Exam 70-410: Installing and Configuring Windows Server 2012

Explore on premise versus cloud options for hosting email, sharepoint, data stores, and sql server, emphasizing high availability and access from anywhere for remote workers.

Explore common cloud computing approaches and how to use Microsoft services, including 365, Dynamics, Exchange Server, and hosting SQL Server and Microsoft System Center.

Explore cloud computing models—IaaS with virtual machines and Hyper-V, SaaS with hosted apps like Office 365, and PaaS for database hosting—emphasizing management, redundancy, and preserving desktop experience.

Provide on-premise servers to supply essential network infrastructure—IP addresses, DNS, default gateways, and Active Directory—while pushing Windows and antivirus updates via WSUS and enabling single sign-on with Office 365.

Explore Windows Server 2012 editions, licensing, and four terabytes of RAM, from standard edition with hyper-v to data center with unlimited virtual machines, noting foundation edition cannot join a domain.

Explains Windows Server 2012 editions, including Essentials as a Small Business Server replacement with licensing limits, and Hyper-V edition with no UI, per-VM licensing, and domain joining.

Windows server 2012 editions: workgroup, standard, and multipoint; workgroup limits connections and lacks active directory, standard supports domain membership with per two-socket licensing, while multipoint serves users on one host.

Explores multi-point premium in Windows Server 2012 Editions, enabling multiple users to share a single host with input and output. Increase RAM and sessions, and boost the network infrastructure.

Explore how Windows Server 2012 organizes service roles, including Active Directory, certificate services, federation, rights management, application server, and infrastructure roles like DNS and file and storage services.

Explore Windows Server 2012 server roles, including Hyper-V virtualization, Network Policy Server health checks, Remote Desktop Services, Volume Activation Services, Deployment Services via WDS, and WSUS updates.

Explore how Windows Server 2012 features are toggleable options you enable as needed, including dot net framework, drive encryption, IP address management, and network load balancing.

Examine Windows Server 2012 features, including web server hosting, outbound email, telnet client/server, biometrics such as fingerprint logon, PowerShell, process activation server, search services, server backup, and migration tools.

explain server core, a minimal command-prompt installation that reduces attack surface and simplifies management, supports core roles like Active Directory but lacks graphical components, and is ideal for virtualization.

Examine installation options for Windows Server 2012: server core versus server core management, where the graphical user interface can be added without offline images.

Explore modular installation options, with server core and an optional full server layered on top to enable GUI management when needed, unlike older versions that required upgrading.

Compare DVD and ISO installation media, noting USB drive speed advantages, and learn to use ISO images for downloadable, updatable, mountable installations and virtualization with Hyper-V.

Explore Windows deployment services for creating and deploying operating system images to new servers via PXE boot from a WDS server, using VHD files.

Explore alternative installation options, including the System Center Configuration Manager (NCCAM) and Virtual Machine Manager templates, to deploy new virtual machines quickly and scale server and workstation deployments.

Demonstrates installing Windows Server 2012 Enterprise from an ISO in a Hyper-V lab, selecting custom install, configuring drives, entering a product key, and using Server Manager and PowerShell.

Plan your Windows Server installation by choosing a fresh install, upgrade, or migration path. Learn to use migration tools to transfer shares, permissions and roles while preserving settings.

Upgrade Windows Server 2003 and newer from equivalent editions or newer, launch setup from the original operating system, and move up within the same edition family.

Explore migrating servers from 2003 to a new 64-bit 2008 server using the server migration tool, with prerequisites like disk space, PowerShell, .NET framework, and role-by-role planning (including Exchange).

Identify the minimum hardware requirements for installing server core and distinguish it from the full version, including a 1.4 GHz processor, 512 MB memory, and a 32 GB hard drive.

Plan thoroughly before installing windows server 2012, configure the install source, language, licensing, and upgrade or custom options, then set the local administrator password and consider domain join.

Log in to complete post installation tasks by configuring server manager, naming the server, joining the domain, setting the time zone, configuring IP address, network, firewall, updates, and activating Windows.

Explore the server manager dashboard, configure local server settings, and join a domain while managing firewall, updates, naming conventions, and time synchronization for a scalable file server.

Activate every copy by entering the product key during or after installation, using server manager or server license manager to activate, with no grace periods and up to 999 re-arms.

Discover offline domain join by provisioning with disjoined X-C /provision, saving a domain file, transferring it to the new server, then running djoin /requestODJ and DS join, reboot.

Run the best practice analyzer and configure services, DNS, remote management, and remote desktop behavior to complete round two tasks after Windows Server 2012 installation.

PowerShell is the essential management tool for Windows Server 2012, enabling server administration through script driven commands beyond the graphical interface, crucial in both Windows and core editions.

Master PowerShell verb-noun commands and parameters to configure servers, including IPv4 address, interface alias, and default gateway, with practical examples like adding a computer to the domain.

Enable features on demand to save disk space by removing unused roles and features. Retrieve the needed files from remote locations, installation media, or Windows Update when configuring these components.

Identify the features on demand search order: start with the user-specified location from the add rules wizard or decem engine image commands, then Windows Update or group policy evaluation.

Override features on demand by using the Source parameter in the Windows feature command to point to a file path, via installation options or group policy.

Learn to conserve space by removing Windows feature files, using uninstall-windowsfeature with or without the remove parameter, and trimming offline images on a virtual hard drive.

Consult migration guides to plan migrating roles from older Windows Server versions. Install server migration tools on source and destination, create deployment folders, and register the tools on the source.

Explore supported operating systems for Windows Server 2012, including 2003 service pack, 2008 full install and r2, server core options, and migrating server roles within 2012.

Offer an introductory overview of Windows Server 2012, covering basic install options (full server or server core) and how to add roles and features for future modules.

Use Server Manager as a landing spot to view my server or groups of servers, identify errors, and access add/remove roles, features, PowerShell, event viewers, and Best Practices Analyzer.

Learn how to add roles and features with Server Manager, configure Hyper-V and remote server administration tools, and manage virtual networks and virtual machines on Windows Server 2012.

Explore Event Viewer to filter and analyze server events across local and group servers, using saved queries, severity levels, event IDs, and time service insights for troubleshooting.

Demonstrates running the best practices analyzer on a domain controller with Active Directory, DHCP, and DNS, showing how BPA identifies issues and suggests corrections in a real server setup.

Discover administrative tools for Windows Server 2012, including Active Directory tools, DNS, Event Viewer, and Group Policy management. Schedule tasks with Task Scheduler and monitor performance with Resource Monitors.

Navigate Windows Server 2012 administrative tools, including the Active Directory administrative center, ADSI Edit, and PowerShell, and learn quick tasks like resetting passwords and pinning tools to the taskbar.

