Exam 70-410: Installing and Configuring Windows Server 2012

Explore on premise versus cloud options for hosting email, sharepoint, data stores, and sql server, emphasizing high availability and access from anywhere for remote workers.

Explore cloud computing models—IaaS with virtual machines and Hyper-V, SaaS with hosted apps like Office 365, and PaaS for database hosting—emphasizing management, redundancy, and preserving desktop experience.

Provide on-premise servers to supply essential network infrastructure—IP addresses, DNS, default gateways, and Active Directory—while pushing Windows and antivirus updates via WSUS and enabling single sign-on with Office 365.

Explains Windows Server 2012 editions, including Essentials as a Small Business Server replacement with licensing limits, and Hyper-V edition with no UI, per-VM licensing, and domain joining.

Explores multi-point premium in Windows Server 2012 Editions, enabling multiple users to share a single host with input and output. Increase RAM and sessions, and boost the network infrastructure.

Explore how Windows Server 2012 organizes service roles, including Active Directory, certificate services, federation, rights management, application server, and infrastructure roles like DNS and file and storage services.

Explore Windows Server 2012 server roles, including Hyper-V virtualization, Network Policy Server health checks, Remote Desktop Services, Volume Activation Services, Deployment Services via WDS, and WSUS updates.

Examine Windows Server 2012 features, including web server hosting, outbound email, telnet client/server, biometrics such as fingerprint logon, PowerShell, process activation server, search services, server backup, and migration tools.

explain server core, a minimal command-prompt installation that reduces attack surface and simplifies management, supports core roles like Active Directory but lacks graphical components, and is ideal for virtualization.

Explore modular installation options, with server core and an optional full server layered on top to enable GUI management when needed, unlike older versions that required upgrading.

Compare DVD and ISO installation media, noting USB drive speed advantages, and learn to use ISO images for downloadable, updatable, mountable installations and virtualization with Hyper-V.

Plan your Windows Server installation by choosing a fresh install, upgrade, or migration path. Learn to use migration tools to transfer shares, permissions and roles while preserving settings.

Upgrade Windows Server 2003 and newer from equivalent editions or newer, launch setup from the original operating system, and move up within the same edition family.

Explore migrating servers from 2003 to a new 64-bit 2008 server using the server migration tool, with prerequisites like disk space, PowerShell, .NET framework, and role-by-role planning (including Exchange).

Plan thoroughly before installing windows server 2012, configure the install source, language, licensing, and upgrade or custom options, then set the local administrator password and consider domain join.

Log in to complete post installation tasks by configuring server manager, naming the server, joining the domain, setting the time zone, configuring IP address, network, firewall, updates, and activating Windows.

Explore the server manager dashboard, configure local server settings, and join a domain while managing firewall, updates, naming conventions, and time synchronization for a scalable file server.

Activate every copy by entering the product key during or after installation, using server manager or server license manager to activate, with no grace periods and up to 999 re-arms.

Discover offline domain join by provisioning with disjoined X-C /provision, saving a domain file, transferring it to the new server, then running djoin /requestODJ and DS join, reboot.

Run the best practice analyzer and configure services, DNS, remote management, and remote desktop behavior to complete round two tasks after Windows Server 2012 installation.

PowerShell is the essential management tool for Windows Server 2012, enabling server administration through script driven commands beyond the graphical interface, crucial in both Windows and core editions.

Enable features on demand to save disk space by removing unused roles and features. Retrieve the needed files from remote locations, installation media, or Windows Update when configuring these components.

Identify the features on demand search order: start with the user-specified location from the add rules wizard or decem engine image commands, then Windows Update or group policy evaluation.

Override features on demand by using the Source parameter in the Windows feature command to point to a file path, via installation options or group policy.

Learn to conserve space by removing Windows feature files, using uninstall-windowsfeature with or without the remove parameter, and trimming offline images on a virtual hard drive.

Consult migration guides to plan migrating roles from older Windows Server versions. Install server migration tools on source and destination, create deployment folders, and register the tools on the source.

Offer an introductory overview of Windows Server 2012, covering basic install options (full server or server core) and how to add roles and features for future modules.

Use Server Manager as a landing spot to view my server or groups of servers, identify errors, and access add/remove roles, features, PowerShell, event viewers, and Best Practices Analyzer.

Learn how to add roles and features with Server Manager, configure Hyper-V and remote server administration tools, and manage virtual networks and virtual machines on Windows Server 2012.

Explore Event Viewer to filter and analyze server events across local and group servers, using saved queries, severity levels, event IDs, and time service insights for troubleshooting.

