
Explore implementing dhcp and dns, learn about ipam, remote access options, dfs and branchcache, plus advanced network features and software defined networking.
Understand how dhcp automates ip address configuration across clients, reducing errors. See how automatic updates streamline changes across devices and ensure windows clients receive a dhcp address by default.
Explore how a dhcp lease is obtained on Windows server 2016 through the dhcp discover, offer, request, and acknowledge steps in the dora process, enabling automatic ip assignment.
Explore DHCP client IP lease renewal in Windows Server 2016: unicast requests at 50% and 87.5% of the lease, with the DORA process reverting to broadcast if renewal fails.
Install and manage the DHCP server role on Windows Server 2016, emphasizing a static IP and admin rights, using the Server Manager wizard or PowerShell with RSAT tools.
Run the post-install configuration wizard to create the DHCP Administrators and DHCP Users groups, authorize the DHCP server, and restart the service for full functionality.
Discover how DHCP authorization in Active Directory enables only authorized servers to issue IP addresses, while unauthorized servers remain silent unless no authorized servers exist.
Learn how to allocate ipv4 addresses by creating a dhcp scope with a defined range, subnet mask, lease duration, and optional gateway, dns settings, and mac-based reservations.
Configure DHCP options at server, scope, class, and reservation levels to set default gateway, DNS domain name, DNS servers, and subnet mask, noting the last applied option wins.
Limit physical network access and enforce wireless authentication to reduce unauthorized IP allocations. Enable DHCP auditing and name protection with DHCID to prevent name squatting and track IP usage.
Configure policy-based IP assignment to deliver dynamic DHCP options. Enable gateways, DNS, or IP ranges based on vendor class, user class, MAC addresses, or fully qualified domain name.
Learn how to create a superscope by combining multiple DHCP scopes into one unit, so clients on the same network receive a single broadcast response.
Explore high-availability options for DHCP in Windows Server 2016, including split scope, failover clusters, and DHCP failover partnerships, and compare their setup requirements and advantages.
Explore DHCP failover to ensure high availability by pairing two servers for the same scope, using hot standby or load sharing, with concepts like MCLT, auto switchover, and shared secret.
Maintain a Windows DHCP server by backing up the DHCP database and reconciling it with the registry to verify leases, with automatic 60-minute backups in the DHCP backup folder.
Migrate a DHCP server by exporting the DHCP database from the old server, transferring the file, and importing it on the new server with PowerShell or netsh.
Learn how DNS provides domain name services that map host names to IP addresses, enabling effortless name resolution from the root to top-level domains and internal networks.
Understand how dns name resolution lets a client reach a service by name through the local dns server, root hints, and referrals via recursive and iterative queries.
Explore how DNS queries are altered by local caching, TTL values, and forwarders, and how conditional forwarders direct specific domains to designated DNS servers for faster, scalable name resolution.
Explore DNS zones as namespaces like microsoft.com, including forward and reverse lookup zones, A records, cname aliases, MX records, service locator records, SIP domain, LDAP lookup, and AD-related DNS role.
Install the DNS server role on Windows Server 2016 via the Add Roles and Features wizard or PowerShell. Include the management tools and verify the setup.
Discover DNS zone types, including primary read/write, secondary read-only, and active directory-integrated zones with multi-master replication. Learn how stub zones track domain name servers to improve resolution and reduce traffic.
Create a forward lookup zone in DNS management, choose primary or secondary, disable dynamic updates, and configure a secondary zone with a parent server for zone transfers.
Explains how dns zone transfer replicates data between dns servers, comparing all zone transfer (AXFR) with incremental transfers, and notes active directory integrated dns uses multi-master incremental replication.
Explore how an active directory integrated zone enables active-active, multi-master replication with incremental updates, secure dynamic updates, and delegated control of records across domain controllers.
Create and manage dns resource records in the dns manager, including host, alias (cname), mx, text, and srv records, and compare ad-integrated versus secondary zones.
Learn to manage and secure DNS with logging controls, DNS admins delegation, and zone-specific permissions, including backups for active directory integrated zones and the system32 DNS directory.
Master advanced domain name system settings in Windows Server 2016, including disable recursion, round robin, net mask ordering, and automatic scavenging of stale records to improve security and latency.
Configure DNS root-hint servers and optional forwarders; Windows Update keeps root hints current. You can edit or remove them, and a DNS cache of 13 root hints repopulates automatically.
Monitor and test DNS services with built-in tools, running simple and recursive queries, scheduling automatic tests, and validating resolution via nslookup and PowerShell, while logging events for troubleshooting.
Global Name Zone enables single label name resolution across a multi-domain forest in Windows Server 2016, replacing WINS; configure via DNS or PowerShell and note it lacks dynamic updates.
In a split DNS environment, internal users resolve a service name to a private IP via AD-integrated DNS, while external users receive the public IP from DMZ or cloud DNS.