Enable remote management on Windows Server 2012 through the server manager interface or elevated PowerShell, configure remoting commands, and ensure firewall ports are open.

Delegate administration in Windows Server 2012 by assigning tasks to groups or OUs, and use the delegation wizard in Active Directory to control domain tasks like passwords and backups.

Plan delegation by defining who receives privileges, whether individuals or groups across forests and domains, and specify tasks and permissions to avoid overbroad admin rights in Active Directory.

Demonstrates delegating domain administration in active directory, granting granular permissions to a helpdesk group for password resets and user management at the organizational unit level.

Explore installing and configuring Windows Server 2012 services, from basic control panel service management to advanced network services, including network load balancing and restart configuration.

Explore advanced services in Windows Server, including network card teaming, dynamic access control, and network load balancing. Learn about clustering with Hyper-V, disaster recovery, distributed Active Directory, certificate services.

Explore configuring NIC teaming to provide bandwidth aggregation and failover for load balancing and fault tolerance. Learn switch independent and switch dependent modes, including active standby and required switch participation.

Explore switch dependent teaming modes in Windows Server 2012, comparing generic static teaming with dynamic teaming using the link aggregation control protocol and port-based LCP enablement.

802.11ac delivers higher speeds and reliability across 2.4 and 5 GHz bands, with wider channels and MU-MIMO, while Windows Server 2012 provides built-in support.

Explore updated netsh commands in Windows Server 2012 R2 to view wireless driver support and 11 AC details, including network mode and profile information.

Windows Server 2012 extends wired and wireless password use with EAP and MS-CHAPv2. Enable the EAP host registry setting on Windows Server 2012 and Windows 8.1.

Explore essential tools and utilities for windows server management, and learn how to enable remote management and locate help as you navigate the module.

Demonstrates installing Windows Server core on a virtual machine, from booting an iso to configuring the administrator password, in a lab environment.

PowerShell drives Windows Server installation and remote management, and teaches verb-noun syntax, optional arguments, no spaces in nouns, and integration with applications like Exchange and Active Directory.

Log on to server core, explore the command prompt and PowerShell, and practice single-word commands. Use get-help and install-windows-feature to configure DNS and review static IP prerequisites.

Learn how to reduce attack surface by running a minimal Windows Server Core and optionally add a graphical user interface to simplify management with PowerShell, Server Manager, and Install-WindowsFeature.

Install the GUI on server core by using PowerShell to add the Windows features, include all sub features, specify the source, and manage with server manager once installed.

Remove the graphical user interface from server core using server manager to remove the server GUI management feature, then restart; optional PowerShell commands streamline the process while noting GUI dependencies.

Learn how to install a removed role or feature using an offline wim image in PowerShell, locating the image index with get-windowsimage and running install-windowsfeature with the path and source.

Explore server core tools and learn how to use them, including the command prompt and DOS-era skills, to manage server core effectively, with some tools optional and others mandatory.

Explore server core tools, including command line utilities such as ipconfig and cmd, PowerShell, SConfig, Notepad, msinfo32, Task Manager, and remote administration with graphical tools.

Press control-alt-delete to open the task manager, choose file > run new task, and select command or powershell to restore the command prompt; close the task manager to return.

Explore the roles available on server core, including Active Directory domain services, DHCP, DNS, file services, Hyper-V, and WSUS, and discover how a smaller footprint reduces the attack surface.

List server core roles by piping Get-WindowsFeature to where-Object and filtering install state to filter out removed features, using the vertical bar as a pipe.

Enable remote management to administer servers from a workstation using Windows tools; configure via Server Manager properties or elevated PowerShell to remotely enable or disable remoting.

Open firewall ports for remote administration using net shell and enable the remote admin service on the Windows server, ensuring remote management works through the local firewall.

Explore using netsh to configure firewall step by step, learning to enable remote admin for the firewall and navigate the firewall context with help and command syntax.

Configure server core with esc and esc config, using the cmd menu to enable or disable features, with PowerShell as an alternative, and access via local administrator rights.

Use sconfig on Server Core to configure network (static IP, DNS) and computer name, join domain, and enable remote management and remote desktop.

Server core lacks several features, including Windows deployment services, network policy and access services, federation server for Active Directory, and the application server role, which can prevent hosting Exchange.

Learn how to install a domain controller on server core using DC promo and an unattended answer file, including DNS, global catalog, and safe mode password considerations.

Create and manage Active Directory users, computer accounts, and groups with PowerShell, setting properties like username and description, passwords and expiration; unlock, enable, or disable accounts for secure access.

Learn to manage permissions through groups in Windows Server 2012 using PowerShell, adding and removing members, listing groups, and assigning a primary (principal) group to streamline access control.

Explore PowerShell commands for computer management, including testing the secure channel, resetting the computer machine password, and repairing domain trust between computers and Active Directory domain controllers.

Explore how organizational units in Active Directory compartmentalize users, groups, and computer accounts to enforce policies and tailor access within a domain.

Master server core concepts, including installation, remote management, and role limitations; use command prompt, sconfig, and PowerShell to manage, and learn how to add or remove the gui.

Explore storage features in Windows Server 2012, covering disk types, storage spaces, SMB 3.0, and file systems from FAT and FAT32 to NTFS and enhanced NTFS.

Compare disk types from ide to solid-state drives, highlighting cost and iops. Learn how sata, scuzzy, sas, and fiber channel choices guide storage decisions for workstations and high-load servers.

Explore enhanced integrated drive electronics (EIDE), or c-drive, from 1986, with a two-connector cable, 128 gig limit, and file system constraints that shaped early storage at 133 megabytes per second.

Serial Advanced Technology Attachment (SATA) uses a high speed serial cable to connect drives. It replaces IDE with low-level commands and offers lower cost storage not for heavy workload servers.

Explore the small computer system interface (scsi), tracing its 1978 origins, parallel cable design, and growth from 5 megs per second to 640 megs per second with higher costs.

Upgrade to solid state drives by storing data on microchips, with no spinning disks or read/write heads, for superfast access and lower power use, and higher costs to run.

Explore direct attached storage (DAS), storage built into and attached to the server, noting easier maintenance but data inaccessible if the server fails and challenges centralizing and backing up.

Explore network attached storage (nas) and its centralized, networked storage pool that lets many servers share data, with scalable options from low-end appliances to storage area networks.

Describe a dedicated high-speed storage area network that links servers to a centralized storage system via fiber channel or iSCSI, enabling fast access and expansion with redundancy.

Compare common raid levels, including raid 0's no redundancy, raid 1's mirroring, and raid 5's distributed parity, highlighting read/write performance, space overhead, and single-disk failure tolerance.

Explore raid 6 with dual parity and raid 0+1 versus 1+0 in striped and mirrored sets, tolerating up to two disk failures while balancing performance and availability.

