Course 4: MCSA Windows Server 2019 Enterprise Network

Learn IPv4 fundamentals in the Windows Server 2019 module, including binary to decimal, eight-bit bytes, subnet masks, private ranges, loopback and multicast basics.

Learn how subnetting splits classful networks by borrowing bits to the network side, creating multiple networks with masks like 255.255.0.0 and understanding the trade‑off between network count and host addresses.

Configure IPv4 on Windows Server using GUI or PowerShell, set static or automatic IP, assign subnet, gateway, DNS, and explore DHCP, DNS suffix, and alternate configuration.

Explore routing between IPv4 networks and troubleshooting with Microsoft Message Analyzer; learn destination, net mask, interface, gateway, and metric, and practice route, ipconfig, and ping.

Configure IPv4 routing on Windows server across three interfaces, view the routing table with route print, and add permanent routes using route add with gateway, interface, and metric.

Learn essential ip networking commands like arp, hostname, ipconfig, and dns flush to view ip addresses, manage dhcp, purge dns cache, and gather network security insights.

Explore how Microsoft Message Analyzer captures and filters network traffic via local traces and scenarios. Analyze packets to understand traffic types, IP addresses, and events for security insight.

Learn how to configure DHCP failover between two Windows Server DHCP servers, enabling replication, automatic IP assignment during server outages, and seamless load balancing without subdividing address pools.

Activate the DHCP relay agent to assign IPs to Perth network when the main DHCP in Victoria is down, and test by renewing an IP from the Perth pool (10.0.0.100–200).

Configure an IPv6 scope in a Windows DHCP server, assign a /64 prefix, manage exclusions and reservations, and set static IPv6 addresses on adapters to obtain IPv6 from DHCP.

Explore ISATAP lab-network integration to connect IPv6 and IPv4 networks, configure DHCP scopes and DNS records, and enable cross-network reachability between left and right interfaces.

Prepare IPv4 and IPv6 networks by disabling IPv6 on Windows servers, configuring static IPv4 addresses, DNS records, and verifying connectivity with ipconfig and ping.

configure isatap for a three-interface network, enabling ipv6 over ipv4 between Victoria and Perth, with the real network interface unused; configure scope and advertisement and verify with ping.

Explore how dns resolves a web request from local host files and dns cache to the local dns server, forwarders, root servers, and isp caching, including stub and conditional forwarding.

Learn to resolve names to IPs using the dns cache and the Windows host file, including flushing the dns cache and editing the host file under Windows System32 drivers.

Promote a second domain controller and integrate DNS with Active Directory, configure forward and reverse lookup zones, and ensure zone replication across multiple DNS servers for resilient name resolution.

Configure primary and secondary dns zones, with or without Active Directory integration, and manage dynamic updates, replication, and zone transfers across the forest.

Add a child domain to a forest by installing DNS on a non-domain controller, promoting it as a domain controller, and configuring zone transfers and replication.

Explore forward lookup zone replication in DNS, showing how to configure primary and secondary zones, perform zone transfers, and handle Active Directory integration for replication between domain controllers.

Explore how to install and configure a reverse lookup zone in DNS, including primary and secondary zones, forest-wide replication, and dynamic updates for IPv4 networks.

Configure DNS conditional forwarding and stub zones to enable cross-forest name resolution, explaining how forwarding to parent domains and DNS replication improves access to resources.

Learn how a stub zone delegates DNS lookups to other domain name systems to handle changing IP addresses automatically, reducing manual updates for large DNS environments.

Use PowerShell to query and manage DNS on Windows Server 2019, importing the DNS Server module and listing available commands. Run diagnostics, view cache and server statistics, and save results.

Learn to monitor and analyze DNS on Windows Server 2019 using BPA, review DNS events and log files, and assess domain controller health.

Explore common dns record types, including a record and aaaa record for ip addresses, mail exchange, canonical name, pointer, and name server records, plus delegation and zone management.

Install and configure the IPAM server feature to centralize IP address management, DHCP, DNS, and the network policy server, with group policy provisioning.

Add an admin to the ip administrators group and explore dns, dhcp, and ip address management on a Windows server 2019 enterprise network, including ip address blocks and ranges.

In this lab, prepare the web application proxy infrastructure by disabling routing, configuring domain and workgroup settings, exporting and trusting the root certificate, and adjusting network adapters.

Install the web application proxy role and obtain an active directory federation services web application proxy certificate. Create DNS records for the farm, website, and remote desktop gateway.

Install and configure Active Directory Federation Services with a Web Application Proxy to provide secure access to internal websites, including certificate templates, certification authority, and DNS/DFS integration.

configure the web application proxy to publish a web application for external clients, enabling AD FS authentication with certificate-based security on the domain-joined server.

Learn to configure a Windows server lab by using DNS basics, static IPs (10.0.0.1/10.0.0.105), and remote access via a terminal server to verify a website.

Install and configure direct access on Windows Server 2019, a version 2 VPN that provides 24-hour access and selective resource permissions.

Explore configuring a Microsoft vpn server in a lab using Windows Server 2019, connecting a domain controller and vpn clients through a dmz with remote desktop protocol.

Configure a vpn in Windows Server 2019 using routing and remote access, select vpn over direct access, assign internal ip addresses, and finalize policy and port settings.

Learn to configure vpn access with network policy server, granting or denying remote access based on user groups in the Edmonds domain, with authentication and timeouts.

Learn to establish and test a Windows VPN between sites, configuring static IPs, adapters, and credentials, troubleshoot authentication protocols, and enable secure remote access to the Victoria server from Perth.

Learn to create a CMAK VPN package, configure a profile, convert it to MSA for group policy deployment, and test the VPN connection.

Configure a Radius server as a network policy server to secure VPN authentication by forwarding credentials to the domain controller and caching credentials on the Radius server for stronger security.

Improve VPN security by issuing a web server certificate from a certification authority, exporting the root certificate, and binding the certificate to IIS for VPN trust.

Configure ssl vpn on Windows server 2019 by binding a certificate trusted by the certification authority, adjusting ports, and updating network policy server to secure remote access.

Prepare the lab infrastructure by setting up the domain controller, two DFS file servers (Victoria server 1 and 2), and the client, adding virtual disks, and verifying connectivity.

Explore how folder and desktop redirection via group policy automate user data access to the file server and troubleshoot policy application and time synchronization.

Troubleshoot time synchronization in a Windows domain by configuring the PDC (Victoria DC1) as the time source, removing non-internet adapters, forcing time sync, and validating folder redirection and permissions.

Enable quota management on the desktop share, cap each user at 500 MB with a 400 MB warning, and monitor peak-hour traffic to prevent network bottlenecks.

Explore the distributed file system (dfs) and how replication between file servers guarantees availability and redundancy. Learn to configure dfs for cross-site access when a server fails.

Configure a DFS namespace and replication between Victoria server 1 and server 2 using DFS management tools, creating domain-based namespace, adding folders, and defining full-mesh replication with a primary master.

Learn how group policy desktop redirection via DFS serves user desktops from two servers, ensuring access when one server is down and applying forced GP updates.

Learn how file server resource manager implements per-folder quotas, quota templates, and file screening to control disk usage and block audio and video files.