Discover administrative tools for Windows Server 2012, including Active Directory tools, DNS, Event Viewer, and Group Policy management. Schedule tasks with Task Scheduler and monitor performance with Resource Monitors.

Enable remote management on Windows Server 2012 through the server manager interface or elevated PowerShell, configure remoting commands, and ensure firewall ports are open.

Demonstrates delegating domain administration in active directory, granting granular permissions to a helpdesk group for password resets and user management at the organizational unit level.

Explore configuring NIC teaming to provide bandwidth aggregation and failover for load balancing and fault tolerance. Learn switch independent and switch dependent modes, including active standby and required switch participation.

Explore switch dependent teaming modes in Windows Server 2012, comparing generic static teaming with dynamic teaming using the link aggregation control protocol and port-based LCP enablement.

802.11ac delivers higher speeds and reliability across 2.4 and 5 GHz bands, with wider channels and MU-MIMO, while Windows Server 2012 provides built-in support.

Explore updated netsh commands in Windows Server 2012 R2 to view wireless driver support and 11 AC details, including network mode and profile information.

Windows Server 2012 extends wired and wireless password use with EAP and MS-CHAPv2. Enable the EAP host registry setting on Windows Server 2012 and Windows 8.1.

Explore essential tools and utilities for windows server management, and learn how to enable remote management and locate help as you navigate the module.

Demonstrates installing Windows Server core on a virtual machine, from booting an iso to configuring the administrator password, in a lab environment.

PowerShell drives Windows Server installation and remote management, and teaches verb-noun syntax, optional arguments, no spaces in nouns, and integration with applications like Exchange and Active Directory.

Log on to server core, explore the command prompt and PowerShell, and practice single-word commands. Use get-help and install-windows-feature to configure DNS and review static IP prerequisites.

Learn how to reduce attack surface by running a minimal Windows Server Core and optionally add a graphical user interface to simplify management with PowerShell, Server Manager, and Install-WindowsFeature.

Explore server core tools, including command line utilities such as ipconfig and cmd, PowerShell, SConfig, Notepad, msinfo32, Task Manager, and remote administration with graphical tools.

Press control-alt-delete to open the task manager, choose file > run new task, and select command or powershell to restore the command prompt; close the task manager to return.

Explore the roles available on server core, including Active Directory domain services, DHCP, DNS, file services, Hyper-V, and WSUS, and discover how a smaller footprint reduces the attack surface.

List server core roles by piping Get-WindowsFeature to where-Object and filtering install state to filter out removed features, using the vertical bar as a pipe.

Open firewall ports for remote administration using net shell and enable the remote admin service on the Windows server, ensuring remote management works through the local firewall.

Server core lacks several features, including Windows deployment services, network policy and access services, federation server for Active Directory, and the application server role, which can prevent hosting Exchange.

Learn how to install a domain controller on server core using DC promo and an unattended answer file, including DNS, global catalog, and safe mode password considerations.

Create and manage Active Directory users, computer accounts, and groups with PowerShell, setting properties like username and description, passwords and expiration; unlock, enable, or disable accounts for secure access.

Learn to manage permissions through groups in Windows Server 2012 using PowerShell, adding and removing members, listing groups, and assigning a primary (principal) group to streamline access control.

Explore PowerShell commands for computer management, including testing the secure channel, resetting the computer machine password, and repairing domain trust between computers and Active Directory domain controllers.

Explore how organizational units in Active Directory compartmentalize users, groups, and computer accounts to enforce policies and tailor access within a domain.

Master server core concepts, including installation, remote management, and role limitations; use command prompt, sconfig, and PowerShell to manage, and learn how to add or remove the gui.

Explore enhanced integrated drive electronics (EIDE), or c-drive, from 1986, with a two-connector cable, 128 gig limit, and file system constraints that shaped early storage at 133 megabytes per second.

Serial Advanced Technology Attachment (SATA) uses a high speed serial cable to connect drives. It replaces IDE with low-level commands and offers lower cost storage not for heavy workload servers.

Explore the small computer system interface (scsi), tracing its 1978 origins, parallel cable design, and growth from 5 megs per second to 640 megs per second with higher costs.

Explore direct attached storage (DAS), storage built into and attached to the server, noting easier maintenance but data inaccessible if the server fails and challenges centralizing and backing up.

Describe a dedicated high-speed storage area network that links servers to a centralized storage system via fiber channel or iSCSI, enabling fast access and expansion with redundancy.