Explore raid 0 and raid 1 combinations (raid 0+1) with striped mirrors, and examine raid 5 plus 0 (raid 50) which stripes parity and mirrors for improved read performance and fault tolerance.

Discover Windows Server 2012 R2 storage features, including storage spaces with virtual disks and deduplication improvements, work folders for non-domain access, and DFS enhancements with a unified management console.

Explore storage spaces and storage pools that virtualize multiple drives into a single pool. Create virtual drives and enable storage aggregation, capacity expansion, and delegated administration.

Explore configuring storage spaces in Windows Server 2012 by creating a storage pool, virtual disk, and volume, with RAID 0/1/5 options and thin or fixed provisioning.

Enable and manage work folders on Windows Server 2012, synchronizing corporate data to non-domain devices over SSL, with quotas, classification policies, reporting, and failover clustering for high availability.

Highlight the limitations of work folders: no collaboration functionality, no selective sync, only full synchronization to each user's own folder on the server, with no syncing to other shares.

Identify work folders components for Windows Server 2012, including an NTFS volume and a trusted public certificate, plus DNS access and client support on Windows 8.1 or Windows RT 8.1.

Certificates provide identification and authorization to prove a server’s identity; install the SSL certificate in trusted roots, ensure common name matches the server, and use SANs for multiple host names.

Install the work folder server component as a role service within file and storage services. Create multiple sync shares, each mapping a file system location to a user or group.

Configure the work folder server role via server manager or PowerShell, then create a sync share with server name, certificate, UNC path, encryption, and a user-based folder name.

Use PowerShell to configure a Windows Server 2012 work folder by adding features, creating a sync share, and setting the path and access, plus conflict resolution.

Configure work folders on Windows 8.1 via control panel or group policy, using domain or local policy, with location and management via System Center 2012 Configuration Manager or Windows Intune.

Install and configure work folders on Windows Server 2012, enable the File Server role, create a sync share, and test with a Windows 8.1 client.

Explore offload data transfers (ODX) using external storage arrays to route reads and writes to the server via a token-based mechanism, freeing up network load.

Leverage SMB 3.0 support to boost performance for Hyper-V and clustered volumes by optimizing small random reads and writes in SMB file shares.

Understand the resilient file system, based on NTFS, and its data integrity focus with online corruption scanning and repair that avoids offline disruptions.

Discover the new storage management interface that uses WMI to filter data, script tasks with PowerShell, and manage file and storage services via the dashboard across a data center.

Resilient file system builds on NTFS to provide metadata integrity with checksums, large volumes and directories, and built-in resiliency against corruption, plus storage pooling with data striping for performance.

Explore PowerShell cmdlets for managing virtual disks, disks, and disk images with connect, disconnect, mount, and dismount actions behind a familiar dashboard.

Understand basic disks, including primary and extended partitions with logical drives, and how the master boot record and the active partition enable booting.

Configure dynamic disks to create volumes across multiple disks, including simple, spanned, striped, mirrored, and raid 5, with fault tolerance and the ability to break or repair mirrors.

Analyze basic and dynamic disks by inspecting disk, partition, and volume properties, capacity, and free space; understand the partition vs volume terminology and how to convert between disk types.

Demonstrate volume mount points to add space by mounting a drive as a folder, manage drive letters and paths, and access data on the C drive.

Configure MBR disks by understanding that the master boot record holds partition tables and boot information, enabling up to four partitions on a basic disk (three primary and one extended).

Configure gpt disks on basic disks with partitions up to 128 and crc protection; dynamic disks use an ldm partition to support partitions larger than two terabytes and oem diagnostics.

Plug in and import a new disk, then configure it. Decide on volumes, resize as needed, create a large volume or plan partitions, and configure the disk as redundant storage.

Explore the meanings of simple volumes and pools, including span, striped, mirrored, and raid 5 configurations, and understand fault tolerance and recovery.

Learn to create and attach virtual hard drives using Hyper-V and server storage tools, initialize disks, choose fixed or dynamic VHDs, and build NTFS data volumes for file servers.

Extend or shrink NTFS volumes by ensuring adjacent free space for extension, or span across drives when needed; shrink requires relocating movable files like the page file, and defrag first.

Explore how to manage volumes using the disk management utility, diskpart, and PowerShell to resize partitions.

BranchCache boosts performance by caching data locally at branch offices, using hosted or distributed cache modes, and operating per subnet with http/https and smb protocols.

Install the branch cache feature or enable branch cache for network files on a content-hosting server; configure clients via group policy or net S.H. commands.

Install the branch cache feature on the server, enable it via group policy, and configure file shares for clients to pull from the cache.

Branch cache is disabled by default on the client; enable distributed cache mode, configure Windows firewall, and enable branch cache via group policy, netsh, or PowerShell commands.

Enable distributed cache mode or hosted cache mode by linking a group policy to the OU containing client computers, using computer configuration policies and PowerShell commands.

Explore Windows Server 2012 local storage options from basic disks to dynamic disks, configured volumes, arrays, and raid five volumes, with dashboards, clustering, and a new file system for resiliency.

Install the file and storage services role to create SMB shares with permissions. Manage shares via server manager, Windows Explorer, or net shell to set permissions and locate shares.

Explore file sharing profiles with SMB quick and advanced options, define folder owners, access policies, data classifications, and quotas, and tailor shares for UNIX and Hyper-V server applications.

Configure file shares using the server manager wizard, choosing quick or advanced shares, and set NTFS and share permissions, access based enumeration, and auditing for effective access.

Explore offline files to keep working when server connections drop, with automatic synchronization of locally edited documents to the server and seamless access to the home directory and my documents.

Learn the offline files options for a shared folder—selective availability, no offline availability, and automatic availability—and how caching via the advanced sharing button runs executables from the local cache.

Examine cumulative NTFS permissions, including full control, modify, read and execute, and ownership, with emphasis on deny, securing access both locally and over the network.

Explore how NTFS permissions control access through explicit and inherited ACLs, with allows and denies, the priority of explicit denies, and the everyone group caveat.

Explore NTFS permission examples, showing how inheritance, explicit denies, and permission resets affect folders like stuff, widgets, and things when moved across drives or servers.

Enable access based enumeration (abe) on a file share to restrict visibility to authorized users; unauthorized users will not see the share or will encounter access denied.

Configure the volume shadow copy service (VSS) to create point-in-time snapshots per volume, enabling file and folder recovery, previous versions, and restores to an alternate location under the default schedule.

Explore how shadow copies on Windows Server 2012 volumes enable versioning and quick restores of files and folders. Learn to enable, view previous versions, and restore from snapshots.

Explore configuring print and document services within the same access realm as files and folders, and apply similar permissions to printing data.

install the print and document services role on a Windows Server using Server Manager, configure a print server, and explore remote administration tools and branch cache options.

