.

Active Directory Rights Management Services protects digital content across data at rest, when transmitted, and during use by encrypting content and issuing licenses and certificates.

Configure and deploy AD RMS across single or multiple clusters, including federation with ADFS, trusted publishing, and required certificates, configuration databases, and service accounts.

Discover best practices for managing AD RMS, including disaster recovery, backing up the server and database, exporting keys and certificates, and safely decommissioning servers to protect content.

Configure AD RMS content protection by defining and distributing rights policy templates and setting permissions such as export, print, copy, and extract. Enable offline access, macros control, and Exchange integration.

Extend ad rms to external organizations by configuring trusted user and publishing domains, integrating with active directory federation services, and using windows live id or the microsoft federation gateway.

Perform a knowledge check on AD RMS compatibility, showing that Exchange 2010 and Outlook 2007 or later support AD RMS integration, while a third-party HR application may not.

Deploy and configure an AD RMS cluster to encrypt data, limit access to authorized users, and extend protection to external organizations using policy templates, certificates, and backups.

Implement Active Directory certificate services for issuing digital certificates, enable Active Directory federation services for cross-boundary single sign-on, and apply Active Directory rights management services for information protection.

Explore high availability across Windows Server 2012 using network load balancing, failover clustering, and Hyper-V. Learn planning, deployment, and configuration to ensure continuous service and efficient virtual machine movement.

Configure network load balancing in Windows Server 2012 to improve scalability and availability by distributing IP-based traffic across multiple hosts in a cluster, with planning and deployment steps.

Discover how network load balancing in Windows Server 2012 delivers high availability and fault tolerance by distributing traffic across a cluster of stateless front-end servers.

Plan a network load balancing deployment by ensuring identical hardware and software on all nodes, with consistent application data and security considerations such as firewall rules and ssl certificates.

Launch and configure an NLB cluster in Windows Server 2012, detailing requirements and deployment steps, and explore configuration options like LB affinity, port rules, and other management settings.

Deploy a network load balancing cluster on Windows Server 2012 using PowerShell, ensuring static addresses on a single TCP/IP subnet and convergence across two web servers.

Configure a network load balancing (NLB) cluster by defining port rules and affinity to distribute traffic across nodes, using multiple or single host filtering.

Configure virtualization hosts with System Center Virtual Machine Manager, enabling bare-metal deployments and host grouping. Apply placement rules, host reserves, and dynamic and power optimization to balance resources across hypervisors.

Implement Windows Server 2012 network load balancing with an NLB cluster of nodes and a virtual IP for web applications. Include virtualization planning, security, port rules, and affinity settings.

Explore failover clustering in Windows Server 2012, a high-availability solution that keeps services running during hardware or software failures, and the components, installation, and monitoring.

Improve failover clustering and high availability storage in Windows Server 2012 by examining storage options, redundancy strategies, and SMB 3.0, iSCSI, and Fibre Channel configurations.

Understand failover clustering components, including cluster nodes, resources, networks, and cluster shared volumes, and how quorum, failover, and failback ensure availability with shared storage such as iSCSI and fibre channel.

Configure a virtualized data center by managing storage in the virtual machine management console, creating storage pools and gold/silver classifications, and provisioning file shares for a failover cluster.

Configure high availability by deploying a failover cluster, validating the setup, and creating clustered applications such as a file server with IP and network name resources managed by cluster manager.

Learn to configure and monitor Windows Server 2012 failover clusters, manage nodes and networks, set permissions and preferred owners, and implement cluster aware updating for automated, minimal-downtime maintenance.

Assess high-availability options for SQL databases on Windows Server 2012, emphasizing three-node failover clustering as the best solution for multi-node database applications.

Learn failover clustering in Windows Server 2012, covering cluster shared volumes, hardware and software requirements, and how to configure and monitor high availability with Failover Cluster Manager and PowerShell.

Explore failover clusters for Hyper-V virtual machines, high availability in Windows Server 2012, cluster shared volumes, Hyper-V 3.0 features like live migration, replication, and System Center Virtual Machine Manager.

Explore virtualization in Windows Server 2012, enabling high availability for virtual machines via host clustering, guest clustering, and network load balancing with cluster shared volumes.

Configure virtual networks by creating logical networks with associated subnets and ip pools, assign mac addresses, and define virtual ip templates and gateway routing for vm connectivity.

Move running virtual machines and their storage across hosts in Windows Server 2012 without downtime. Explore virtual machine and storage migration, live migration, quick migration, and Hyper-V replica.

Show how network virtualization isolates VMs on a Hyper-V host, assigns customer and provider IPs, enables migration to hosted providers, and enables management via PowerShell for routing and remote access.

Discover that failover clustering is required for live migrations of Hyper-V virtual machines on Windows Server 2012.

Explore high availability options for virtual machines, including guest and host clustering, and implement Hyper-V failover clusters. Learn migration, Hyper-V replication, and System Center 2012 Virtual Machine Manager for virtualization.