Compare common raid levels, including raid 0's no redundancy, raid 1's mirroring, and raid 5's distributed parity, highlighting read/write performance, space overhead, and single-disk failure tolerance.

Explore configuring storage spaces in Windows Server 2012 by creating a storage pool, virtual disk, and volume, with RAID 0/1/5 options and thin or fixed provisioning.

Highlight the limitations of work folders: no collaboration functionality, no selective sync, only full synchronization to each user's own folder on the server, with no syncing to other shares.

Identify work folders components for Windows Server 2012, including an NTFS volume and a trusted public certificate, plus DNS access and client support on Windows 8.1 or Windows RT 8.1.

Install the work folder server component as a role service within file and storage services. Create multiple sync shares, each mapping a file system location to a user or group.

Configure the work folder server role via server manager or PowerShell, then create a sync share with server name, certificate, UNC path, encryption, and a user-based folder name.

Use PowerShell to configure a Windows Server 2012 work folder by adding features, creating a sync share, and setting the path and access, plus conflict resolution.

Configure work folders on Windows 8.1 via control panel or group policy, using domain or local policy, with location and management via System Center 2012 Configuration Manager or Windows Intune.

Install and configure work folders on Windows Server 2012, enable the File Server role, create a sync share, and test with a Windows 8.1 client.

Leverage SMB 3.0 support to boost performance for Hyper-V and clustered volumes by optimizing small random reads and writes in SMB file shares.

Discover the new storage management interface that uses WMI to filter data, script tasks with PowerShell, and manage file and storage services via the dashboard across a data center.

Resilient file system builds on NTFS to provide metadata integrity with checksums, large volumes and directories, and built-in resiliency against corruption, plus storage pooling with data striping for performance.

Explore PowerShell cmdlets for managing virtual disks, disks, and disk images with connect, disconnect, mount, and dismount actions behind a familiar dashboard.

Understand basic disks, including primary and extended partitions with logical drives, and how the master boot record and the active partition enable booting.

Configure dynamic disks to create volumes across multiple disks, including simple, spanned, striped, mirrored, and raid 5, with fault tolerance and the ability to break or repair mirrors.

Analyze basic and dynamic disks by inspecting disk, partition, and volume properties, capacity, and free space; understand the partition vs volume terminology and how to convert between disk types.

Configure gpt disks on basic disks with partitions up to 128 and crc protection; dynamic disks use an ldm partition to support partitions larger than two terabytes and oem diagnostics.

Explore the meanings of simple volumes and pools, including span, striped, mirrored, and raid 5 configurations, and understand fault tolerance and recovery.

Extend or shrink NTFS volumes by ensuring adjacent free space for extension, or span across drives when needed; shrink requires relocating movable files like the page file, and defrag first.

Explore how to manage volumes using the disk management utility, diskpart, and PowerShell to resize partitions.

BranchCache boosts performance by caching data locally at branch offices, using hosted or distributed cache modes, and operating per subnet with http/https and smb protocols.

Install the branch cache feature or enable branch cache for network files on a content-hosting server; configure clients via group policy or net S.H. commands.

Install the branch cache feature on the server, enable it via group policy, and configure file shares for clients to pull from the cache.

Explore Windows Server 2012 local storage options from basic disks to dynamic disks, configured volumes, arrays, and raid five volumes, with dashboards, clustering, and a new file system for resiliency.

Configure file shares using the server manager wizard, choosing quick or advanced shares, and set NTFS and share permissions, access based enumeration, and auditing for effective access.

Explore offline files to keep working when server connections drop, with automatic synchronization of locally edited documents to the server and seamless access to the home directory and my documents.

Learn the offline files options for a shared folder—selective availability, no offline availability, and automatic availability—and how caching via the advanced sharing button runs executables from the local cache.

Explore how NTFS permissions control access through explicit and inherited ACLs, with allows and denies, the priority of explicit denies, and the everyone group caveat.

Explore NTFS permission examples, showing how inheritance, explicit denies, and permission resets affect folders like stuff, widgets, and things when moved across drives or servers.

Enable access based enumeration (abe) on a file share to restrict visibility to authorized users; unauthorized users will not see the share or will encounter access denied.

Explore how shadow copies on Windows Server 2012 volumes enable versioning and quick restores of files and folders. Learn to enable, view previous versions, and restore from snapshots.

Explore configuring print and document services within the same access realm as files and folders, and apply similar permissions to printing data.

Explore network printing security options by assigning print, manage printer, and manage documents permissions; understand who can print, pause, reprint, or manage printers and queues.