Explore easy print, the Windows Server 2012 print driver with a version 3 that includes previous versions and isolates drivers to prevent conflicts, enabling printer sharing with a smaller package.

Explore network printing security options by assigning print, manage printer, and manage documents permissions; understand who can print, pause, reprint, or manage printers and queues.

Demo demonstrates creating and sharing a printer, selecting drivers and ports, adjusting sharing and security, and configuring two separate printer profiles for marketing and after hours.

Printer pooling combines multiple physical printers into a single pool and routes print jobs to the first available device, ensuring shared, high-volume printing with the same driver for all printers.

Learn to configure printer pooling on windows server 2012 by using multiple printers with the same driver so any printer can receive a print job, via physical or ip ports.

Enable branch office direct printing by centralizing printer configuration at headquarters, caching printer information at the branch, and printing directly to the branch printer, reducing traffic on the wide-area link.

Deploy network based printers by creating a group policy in print management, distributing to XP or higher clients, using preferences, shared printers, or sneaker network deployment.

Use the Windows Server 2012 R2 printer migration wizard or the print BRM Dudie X-C command line to migrate printers and back up WSD devices.

Explore server 2012 r2 updates, including roaming profiles that now include printer connections. Configure group policy to determine whether printers follow users and enable NFC wireless printer connections.

Explore file and print access, configure shares, and examine NTFS permissions—the heart of security—where permissions are cumulative and a deny at the top of the list blocks access.

Discover how to remotely manage and access physical servers and virtual machines, using standard remote management and the Hyper-V console to administer virtualization environments.

Learn how remote management lets you manage a server as if it were local, configure Windows remote management, and address firewall settings for day-to-day, multi-server, and server core tasks.

Explore remote management options for Windows Server 2012, including remote shell, remote power shell, remote management tools, Server Manager, and enabling GUI or core remoting.

Learn to enable and verify remote management on Windows Server 2012 using Server Manager and Server Core, adjusting firewall rules with netsh or sconfig to allow remote access.

Export remote management settings from server manager by locating the server list and user config under app data, then copy to a network share or roaming profile.

Use remote desktop to maintain remote servers, often locking local users out and prompting control-alt-delete to log back in; enable it via a checkbox in server manager.

Enable remote desktop on Windows Server 2012 using server manager or server core, configure firewall and access permissions, and connect with the remote desktop client to manage servers.

Explore server 2012 r2 improvements like session shadowing for monitoring and remote control of active remote desktop sessions, plus tighter integration with server manager and remote desktop connection.

Examine remote desktop services components, including the session host, remote apps, connection broker, and gateway, to manage pooled or personal virtual desktops and web access.

Manage multiple servers with server manager by creating server groups for core, exchange, and application servers, and extend administration to 2008 servers using updates and RSAT.

Create a server group to organize multiple servers, such as DNS servers or domain controllers, then use Active Directory to assemble the Mayfield site servers in a single console.

Explore virtualization concepts with Hyper-V for virtual servers, desktops, and applications. Compare console sessions, remote desktop, and presentation virtualization, and understand how multiple user sessions run on a server.

Explore presentation virtualization that delivers full desktops and remote apps through remote desktop services, web access, and gateway configurations to connect clients to server-hosted resources.

Enable external access to remote desktop sessions and remote apps via the remote desktop gateway without a VPN, installed as a role with its services to streamline client access.

Explore virtualization with Hyper-V to run servers and virtual consoles, including remote desktop access to physical and virtual infrastructure, with app virtualization and enterprise options, focused on Server 2012 Hyper-V.

Install Hyper-V on a 64-bit platform with slat and dep, and ensure a minimum 4 gb of ram for Windows Server 2012 virtualization.

Application virtualization, known as App-V, is part of the Microsoft Desktop Optimization Pack; install and configure it to isolate applications from the operating system and stream them.

Learn Microsoft enterprise desktop virtualization (MED-V). Manage users accessing legacy OS and deploy virtual machines on client workstations via Hyper-V, in the desktop optimization pack.

Explore how virtualization simulates complete hardware for virtual machines, including BIOS, memory, processors, scuzzy controllers, network adapters, legacy adapters, fiber channel, and remote eFax video adapters.

Create virtual machines with Hyper-V, assign memory, connect to a network adapter, create or attach virtual disks, and install OS from a boot image, following naming conventions for domain environments.

Plan Hyper-V deployments by configuring Hyper-V settings, virtual switches, and the virtual storage area network, set defaults for virtual hard disks and virtual machines, and consider live migrations or replication.

Configure dynamic memory for Hyper-V VMs by setting a minimum memory and letting demand drive allocation, aided by startup smart paging; plan capacity with PowerShell to avoid contention.

Install integration services inside the connected virtual machine using the integration disk from the action menu, enabling data exchange, heartbeat, backups of snapshots, and improved operating system shutdown management.

Configure virtual machines with start and stop actions to handle power interruptions, using the set-vm command and parameters for automatic start action or automatic stop action.

Track resource usage across many virtual machines by monitoring CPU and memory, min and max values, disk space, and network traffic; enable VM resource metering on Hyper-V with PowerShell.

Describe virtual hard disks as files that represent entire drives, compare types, and learn to configure partitions and install an OS, using the PowerShell command Lutfur for new dash HD.

Explore virtual disk types, including dynamically expanding VHDX and fixed size VHDs, and learn through the edit disk wizard how expansion, compression, and compacting affect space and fragmentation.

Configure pass through disks to grant exclusive access to a physical drive via the add drive option, then consider differencing disks for space efficiency with potential performance trade-offs.

Learn how to manage fixed and dynamic virtual hard disks by converting a fixed VHD to dynamic, compacting the dynamic disk to its minimum size, then converting back as needed.

Shrink or expand virtual hard disks, using the edit virtual hard disk wizard in the Hyper-V console; it's not as easy as a property sheet for dynamic or fixed VHDs.

Compare VHD and VHDX formats, noting VHD's legacy 2 TB limit. Convert to VHDX for better performance, up to 64 TB, with logging and a data file fallback.

Learn how to create and convert virtual hard disks in Hyper-V, comparing dynamic and fixed VHD and VHDX formats, and using differencing disks, compaction, and mounting tools.

Understand how differencing disks share a parent to save space and reuse a base image. Relink broken parent paths in Hyper-V with the inspect disk tool when the parent moves.

Master essential maintenance for virtual hard disks, including backups and snapshot management. Convert between fixed and dynamic VHD/VHDX and move between HD and VHDX formats.

Explore methods to create virtual hard disks in Hyper-V, including using the Hyper-V manager wizard, the disk management console, diskpart, and PowerShell with options for type and size.

Learn how to deploy VHDs to a network file share using SMB 3.0, with Server 2012 support, accessed via a UNC path.