Develop a fault-tolerance strategy for Windows Server 2012 by configuring network load balancing, failover clustering, cluster shared volumes, and Hyper-V live migration for highly available virtual machines.

Plan and implement backups and disaster recovery with Windows Server 2012, using the Windows Backup utility, data and server recovery, site recovery, multi-site clusters, and Hyper-V replication.

Configure and manage backups in Windows Server 2012, explore disaster recovery concepts, plan data and applications to back up, and implement the built-in Windows backup feature.

Explore disaster recovery planning for Windows Server 2012, defining critical resources, assessing risks, and implementing backups, slas, rpos, and rtos to restore services when high availability fails.

Identify critical resources such as Active Directory, DNS, and DHCP, and plan Windows backups with full and incremental strategies, including VSS and shadow copy considerations.

Explore how to implement Windows backups with Windows Server Backup in Windows Server 2012, covering full and bare-metal backups, system state, file recoveries, and cloud-based Windows Azure Online Backup.

Identify the volume shadow copy service as the tool for creating previous version snapshots on Windows Server 2012, and recognize VSS admin as the needed command-line utility for configuring it.

Configure and manage backups in Windows Server 2012, outlining disaster recovery planning with SLA, RPO, and RTO, and implement the Windows Backup utility with Windows Azure cloud backup.

Master server recovery in Windows Server 2012 by restoring data with Windows Backup or third-party tools, using shadow copies for shares, and performing timely restore steps after outages.

Describe data recovery options in Windows Server 2012, from end-user restores and alternate-location restores to transaction-log database recovery, plus shadow copies for shared folders and backups.

Implementing server recovery guides restoring individual files or bare-metal systems via Windows Backup and Windows Recovery Environment, aligned with disaster recovery plans to quickly bring the server back online.

Shows how shadow copies, also known as previous versions, let users recover their own data in Windows Server 2012, unlike diskpart, Windows Azure backup integration, or offline caching.

Implement disaster recovery by backing up data and restoring servers quickly per SLAs. Use Windows Backup, shadow copies, and Windows RT recovery environment from installation media.

Explore disaster recovery concepts in Windows Server 2012, addressing single points of failure by implementing multi-site failover clusters and Hyper-V replication to duplicate virtual machines across locations for site resilience.

Configure multi-site failover clusters to achieve site resilience and automatic failover, using quorum models, storage replication (often synchronous), and validated planning across sites including Active Directory DNS DHCP.

Configure Hyper-V replicas in Windows Server 2012 to create a primary and a replica virtual machine across sites for rapid disaster recovery.

Explore site resiliency in Windows Server 2012 by configuring multi-site failover clusters and using Hyper-V Replica to replicate virtual machines for quick disaster recovery and high availability.

Explore implementing business continuity and disaster recovery with Windows Server 2012 backups, planning backup scope and timing, selecting solutions, and server, data, or site-level restoration options.

Discover updates to IP address management in Windows Server 2012 R2, including role-based access control, virtual address spaces, over 50 new PowerShell cmdlets, and integration with SQL Server databases.

Explore RBAC in Windows Server 2012 R2 IPAM, covering roles, access scopes including global and sub-scopes, and policies; include eight built-in roles and custom scopes for assigning permissions.

Explore IP address management in Windows Server 2012 R2, from group policy provisioning to role-based access control with access scopes and policies for DNS, DHCP, and IP address records.

Enable centralized management of physical and virtual IP address spaces with IPAM and System Center VMM 2012 R2 for multi-tenant networks, provider and customer spaces, and DHCP enhancements.

Learn failover clustering updates in Windows Server 2012 R2, including dynamic quorum and dynamic witness, force quorum resiliency, and Global Update Manager modes for high-availability enterprise deployments.

Explore cluster storage concepts and the Windows Server 2012 R2 storage changes, focusing on cluster shared volumes (CSVs), CSV placement, resiliency, and enhancements like ReFS, data de-duplication, and write-back caching.

Explore how Windows Server 2012 R2 replaces legacy quorum with dynamic quorum, configuring witness disks and node votes to maintain failover cluster resilience.

Demonstrates creating and configuring a Windows Server 2012 failover cluster, including quorum options, disk and file share witnesses, and cluster resources, with PowerShell management.

Enable shared vhdx disks for guest clusters, allow virtual machine drain on shutdown to trigger live migrations, and rely on network health detection to keep VMs available.

Explore the new features of Active Directory Federated Services in Windows Server 2012 R2, including simplified installation, enhanced authentication, new claims types, Web Application Proxy, and farm scalability.

Explore how Windows Server 2012 R2 enhances authentication with policies and relying party trusts, enabling policy-driven multifactor authentication across Windows, forms-based, and certificate methods.

Explore Windows Server 2012 R2 updates for the 70-412 exam, including IPAM, RBAC, PowerShell, DHCP management, and dynamic quorum for multisite clusters with Active Directory Federated Services and Azure integration.