Demo demonstrates creating and sharing a printer, selecting drivers and ports, adjusting sharing and security, and configuring two separate printer profiles for marketing and after hours.

Printer pooling combines multiple physical printers into a single pool and routes print jobs to the first available device, ensuring shared, high-volume printing with the same driver for all printers.

Learn to configure printer pooling on windows server 2012 by using multiple printers with the same driver so any printer can receive a print job, via physical or ip ports.

Enable branch office direct printing by centralizing printer configuration at headquarters, caching printer information at the branch, and printing directly to the branch printer, reducing traffic on the wide-area link.

Deploy network based printers by creating a group policy in print management, distributing to XP or higher clients, using preferences, shared printers, or sneaker network deployment.

Use the Windows Server 2012 R2 printer migration wizard or the print BRM Dudie X-C command line to migrate printers and back up WSD devices.

Explore file and print access, configure shares, and examine NTFS permissions—the heart of security—where permissions are cumulative and a deny at the top of the list blocks access.

Learn how remote management lets you manage a server as if it were local, configure Windows remote management, and address firewall settings for day-to-day, multi-server, and server core tasks.

Learn to enable and verify remote management on Windows Server 2012 using Server Manager and Server Core, adjusting firewall rules with netsh or sconfig to allow remote access.

Use remote desktop to maintain remote servers, often locking local users out and prompting control-alt-delete to log back in; enable it via a checkbox in server manager.

Enable remote desktop on Windows Server 2012 using server manager or server core, configure firewall and access permissions, and connect with the remote desktop client to manage servers.

Explore server 2012 r2 improvements like session shadowing for monitoring and remote control of active remote desktop sessions, plus tighter integration with server manager and remote desktop connection.

Examine remote desktop services components, including the session host, remote apps, connection broker, and gateway, to manage pooled or personal virtual desktops and web access.

Manage multiple servers with server manager by creating server groups for core, exchange, and application servers, and extend administration to 2008 servers using updates and RSAT.

Create a server group to organize multiple servers, such as DNS servers or domain controllers, then use Active Directory to assemble the Mayfield site servers in a single console.

Explore virtualization concepts with Hyper-V for virtual servers, desktops, and applications. Compare console sessions, remote desktop, and presentation virtualization, and understand how multiple user sessions run on a server.

Explore presentation virtualization that delivers full desktops and remote apps through remote desktop services, web access, and gateway configurations to connect clients to server-hosted resources.

Enable external access to remote desktop sessions and remote apps via the remote desktop gateway without a VPN, installed as a role with its services to streamline client access.

Install Hyper-V on a 64-bit platform with slat and dep, and ensure a minimum 4 gb of ram for Windows Server 2012 virtualization.

Application virtualization, known as App-V, is part of the Microsoft Desktop Optimization Pack; install and configure it to isolate applications from the operating system and stream them.

Learn Microsoft enterprise desktop virtualization (MED-V). Manage users accessing legacy OS and deploy virtual machines on client workstations via Hyper-V, in the desktop optimization pack.

Explore how virtualization simulates complete hardware for virtual machines, including BIOS, memory, processors, scuzzy controllers, network adapters, legacy adapters, fiber channel, and remote eFax video adapters.

Plan Hyper-V deployments by configuring Hyper-V settings, virtual switches, and the virtual storage area network, set defaults for virtual hard disks and virtual machines, and consider live migrations or replication.

Configure virtual machines with start and stop actions to handle power interruptions, using the set-vm command and parameters for automatic start action or automatic stop action.

Track resource usage across many virtual machines by monitoring CPU and memory, min and max values, disk space, and network traffic; enable VM resource metering on Hyper-V with PowerShell.

Describe virtual hard disks as files that represent entire drives, compare types, and learn to configure partitions and install an OS, using the PowerShell command Lutfur for new dash HD.

Explore virtual disk types, including dynamically expanding VHDX and fixed size VHDs, and learn through the edit disk wizard how expansion, compression, and compacting affect space and fragmentation.

Configure pass through disks to grant exclusive access to a physical drive via the add drive option, then consider differencing disks for space efficiency with potential performance trade-offs.

Shrink or expand virtual hard disks, using the edit virtual hard disk wizard in the Hyper-V console; it's not as easy as a property sheet for dynamic or fixed VHDs.

Compare VHD and VHDX formats, noting VHD's legacy 2 TB limit. Convert to VHDX for better performance, up to 64 TB, with logging and a data file fallback.