Learn how differencing disks and snapshots use a base virtual hard disk template with dynamic disks, where writes occur on the last disk, enabling rollbacks along the chain.

Explore Hyper-V virtual networks by selecting external, internal, or private configurations and their impact on VMs and the Hyper-V server connectivity.

Select a virtual network—private, internal, or external—to control how far your virtual machines can reach; external links to the physical adapter and store bindings on the Hyper-V network adapter.

Explore extensions for virtual networks, including NDIS capture and Endace drivers, to monitor and bench test packet flow across a virtual switch using network monitor and the Microsoft filtering platform.

Learn to use Hyper-V manager to import virtual machines, configure virtual switches, and manage internal and external networks with the best practice analyzer.

Configure Hyper-V virtual adapters with internal, external, or private switches, assign VLAN IDs, and manage bandwidth to optimize performance and isolation.

Use legacy network adapters to create a virtual machine that can boot from the network with a Windows deployment server; note lack of hardware acceleration, VM queue, and IPsec offloading.

Learn how to add and configure network adapters in hyper-v for windows server 2012, including choosing virtual or legacy adapters, selecting switches, enabling bandwidth management, and assigning IPs.

Configure hyper-v vm networks by adjusting authorization policy with the authorization manager for local administrators group to delegate tasks, and use the legacy network adapter without a virtual machine driver.

Provide the driver for most operating systems and emulate the network adapter. Note pixie boots are supported, while legacy adapters do not support 64-bit Server 2003 or XP virtual machines.

Learn how external virtual networks in Hyper-V can affect the host's physical adapter and why you may need a reboot, and how internal virtual networks avoid altering the physical adapter.

Configure static MAC addresses for virtual machines to prevent conflicts across Hyper-V hosts; use DHCP reservations for stable IPs, and allocate MAC ranges per host with the virtual switch manager.

Use snapshots of differencing disks to create point-in-time copies of virtual machines, including memory, without affecting running state. Plan multi-server snapshots to keep domain passwords in sync.

Learn how snapshots serve as backups but are not replacements, and how to mount, export, merge, and revert snapshots on a VHD volume, up to 50 per VM.

Master remote management in Hyper-V virtualization by configuring virtual machines, virtual hardware, and networks, then enable remote management, group servers, and administer them from a single workstation console.

Identify the three core components of a network infrastructure: IP addressing, DNS, and gateway, and explain how DHCP dynamically assigns IP, subnet mask, and gateway, with DNS resolution for resources.

Explore the TCP/IP protocol suite, including HTTP, FTP, SMTP, DNS, UDP, ARP, ICMP, IGMP, and IPv4/IPv6 addressing, plus TCP as the reliable transport.

Explore the osi model from application to physical, covering transport, ip, arp, and ethernet variations. See how http, ftp, and smtp applications stay hardware independent.

Explore the TCP/IP application suite, which includes HTTP, HTTPS, FTP, Remote Desktop Protocol, SMB, SMTP, POP3, and IMAP, each with its own commands and use cases.

A socket combines the transport protocol, port, and source and destination IP addresses to form a unique endpoint for network communication, enabling server-to-server mail over tcp or udp.

Explore the port landscape from well-known ports (0–1023) to registered ports (1024–65535), with examples like 80, 443, 110, 53, 389, and 587, and note that applications can override port assignments.

Explain how IPv4 uses 32-bit addresses in dotted decimal, grouped into four octets (0–255) and how a subnet mask separates the network ID from the host ID.

Learn IP configuration basics, including IP address, subnet mask, and default gateway, and distinguish network ID from host ID within a default subnet mask.

Explain public versus private IPv4 addresses, including public facing IPs on the internet, internal private ranges such as 10.x, 172.16.x, 192.168.x, and classful addressing.

Relate an IP address to binary by exploring 8-bit octets, powers of two, and how to convert binary to decimal, using examples like 192 and 255.

Analyze IP address classes from the first octet to determine class a, b, or c, and explain how default subnet masks define network IDs and host counts.

Explore cidr notation and variable length subnet masks to optimize routing, balancing networks and host IDs, using a slashed 24 (24 bits) for six floors with 500 people.

Explains how CIDR and VLSM let you split a /16 network into smaller subnets, calculating usable hosts with 2^n - 2 and avoiding oversized networks.

Configure ip addresses using server manager by selecting the network adapter, choosing IPv4 or IPv6, and entering the address, subnet mask, default gateway, and DNS servers for name resolution.

Configure Windows Server 2012 IPv4 address and DNS from the command line with netsh. Specify the interface name, static address, and subnet mask.

Learn how to configure IP addresses with PowerShell using the Set-NetIPAddress command, specify interface alias and IPv4 addresses with a 24-bit prefix length, and use Get-Help for guidance.

Explore configuring an IPv4 address in PowerShell for Windows Server 2012 using New-NetIPAddress, specifying interface alias, address, and prefix length, and handling gateway and help options.

Discover how Windows Server 2012 uses PowerShell to troubleshoot tcp/ip with a unified get/set interface, exposing ip address details, ipv4/ipv6 info, neighbor cache, routing, and udp settings.

Learn practical tcp/ip diagnostics to troubleshoot connectivity with ipconfig, dns cache, ping, trace route, and pathing; verify routing, use telnet, and monitor with event viewer.

Configure network card teaming in Windows Server 2012 using Server Manager to combine multiple NICs, creating a fault-tolerant, higher-throughput network that works as a single adapter.

Learn how supernetting reverses subnetting by combining contiguous networks into a larger address space, expanding host capacity as network ids allocate bits to the host id.

Learn how borrowed bits enable super netting, creating up to 16 networks by combining subnets; explore class C examples, subnet masks, and identifying network and host IDs.

Explore IPv6, its 128-bit hexadecimal addresses, and how stateless and stateful configurations optimize routing and subnet design without a DHCP server.

Compare IPv4 and IPv6 by contrasting 32-bit IPv4 addresses with 128-bit IPv6 addresses, ARP-based MAC binding, multicast neighbor solicitation, router advertisements, DHCP or manual configuration, and DNS host records.

Compare IPv4 and IPv6, highlighting fragmentation, ARP replacement by multicast neighbor solicitation at the link layer, IPv6 multicast listener discovery and ICMPv6 router solicitation/advertisement, and 1280-byte packet sizes.

Explore IPv6 benefits: a 128-bit address space with 340 undecillion addresses, automatic link-local configuration, stateless and stateful modes, built-in IPsec security, and more efficient, geographically organized routing.

Learn how IPv6 uses zero compression with colon notation, such as loopback and fe80:: private addresses, replaces broadcast with slash 8 global unicast addresses, and redefines host addresses.

Explain how IPv6 uses a 128-bit address represented in hexadecimal, and dissect the global unicast structure into routing prefix, subnet ID, and 64-bit interface ID.

