Microsoft 70-411: Administering Windows Server 2012 R2

Review chapter 2 with a hands-on lab, learn how the lab is built, and preview teaching tools you'll rely on as we move into domain content in chapter 3.

Explore how a domain controller, as the authentication server for Active Directory domain services, grants access to resources and manages authentication and authorization across a network.

Understand the Active Directory database core, its partitions, domain configuration, and schema, plus the NTDS.dit file and its EDV logs and checks, and authoritative vs non-authoritative replication, backup, and restore.

Explore domain controller states and use a management tool to perform on-the-fly Active Directory backup, restore, and replication with ADSI and AD DS.

Learn how to enable and use the Active Directory recycle bin via the Active Directory Administrative Center or PowerShell, and understand replication prerequisites across the forest.

Review active directory management through gui tools such as the MMC snap-ins, the Administrative Center, and PowerShell; explore database management, SRM, and using the Recycle Bin to recover deleted objects.

Import user accounts with csvde on the domain controller, verify them in Active Directory Users and Computers, then enable the accounts and reset passwords for Albert and Stephen.

Explore CSVDE account creation for bulk provisioning, turning an Excel roster into a CSV and using a simple tool to auto-create many accounts.

Explore PowerShell as a command line scripting environment and learn how it enables automated account creation. See a demo across Windows 7, Windows 8, and Windows Server 2012.

Explore the command-line PowerShell tool through a powerful demo on creating accounts, showcasing ease of use, advanced capabilities, history rollback, and saving scripts for reuse.

Explore account lockout settings by configuring lockout duration, threshold, and reset options (manual or automatic), balancing security with user accessibility and helpdesk response times.

Configure a fine-grained password policy for the managers group in the Active Directory Administrative Center, with global scope, minimum length 14, history 12, and 3 failed logon attempts.

Review key concepts of user account password settings and password policies, including lockout settings, and how to use managed service accounts within a group, demonstrated on the demo machine.

Explore group policy management in Windows Server 2012 R2 by creating a GPO. Understand types, domain deployment, and best practices to centralize desktop and user experience control.

Explore practical gpo application to centrally manage security settings, software deployment, logon scripts, folder redirection, and centralized administration, with standardized configurations and controlled internet, firewall, and password policies.

Create and edit a new GPO in group policy management, configure user configuration administrative templates to block a Windows app, and document changes for easy reference.

Implement group policy to control power and personalization, configuring screensaver timeout, enabling password protection, and restricting apps, then link the GPO to the domain and verify on clients.

Run gpupdate /force to apply group policy on clients, then generate and review group policy results using the wizard to verify computer and user settings.

Get a high-level overview of group policy objects (GPOs): their history, components, types, and how computer and user configurations combine to apply on Windows Server 2012 R2.

Install a centralized store as a centralized repository for policy definitions, provisioning it so the group policy management console can read a GPO from local or central locations.

Redirect folders to a network share to centralize data backups and streamline roaming profiles, ensuring access to desktop, documents, favorites, app data, gaming info, and search data across machines.

Demonstrates configuring folder redirection via group policy, creating a shared redirect folder, and forcing updates to ensure users' documents redirect to a branch office path.

Learn how slow and no link scenarios affect group policy processing, boot time, and security, and how to defer nonessential policies using loopback processing during disconnections.