Learn how to create and convert virtual hard disks in Hyper-V, comparing dynamic and fixed VHD and VHDX formats, and using differencing disks, compaction, and mounting tools.

Learn how differencing disks and snapshots use a base virtual hard disk template with dynamic disks, where writes occur on the last disk, enabling rollbacks along the chain.

Explore extensions for virtual networks, including NDIS capture and Endace drivers, to monitor and bench test packet flow across a virtual switch using network monitor and the Microsoft filtering platform.

Configure Hyper-V virtual adapters with internal, external, or private switches, assign VLAN IDs, and manage bandwidth to optimize performance and isolation.

Learn how to add and configure network adapters in hyper-v for windows server 2012, including choosing virtual or legacy adapters, selecting switches, enabling bandwidth management, and assigning IPs.

Configure hyper-v vm networks by adjusting authorization policy with the authorization manager for local administrators group to delegate tasks, and use the legacy network adapter without a virtual machine driver.

Provide the driver for most operating systems and emulate the network adapter. Note pixie boots are supported, while legacy adapters do not support 64-bit Server 2003 or XP virtual machines.

Master remote management in Hyper-V virtualization by configuring virtual machines, virtual hardware, and networks, then enable remote management, group servers, and administer them from a single workstation console.

Explore the TCP/IP protocol suite, including HTTP, FTP, SMTP, DNS, UDP, ARP, ICMP, IGMP, and IPv4/IPv6 addressing, plus TCP as the reliable transport.

Explore the port landscape from well-known ports (0–1023) to registered ports (1024–65535), with examples like 80, 443, 110, 53, 389, and 587, and note that applications can override port assignments.

Explain how IPv4 uses 32-bit addresses in dotted decimal, grouped into four octets (0–255) and how a subnet mask separates the network ID from the host ID.

Learn IP configuration basics, including IP address, subnet mask, and default gateway, and distinguish network ID from host ID within a default subnet mask.

Relate an IP address to binary by exploring 8-bit octets, powers of two, and how to convert binary to decimal, using examples like 192 and 255.

Analyze IP address classes from the first octet to determine class a, b, or c, and explain how default subnet masks define network IDs and host counts.

Explore cidr notation and variable length subnet masks to optimize routing, balancing networks and host IDs, using a slashed 24 (24 bits) for six floors with 500 people.

Explains how CIDR and VLSM let you split a /16 network into smaller subnets, calculating usable hosts with 2^n - 2 and avoiding oversized networks.

Explore configuring an IPv4 address in PowerShell for Windows Server 2012 using New-NetIPAddress, specifying interface alias, address, and prefix length, and handling gateway and help options.

Discover how Windows Server 2012 uses PowerShell to troubleshoot tcp/ip with a unified get/set interface, exposing ip address details, ipv4/ipv6 info, neighbor cache, routing, and udp settings.

Learn practical tcp/ip diagnostics to troubleshoot connectivity with ipconfig, dns cache, ping, trace route, and pathing; verify routing, use telnet, and monitor with event viewer.

Learn how supernetting reverses subnetting by combining contiguous networks into a larger address space, expanding host capacity as network ids allocate bits to the host id.

Learn how borrowed bits enable super netting, creating up to 16 networks by combining subnets; explore class C examples, subnet masks, and identifying network and host IDs.

Explore IPv6, its 128-bit hexadecimal addresses, and how stateless and stateful configurations optimize routing and subnet design without a DHCP server.

Explore IPv6 benefits: a 128-bit address space with 340 undecillion addresses, automatic link-local configuration, stateless and stateful modes, built-in IPsec security, and more efficient, geographically organized routing.

Learn how IPv6 uses zero compression with colon notation, such as loopback and fe80:: private addresses, replaces broadcast with slash 8 global unicast addresses, and redefines host addresses.

Replace broadcasts with a link-local unicast address that communicates only on the local subnet. The system automatically generates it and uses the fe80:: prefix with a 64-bit interface id.

Explain how host private addresses function as unique local addresses with a 40-bit organization identifier to prevent conflicts, using a seven-bit prefix and a local flag to indicate local status.

Learn how to add zone IDs to local addresses using the percent sign, so the sending host can determine the zone ID for each interface it communicates with.

Explore the base 16 hexadecimal numbering system, converting each 16-bit block of a 128-bit IP address into hex characters, by summing the binary positions 8, 4, 2, and 1.

Learn how to convert 128 binary bits into eight 16-bit blocks and translate each block into four hex characters, using right-to-left grouping and powers of two to read hex values.