Replace broadcasts with a link-local unicast address that communicates only on the local subnet. The system automatically generates it and uses the fe80:: prefix with a 64-bit interface id.

Explain how host private addresses function as unique local addresses with a 40-bit organization identifier to prevent conflicts, using a seven-bit prefix and a local flag to indicate local status.

Learn how to add zone IDs to local addresses using the percent sign, so the sending host can determine the zone ID for each interface it communicates with.

Explore the base 16 hexadecimal numbering system, converting each 16-bit block of a 128-bit IP address into hex characters, by summing the binary positions 8, 4, 2, and 1.

Learn how to convert 128 binary bits into eight 16-bit blocks and translate each block into four hex characters, using right-to-left grouping and powers of two to read hex values.

Convert binary to hex by evaluating four bits at a time within 16-bit chunks, using powers of two to accumulate values and mapping to hex digits a through f.

Explore IPv6 address compression by identifying 16-bit blocks, counting missing zeros, and uncompressing to determine the full address, enhancing TCP/IP configuration skills.

Define global unicast addresses as IPv6's equivalent to public IPv4. Explain how first 48 bits identify customer site and next 60 bits enable internal subsetting, with 2001:0db8::/32 reserved for documentation.

Explore the global unicast address structure in IPv6, including the 48-bit global routing prefix, 16-bit subnet IDs, 64-bit interface IDs, and prefixes like 2000::/3, with MAC-based IDs and DHCP assignment.

Explore the global unicast address structure, detailing the 3-bit prefix, 45-bit global routing prefix, 16-bit subnet, and 64-bit interface ID used by hosts.

This lecture explains unique local unicast addresses in IPv6, equivalent to host addresses, using fd00::/8 with 40-bit organization ID, 16-bit subnet ID, and 64-bit interface ID.

Explore why an IPv6 host has a single link-local address regardless of the number of network cards, and how the zone ID is appended to that address.

Learn to interpret IPv6 prefixes by converting binary to hex, identifying global unicast, link local, unique local, and multicast addresses, and using Get-NetPrefixPolicy to troubleshoot.

Configure and analyze IPv6 on Windows Server 2012 by setting up a network adapter with automatic and manual IPv6 options, exploring self-assigned and link-local addresses, and disabling IPv6 when needed.

Explore IPv6 address structure, including a 64-bit interface identifier and varying prefix sizes. Learn about unspecified addresses, loopback, automatic configuration, and multicast addressing.

Explore IPv6 auto configuration, including stateless and stateful methods, DHCPv6 options, router advertisements, and multicast communication, and understand when to combine both approaches for DNS server configuration.

Explore how autoconfiguration addresses progress from tentative to invalid, with tentative verified as unique, valid status, preferred when usable, and expiring while still valid before becoming invalid.

Explore the autoconfiguration process, where a client obtains a link-local address, checks for conflicts, receives locally assigned prefixes, and uses managed flags to invoke DHCPv6 for DNS information.

Explore IPv6 over IPv4 tunneling, encapsulating IPv6 packets inside IPv4 using protocol 41, enabling mixed networks during transition, though it offers no exchange or security.

Enable IPv4 and IPv6 coexistence by selecting the appropriate node type: IPv4 only, IPv6 only, or IPv6 over IPv4, to determine where traffic starts during migration.

Configure ISATAP to enable unicast IPv6 to IPv4 connectivity with auto-configured addresses and a router advertising prefixes. Modify DNS global query block list and restart DNS.

Configure the host using PowerShell, netsh, or group policy to set router settings and the IP address on the network interface.

Six to four enables unicast IPv6 connectivity between IPv6 sites and IPv4 hosts on the internet. Enable internet connection sharing on an IPv6 network to use it as a router.

Teredo tunnels between networks using a client and a server tunneling interface, with a Teredo relay for forwarding and a host-specific relay connecting hosts without mixing through an intermediate relay.

Enable portproxy as an application layer gateway to bridge IPv6 and IPv4 communications, letting IPv6 clients access IPv4 applications and IPv4 nodes reach IPv6 networks.

Navigate the IPv6 transition by running both protocols and upgrading devices, DNS, and hosts to native IPv6, then enable IPv6 as the primary protocol.

Discover the evolution of tcp/ip from ipv4 as the network base to the ipv6 protocol suite, and learn what goes on behind the scenes to aid your migration.

Explore how DNS maps names to IP addresses and supports dynamic updates as networks grow, replacing host files for reliable logon services and domain controllers.

Map host names to ip addresses using dns resolution and reverse zones. Use A records, MX records, service records, and alias records to locate servers and mail exchangers.

Explore how iterative DNS queries chain from a local DNS server to root hints and dot com servers to locate a domain, stepping through referrals until the address is resolved.

Understand link-local multicast name resolution when no DNS or NetBIOS name server is available, using broadcast or multicast to discover machine names and IPs in small labs.

Discover how WINS handles net BIOS name resolution in Microsoft networks, including legacy broadcasts and the global names DNS zone for improved resolution.

Explore how single label names differ from fully qualified names and how Windows DNS uses a domain suffix and a global zone called wins to aid name resolution.

Explore essential DNS tools and commands for configuring and troubleshooting, including nslookup, ipconfig, dnslint, netsh, and network monitor, to diagnose replication issues and DNS cache problems.

Learn DNS tools and DNS server management, create primary and secondary zones with forward and reverse lookups, and test with nslookup, DNS command, and monitoring.

Learn essential DNS concepts for Windows Server 2012, including local DNS, resolver cache, root hints, recursion and iterative queries, authoritative versus non-authoritative responses, and forwarders.

Explore primary and secondary DNS zones, including read-write and read-only copies. Learn about stub zones, Active Directory integrated DNS on domain controllers, and replication of DNS and Kerberos traffic.

Explore DNS registration enhancements in Windows Server 2012 R2, based on CPE policies, with conditions using the fully qualified domain name of DHCP clients and guest DNS suffix for workgroups.

Install and configure the DNS server role on Windows Server 2012, explore DNS registration enhancements, zone types and transfers, and understand dynamic updates and DHCP-DNS integration.

Explore enhanced zone level statistics in Windows Server 2012 R2 via PowerShell Get-DnsServerStatistics. The lecture covers zone queries, transfers, and dynamic update statistics, tracking failures, name errors, requests, and responses.

Explore enhanced PowerShell support for DNS in Windows Server 2012 R2, including signing key rollover, DNS server trust archive, and root trust anchors via new DNS cmdlets.

Configure dynamic updates in dns to let clients register their names and ip addresses, enforcing secure updates to confirm domain membership in the primary zone.

Explore how a DNS server caches resolved names for 24 hours and forwards specific requests to a designated server, bypassing root servers to obtain direct answers.

Learn how the DNS cache stores host records on the server and how to view or clear it with ipconfig /displaydns and ipconfig /flushdns to fix name resolution issues.

Learn DNS requirements for IPv4 and IPv6 coexistence by configuring A and AAAA host records and PTR records, with dynamic DNS registration when clients use the proper DNS server.

Explore utilities for troubleshooting name resolution, including nslookup, the dns command, ipconfig, and the dns server monitoring tab, and practice digging into each tool to diagnose issues.

Trace the basic name resolution path from local cache to DNS, WINS, and hosts files, and troubleshoot by pinging by name and IP to locate failure points across the network.

Learn how DNS enables name resolution to locate services on the network, and how the IP infrastructure is configured, including setting up DNS servers.

Explore how the dynamic host configuration protocol (DHCP) service in Windows Server 2012 automatically allocates IPv4 and IPv6 addresses and configurations, including static pools, reservations, and stateful versus stateless options.

Learn how dhcp lease generation uses broadcast discovery, mac address, server offers, and client requests to obtain and hold an ip address, with renewals and failover synchronization across servers.

Explore how a DHCP relay agent forwards broadcasts across subnets in routed networks, enabling DHCP traffic to non-compliant routers by forwarding to the DHCP server over port 67.

Install and configure DHCP on Server Core using the command line, ideal for small servers with low overhead. Enable remote administration to manage DHCP remotely with Windows tools.

Install the DHCP server role via server manager and authorize it in Active Directory to allow services to run, ensuring no rogue DHCP servers issue configurations.

Install dhcp on the local server using the dashboard and roles and features wizard, configure a scope to assign IPs to clients, and watch progress via notifications.

Create and configure an IPv4 scope with a descriptive name, address range, and subnet mask, plus exclusions for statically assigned servers and common options like router, DNS, and DNS suffix.

Explore how IPv6 allocates address ranges, configures a local subnet, and uses a prefix like a subnet mask; set exclusions, preferred lifetime, and other IPv6 DHCP options.

Create a DHCP reservation using the host's MAC address to ensure the client always receives the same IP address on boot. Describe the client and assign the fixed IP.

Identify and explain common DHCP options, including router, DNS servers, and search suffix, plus subnet mask, DNS domain name, NetBIOS node type, and WINS, enabling dynamic IP configuration across networks.

Explore how options are assigned across server, scope, class, and reservation levels in a dcp server, with the loaded option winning in conflicts and containing mac address and ip address.

Explore how the DHCP database is stored in the MDD file, with temp and log files and a checkpoint, and how 60-minute backups to the DHC folder support registry-based configuration.

Back up the DHCP server, shut down the service, disable auto-start, copy the database files to the new server, and restore them to complete the move.

secure dhcp by restricting physical access, enabling audit logs, and enforcing authorization and authenticated layer 2 connections; use nap to control who can join and manage dhcp servers.

Explore improved partial PowerShell commands for DHCP and DNS settings, view server version for failover and policies, and learn about new capabilities in Server 2012 R2.

Explore brand new PowerShell commands for DHCP to manage multicast exclusion ranges and scopes, DNS credentials, and multicast leases, security groups, plus the associated statistics.

Explore new PowerShell commands for DHCP, including viewing server version, IP records, DNS credentials, multicast scopes, and DHCP options and switches.

Configure client and server for PXE boot with Windows Deployment Services, deploy OS images from a WIM file, and have barebones clients pull a full OS from Windows Deployment Services.

Enable DHCP audit logging to gain records of server activity for troubleshooting and security. Access daily logs showing ID, name, date, description, IP, hostname, and MAC address from server properties.

Explore common event IDs in Windows Server 2012 installation and configuration logs, including event 0 0, 56, and 55, to diagnose startup, authorization failures, and IP address allocation via DHCP.

Explore common dhcp issues in Windows Server 2012, including address conflicts, scope management, reservations and exclusions, and apipa; use ipconfig and dhcp locator to identify unauthorized servers.

Master DHCP and DNS essentials for Windows Server 2012 by ensuring proper IP allocation, name resolution, and service location, because Active Directory depends on DNS for logins.

Active Directory is a network database hosted on domain controllers. The data store holds AD information, and the global catalog speeds searches with a subset of objects.

Learn the logical components of Active Directory, including naming contexts, the schema, partitions, domains, domain trees, and forests, and how sites, trusts, and replication enable efficient administration and access.

Explore domain structures, including root domain, domain trees, and forests, and identify the schema master and enterprise admin roles. Understand two-way transitive trust and cross-domain access within a shared namespace.

Explore how a forest comprises domain trees, how the domain naming master and schema master govern naming and schema, and how enterprise and schema admins wield forest-wide privileges.

Explore how the Active Directory schema defines object classes like user, group, and computer, with attributes such as sid and sam account name, and distinguishes mandatory from optional fields.

Understand the logical domain structure as the security and replication boundary within a forest, including domain partitions, application partitions, and organizational units for group policies and permissions.

Explore default containers and organizational units in Windows Server 2012, including the domain container, built-in container, users container, computers container, and the domain controllers OU with group policy.

Explore how sites define replication boundaries and the unit of replication for domain controllers, enabling intra-site updates and scheduled cross-site replication across multi-office networks.

Explore how domain sites organize users, resources, and policies across multiple physical offices, and how site-specific replication and group policies shape access in a single domain.

Define a site as a physical component with subnets and machines; it serves as a unit of replication, enabling fast intra-site and scheduled, compressed inter-site replication.

Explain domain wide scope as the administrative boundary within a domain, covering account policy, password policy, public key policy, account lockout policy, and Kerberos ticket policy for logon.

Learn how domain controllers hold domain security information and domain structure, manage domain objects, and replicate changes across domain controllers using partitions and forest-wide data.

Domain controllers host a copy of the directory database and system volume, replicating via SYSVOL. They propagate group policy and logon scripts using Kerberos and the key distribution center.

Identify deprecated features in Server 2012 related to AD DS, including 80 prep 32, DC promo, and Elham hash, and explain their reduced usage and security implications.

Associate administrators with Active Directory to enable second-factor authentication, enabling single sign-on from devices and multi-factor authentication for users connecting to applications.

Explore how workplace join uses device registration to grant access to apps and data on personal devices without domain joining, with AD FS for single sign-on.

Explore how the global catalog acts as a distributed, searchable index in Active Directory, enabling domain and forest searches for names and groups, and supporting Exchange Server and single sign-on.

Configure global catalog servers using Active Directory sites and services and administrative tools. Understand replicating global catalogs between domain controllers in a forest root and across sites.

Explore forest-wide operations master roles, including the domain naming master and schema master in the forest root, and the infrastructure master and PDC emulator's duties with groups and time.