Explore the global unicast address structure in IPv6, including the 48-bit global routing prefix, 16-bit subnet IDs, 64-bit interface IDs, and prefixes like 2000::/3, with MAC-based IDs and DHCP assignment.

Explore the global unicast address structure, detailing the 3-bit prefix, 45-bit global routing prefix, 16-bit subnet, and 64-bit interface ID used by hosts.

Learn to interpret IPv6 prefixes by converting binary to hex, identifying global unicast, link local, unique local, and multicast addresses, and using Get-NetPrefixPolicy to troubleshoot.

Configure and analyze IPv6 on Windows Server 2012 by setting up a network adapter with automatic and manual IPv6 options, exploring self-assigned and link-local addresses, and disabling IPv6 when needed.

Explore IPv6 address structure, including a 64-bit interface identifier and varying prefix sizes. Learn about unspecified addresses, loopback, automatic configuration, and multicast addressing.

Explore the autoconfiguration process, where a client obtains a link-local address, checks for conflicts, receives locally assigned prefixes, and uses managed flags to invoke DHCPv6 for DNS information.

Explore IPv6 over IPv4 tunneling, encapsulating IPv6 packets inside IPv4 using protocol 41, enabling mixed networks during transition, though it offers no exchange or security.

Configure ISATAP to enable unicast IPv6 to IPv4 connectivity with auto-configured addresses and a router advertising prefixes. Modify DNS global query block list and restart DNS.

Configure the host using PowerShell, netsh, or group policy to set router settings and the IP address on the network interface.

Six to four enables unicast IPv6 connectivity between IPv6 sites and IPv4 hosts on the internet. Enable internet connection sharing on an IPv6 network to use it as a router.

Teredo tunnels between networks using a client and a server tunneling interface, with a Teredo relay for forwarding and a host-specific relay connecting hosts without mixing through an intermediate relay.

Enable portproxy as an application layer gateway to bridge IPv6 and IPv4 communications, letting IPv6 clients access IPv4 applications and IPv4 nodes reach IPv6 networks.

Discover the evolution of tcp/ip from ipv4 as the network base to the ipv6 protocol suite, and learn what goes on behind the scenes to aid your migration.

Explore how DNS maps names to IP addresses and supports dynamic updates as networks grow, replacing host files for reliable logon services and domain controllers.

Map host names to ip addresses using dns resolution and reverse zones. Use A records, MX records, service records, and alias records to locate servers and mail exchangers.

Discover how WINS handles net BIOS name resolution in Microsoft networks, including legacy broadcasts and the global names DNS zone for improved resolution.

Explore how single label names differ from fully qualified names and how Windows DNS uses a domain suffix and a global zone called wins to aid name resolution.

Explore essential DNS tools and commands for configuring and troubleshooting, including nslookup, ipconfig, dnslint, netsh, and network monitor, to diagnose replication issues and DNS cache problems.

Learn DNS tools and DNS server management, create primary and secondary zones with forward and reverse lookups, and test with nslookup, DNS command, and monitoring.

Learn essential DNS concepts for Windows Server 2012, including local DNS, resolver cache, root hints, recursion and iterative queries, authoritative versus non-authoritative responses, and forwarders.

Explore primary and secondary DNS zones, including read-write and read-only copies. Learn about stub zones, Active Directory integrated DNS on domain controllers, and replication of DNS and Kerberos traffic.

Explore DNS registration enhancements in Windows Server 2012 R2, based on CPE policies, with conditions using the fully qualified domain name of DHCP clients and guest DNS suffix for workgroups.

Install and configure the DNS server role on Windows Server 2012, explore DNS registration enhancements, zone types and transfers, and understand dynamic updates and DHCP-DNS integration.

Configure dynamic updates in dns to let clients register their names and ip addresses, enforcing secure updates to confirm domain membership in the primary zone.

Explore how a DNS server caches resolved names for 24 hours and forwards specific requests to a designated server, bypassing root servers to obtain direct answers.

Learn how the DNS cache stores host records on the server and how to view or clear it with ipconfig /displaydns and ipconfig /flushdns to fix name resolution issues.

Learn DNS requirements for IPv4 and IPv6 coexistence by configuring A and AAAA host records and PTR records, with dynamic DNS registration when clients use the proper DNS server.

Trace the basic name resolution path from local cache to DNS, WINS, and hosts files, and troubleshoot by pinging by name and IP to locate failure points across the network.

Learn how DNS enables name resolution to locate services on the network, and how the IP infrastructure is configured, including setting up DNS servers.