Apply best practices for fsmo and global catalog: ensure all domain controllers host gc in a single domain, and separate infrastructure master from gc in multi-domain environments.

Explore how domain and forest functional levels govern Windows Server 2012 deployment, upgrade the schema with adprep and forest prep, and align domain controllers across a forest.

Explore forest and domain functional levels, raise them when possible, and transfer operations master roles while delegating control in Active Directory across domain controllers and trusts.

Identify who can raise domain and forest functional levels with the domains and trusts tool on the PDC emulator, and ensure domain controllers run the server version.

Explore functional level options for domain and forest, including rollback options to 2012 and down to 2008, and emphasize planning and backups to avoid fear of rollback.

Enable the Active Directory recycling bin on Windows Server 2012 to limit rollback options to 2012 or 2008; not enabled, choices exist, while Windows Server 2008 has no rollback options.

Explore two Windows Server 2012 functional levels, including protected user protections, Kerberos pre-auth, constrained and unconstrained delegation limits, and forest-based authentication policy silos for authentication isolation.

Explore how forest functional levels set 2012 as the minimum for new domains, the one-way upgrade path, and how the Active Directory recycle bin may allow lowering in some cases.

Run adprep commands to prep forest and domains for Server 2012, from schema master server, using an elevated window and ensuring membership in schema Admins, enterprise Admins, and Domain Admins.

Deploy read-only domain controllers in insecure or admin-scarce sites to authenticate logins while preventing AD changes. Define maintenance roles and password caching to balance security and access.

Discover how domain controllers are located using DNS SRV records and how logon authentication builds an access token with user and group SIDs, enabling access to local and network resources.

Explore how DNS and service records support Active Directory, including forward lookup zones, domain controllers, and reverse lookup zones for IPv4, with DNS Manager navigation and site-based resolution.

Active Directory logon uses a ticket granting ticket to access local and network resources; each access validates the ticket with the domain controller to enforce authentication across resources.

Plan domain controller installation, noting DC promo is no longer supported for standard installations; use server manager to add domain services role and promote the server to a domain controller.

Plan the domain controller installation by choosing to join or create a domain and decide forest placement. Ensure accurate administrator credentials and consistent naming to avoid difficult changes later.

Collect administrator credentials and domain name, plan the full DNS name and NetBIOS name, assess DNS zones, domain controller compatibility, and decide storage for NTDS database and log files.

Demonstrates installing Active Directory domain services on Windows Server 2012, including renaming the computer, setting a static IP, configuring DNS, and adding AD DS via server manager.

Upgrading domain controllers is straightforward on Windows Server 2008, running setup from the installation disk, choosing language, clicking install now, accepting the license, and selecting the upgrade type.

Perform a clean installation of Windows Server 2012 domain controllers, join to a domain, add the directory services role, create a new domain, and promote to domain controller.

Install a domain controller from media (IFM) to preload active directory from a backup at a remote site, reducing initial replication.

Demote the domain controller to remove Active Directory services and the AD DS role. Add file server 1 to the all servers group to manage from a single console.

Explore Active Directory management tools for domain controllers, including Active Directory Users and Computers, Sites and Services, domains and trusts, and the schema, with RSAT for remote administration.

Create and manage user accounts in Active Directory, understanding security principles, domain vs local logons, and the importance of unique, well-named logon conventions and permissions.

Define a naming convention to ensure unique accounts in active directory, preventing logon name duplicates and maintaining unique full names and down level names within each organizational unit and domain.

Identify user attributes, including login name, password, and contact details. Explore how profile types, logon scripts, and remote desktop settings shape each user's environment under policy and Active Directory.

Create account templates with common attributes like department, organization, telephone, profile, and group memberships to streamline new user provisioning. Copy the template to create a new user in Active Directory.

Explain automatic account lockout from password policy after failed logins, how administrators unlock by clearing the lockout, and how to disable and re-enable accounts when needed.

Explore directory services with the directory services command line tools, using an elevated command prompt to add, get, modify, move, query, and remove objects in Active Directory.

Group users, computers, and other groups to manage permissions across file servers; nest groups for scalable access, using security groups for permissions and distribution groups for email.

Explore how group scopes manage permissions across a forest, detailing universal, global, domain local, and local groups, their scope considerations, replication impacts, and where to apply them.

Explore how to assign permissions using global groups, domain local groups, and role groups, then map role groups to domain local groups for resource access management in Windows Server 2012.

Learn to streamline permissions across a domain by using a global backup operators group linked to local server groups, reducing repetitive updates when hiring or firing.

Identify the default groups in Windows Server 2012, including enterprise admins, schema admins, and built in domain groups, and explain how protective groups safeguard high level accounts like domain admins.

Understand the protected users security group in Server 2012, a domain global group that limits credentials during network sign-ins from non compromised computers, protecting domain controllers.

Explain the restricted capabilities of the protected users group: Kerberos-only sign-in, no password caching, no weaker encryption, no credential delegation, and a configurable four-hour TGT lifetime; reauthentication required after expiry.

Learn how special identities determine user rights and permissions, including anonymous login, the everyone group, authenticated users, and guest accounts, and distinguish interactive versus network access in Windows Server 2012.

Learn how computer accounts log on to Active Directory, authenticate to the domain with a logon name and rotating password, and how group policy via organizational units controls their access.

Troubleshoot computer accounts by diagnosing domain trust and password change issues when a computer misses changes, and reset the account in Active Directory or with command line tools.

Explore why removing a computer from the domain is poor practice and how resetting the trust relationship with Active Directory, dsmod, netdom, or PowerShell fixes secure channel and group policy.

Learn to list group membership using saved queries in Active Directory Users and Computers, export results to text, and use DSQuery with piping to retrieve group members.

Query a group, list its members, and fetch specific user details such as names and emails with PowerShell. Pipe commands, export results to a temp folder, and search group members.

Delegate management of Active Directory objects with granular permissions for containers or properties like a user account, while noting that deny overrides and using dsacls to modify permissions.

Export and import Active Directory objects using csvde by supplying a csv file with a header row; specify the base distinguished name, search scope, filter, and attributes to export.

Use csvde to import users into Active Directory by specifying the source file. Use -k to ignore errors so duplicates won't stop the import, with errors review afterward.

Explore ldifde and the data interchange format to import, export, and modify objects by change types and attributes such as common name, surname, given name, user principal name, and email.

Use ldifde to export data to a file with the -f option, specifying root, dn, filter, and search scope, and selecting attributes to include or exclude.

Use ldifde to import data by running ldifde -i -f <filename>, with the file containing the data to import, and include the -k option to continue on errors.

Master managing Active Directory with PowerShell to perform bulk operations, create and modify user accounts quickly using piping and set commands.

Explore Active Directory domain services and the central role of user accounts in security, with emphasis on planning for domain joins, upgrades, or fresh deployments.