Explore how the dynamic host configuration protocol (DHCP) service in Windows Server 2012 automatically allocates IPv4 and IPv6 addresses and configurations, including static pools, reservations, and stateful versus stateless options.

Install and configure DHCP on Server Core using the command line, ideal for small servers with low overhead. Enable remote administration to manage DHCP remotely with Windows tools.

Install the DHCP server role via server manager and authorize it in Active Directory to allow services to run, ensuring no rogue DHCP servers issue configurations.

Install dhcp on the local server using the dashboard and roles and features wizard, configure a scope to assign IPs to clients, and watch progress via notifications.

Create and configure an IPv4 scope with a descriptive name, address range, and subnet mask, plus exclusions for statically assigned servers and common options like router, DNS, and DNS suffix.

Explore how IPv6 allocates address ranges, configures a local subnet, and uses a prefix like a subnet mask; set exclusions, preferred lifetime, and other IPv6 DHCP options.

Create a DHCP reservation using the host's MAC address to ensure the client always receives the same IP address on boot. Describe the client and assign the fixed IP.

Identify and explain common DHCP options, including router, DNS servers, and search suffix, plus subnet mask, DNS domain name, NetBIOS node type, and WINS, enabling dynamic IP configuration across networks.

Back up the DHCP server, shut down the service, disable auto-start, copy the database files to the new server, and restore them to complete the move.

secure dhcp by restricting physical access, enabling audit logs, and enforcing authorization and authenticated layer 2 connections; use nap to control who can join and manage dhcp servers.

Explore improved partial PowerShell commands for DHCP and DNS settings, view server version for failover and policies, and learn about new capabilities in Server 2012 R2.

Explore new PowerShell commands for DHCP, including viewing server version, IP records, DNS credentials, multicast scopes, and DHCP options and switches.

Configure client and server for PXE boot with Windows Deployment Services, deploy OS images from a WIM file, and have barebones clients pull a full OS from Windows Deployment Services.

Enable DHCP audit logging to gain records of server activity for troubleshooting and security. Access daily logs showing ID, name, date, description, IP, hostname, and MAC address from server properties.

Explore common event IDs in Windows Server 2012 installation and configuration logs, including event 0 0, 56, and 55, to diagnose startup, authorization failures, and IP address allocation via DHCP.

Explore domain structures, including root domain, domain trees, and forests, and identify the schema master and enterprise admin roles. Understand two-way transitive trust and cross-domain access within a shared namespace.

Explore how a forest comprises domain trees, how the domain naming master and schema master govern naming and schema, and how enterprise and schema admins wield forest-wide privileges.

Explore how the Active Directory schema defines object classes like user, group, and computer, with attributes such as sid and sam account name, and distinguishes mandatory from optional fields.

Understand the logical domain structure as the security and replication boundary within a forest, including domain partitions, application partitions, and organizational units for group policies and permissions.

Explore how sites define replication boundaries and the unit of replication for domain controllers, enabling intra-site updates and scheduled cross-site replication across multi-office networks.

Define a site as a physical component with subnets and machines; it serves as a unit of replication, enabling fast intra-site and scheduled, compressed inter-site replication.

Explain domain wide scope as the administrative boundary within a domain, covering account policy, password policy, public key policy, account lockout policy, and Kerberos ticket policy for logon.

Learn how domain controllers hold domain security information and domain structure, manage domain objects, and replicate changes across domain controllers using partitions and forest-wide data.

Domain controllers host a copy of the directory database and system volume, replicating via SYSVOL. They propagate group policy and logon scripts using Kerberos and the key distribution center.

Identify deprecated features in Server 2012 related to AD DS, including 80 prep 32, DC promo, and Elham hash, and explain their reduced usage and security implications.

Configure global catalog servers using Active Directory sites and services and administrative tools. Understand replicating global catalogs between domain controllers in a forest root and across sites.

Apply best practices for fsmo and global catalog: ensure all domain controllers host gc in a single domain, and separate infrastructure master from gc in multi-domain environments.

Explore how domain and forest functional levels govern Windows Server 2012 deployment, upgrade the schema with adprep and forest prep, and align domain controllers across a forest.

Explore forest and domain functional levels, raise them when possible, and transfer operations master roles while delegating control in Active Directory across domain controllers and trusts.

Identify who can raise domain and forest functional levels with the domains and trusts tool on the PDC emulator, and ensure domain controllers run the server version.

Explore functional level options for domain and forest, including rollback options to 2012 and down to 2008, and emphasize planning and backups to avoid fear of rollback.

Enable the Active Directory recycling bin on Windows Server 2012 to limit rollback options to 2012 or 2008; not enabled, choices exist, while Windows Server 2008 has no rollback options.

Explore two Windows Server 2012 functional levels, including protected user protections, Kerberos pre-auth, constrained and unconstrained delegation limits, and forest-based authentication policy silos for authentication isolation.

Explore how forest functional levels set 2012 as the minimum for new domains, the one-way upgrade path, and how the Active Directory recycle bin may allow lowering in some cases.

Deploy read-only domain controllers in insecure or admin-scarce sites to authenticate logins while preventing AD changes. Define maintenance roles and password caching to balance security and access.

Discover how domain controllers are located using DNS SRV records and how logon authentication builds an access token with user and group SIDs, enabling access to local and network resources.

Active Directory logon uses a ticket granting ticket to access local and network resources; each access validates the ticket with the domain controller to enforce authentication across resources.

Plan domain controller installation, noting DC promo is no longer supported for standard installations; use server manager to add domain services role and promote the server to a domain controller.

Demonstrates installing Active Directory domain services on Windows Server 2012, including renaming the computer, setting a static IP, configuring DNS, and adding AD DS via server manager.

Upgrading domain controllers is straightforward on Windows Server 2008, running setup from the installation disk, choosing language, clicking install now, accepting the license, and selecting the upgrade type.

Perform a clean installation of Windows Server 2012 domain controllers, join to a domain, add the directory services role, create a new domain, and promote to domain controller.

Install a domain controller from media (IFM) to preload active directory from a backup at a remote site, reducing initial replication.

Demote the domain controller to remove Active Directory services and the AD DS role. Add file server 1 to the all servers group to manage from a single console.

Explore Active Directory management tools for domain controllers, including Active Directory Users and Computers, Sites and Services, domains and trusts, and the schema, with RSAT for remote administration.

Define a naming convention to ensure unique accounts in active directory, preventing logon name duplicates and maintaining unique full names and down level names within each organizational unit and domain.

Identify user attributes, including login name, password, and contact details. Explore how profile types, logon scripts, and remote desktop settings shape each user's environment under policy and Active Directory.

Create account templates with common attributes like department, organization, telephone, profile, and group memberships to streamline new user provisioning. Copy the template to create a new user in Active Directory.

Explain automatic account lockout from password policy after failed logins, how administrators unlock by clearing the lockout, and how to disable and re-enable accounts when needed.

Explore directory services with the directory services command line tools, using an elevated command prompt to add, get, modify, move, query, and remove objects in Active Directory.

Group users, computers, and other groups to manage permissions across file servers; nest groups for scalable access, using security groups for permissions and distribution groups for email.

Explore how group scopes manage permissions across a forest, detailing universal, global, domain local, and local groups, their scope considerations, replication impacts, and where to apply them.

Identify the default groups in Windows Server 2012, including enterprise admins, schema admins, and built in domain groups, and explain how protective groups safeguard high level accounts like domain admins.

Understand the protected users security group in Server 2012, a domain global group that limits credentials during network sign-ins from non compromised computers, protecting domain controllers.

Explain the restricted capabilities of the protected users group: Kerberos-only sign-in, no password caching, no weaker encryption, no credential delegation, and a configurable four-hour TGT lifetime; reauthentication required after expiry.

Learn how special identities determine user rights and permissions, including anonymous login, the everyone group, authenticated users, and guest accounts, and distinguish interactive versus network access in Windows Server 2012.

Troubleshoot computer accounts by diagnosing domain trust and password change issues when a computer misses changes, and reset the account in Active Directory or with command line tools.

Explore why removing a computer from the domain is poor practice and how resetting the trust relationship with Active Directory, dsmod, netdom, or PowerShell fixes secure channel and group policy.

Learn to list group membership using saved queries in Active Directory Users and Computers, export results to text, and use DSQuery with piping to retrieve group members.

Query a group, list its members, and fetch specific user details such as names and emails with PowerShell. Pipe commands, export results to a temp folder, and search group members.

Export and import Active Directory objects using csvde by supplying a csv file with a header row; specify the base distinguished name, search scope, filter, and attributes to export.

Use ldifde to import data by running ldifde -i -f <filename>, with the file containing the data to import, and include the -k option to continue on errors.

Master managing Active Directory with PowerShell to perform bulk operations, create and modify user accounts quickly using piping and set commands.

Explore Active Directory domain services and the central role of user accounts in security, with emphasis on planning for domain joins, upgrades, or fresh deployments.