Protect your DNS with cache locking, port randomization via DNS socket pool, DANE and DNSSEC signing, and response rate limiting to defend against cache poisoning, DoS, and impersonation.
Configure DNS clients to use a primary and secondary DNS server, where the primary is queried first and the secondary only if it fails, often via DHCP.
Learn how IPAM, or IP address management, centralizes tracking of the corporate IP space, enables discovery and auditing of IP usage, and manages DHCP and DNS from one centralized place.
Learn ipam modules to locate and manage ip information across the network, perform ipam discovery of dns, dhcp, Active Directory, and network policy servers, and track ip space with auditing.
Explore deployment topologies for IPAM in a multi-site forest, including distributed, centralized, and hybrid models with site-specific and central IPAM servers.
Install and configure IPAM on a domain-joined, single-purpose Windows server 2012 or later, enabling IPv6 tracking and logging for centralized address management.
Refresh server manager to expose IPAM, provision IPAM with Windows internal database or SQL, enable GPO provisioning to create IPAM GPOs for DHCP, DNS, and DC/NPS, and start server discovery.
Refresh server manager, add and manage IPAM servers, provision GPOs with Invoke-IpamGpoProvisioning, and force gpupdate followed by restarts to move from blocked/unspecified to managed/available.
Manage IP address space from the IPAM console, pulling data from DHCP, DNS, MPS servers and AD domain controllers; view address blocks, monitor utilization, and manage virtualized space via BMM.
Learn to manage your DNS name space from the IPAM console in Windows Server 2016, view zones and resource records, edit records, and create CNAME aliases.
Import address spaces into IPAM from csv files, supporting individual addresses, ranges, and blocks, and enforce mandatory fields: address, managed by service, service instance, network ID, start, end, and RIR.
Explore IPAM role based access control to delegate DNS, DHCP, and IP address management, using roles like IPAM DNS Administrator, MSM, ASM Administrator, and IPAM Administrator.
Explore DirectAccess, VPN with IPsec, and routing options to securely connect external users to internal resources, and use web application proxy for dmz-exposed sites.
Use the remote access management console and routing and remote access console to configure direct access, web application proxy, vpn, nat, and route ipv4 networks.
Install the remote access server role via server manager, select the desired role services (direct access and VPN, routing remote access, or web application proxy), and install RSAT tools.
Configure routing and NAT with Routing Remote Access in Windows Server 2016 as a software-based router, connecting LAN segments and internet using static IPv4 routes, IGMP, RIP, and IPv4 NAT.
Learn how the web application proxy provides a reverse proxy to expose internal resources to external users without exposing them to the internet, using AD FS and a perimeter network.
Configure the web application proxy to expose internal applications to external users via the Remote Access Management wizard, set the federation service fs.arrowmar.com for ADFS environment, and apply its certificate.
Describe building an always-on DirectAccess setup with server that connects internal and external networks, domain-joined Windows 7 Ultimate or higher clients, network location server, DNS, PKI certificates, and IPSec tunnels.
Explore DirectAccess deployment options, from wizard setup with IPv6 transition tech to deployment and a network location server, supporting multiple endpoints, NAT, one-time passwords, smart cards, and offline domain joining.
Identify prerequisites for deploying a DirectAccess server, including a domain-joined, non-domain-controller system. Review network topologies—edge with dual NICs, DMZ behind a firewall, or a single NIC with two IPs—before installation.
Explore tunneling protocol options for DirectAccess, converting IPv6 traffic to IPv4 using ISATAP, 6to4, Teredo, and IP over HTTPS, including NAT considerations.
Explore how direct access handles inside and outside clients, including network location server contact, IPSec tunnels, and NRPT routing for internal DNS and resources.
Configure a DirectAccess server with the Remote Access Management wizard, set NIC topology, deploy GPOs for DirectAccess clients, apply WMI filters, and optimize DNS and edge settings.
Explore DFS name space to present multiple shares as a single virtual directory, enabling seamless access and migrations; DFSR uses remote differential compression for efficient, centralized replication.
Create a DFS namespace as a logical architecture with a namespace server and namespace root folders, exposing shares across servers via folder targets.
Choose between stand-alone and domain-based dfs namespaces to manage ntfs volumes and domain membership, with domain-based replication for high availability, stand-alone support for failover clustering, and up to 50,000 folders.
Install DFS via the server manager wizard or PowerShell, adding DFS Namespace and DFS Replication with RSAT tools, first on server one and then on server two.
Configure a domain-based dfs namespace on the server, enable Windows 2008 mode for up to 50,000 targets, then create an accounting folder target with a shared folder and read/write access.
Explore DFS replication (DFSR) for file sharing across headquarters and branches, enabling local access, resilience to link drops, and centralized backup through hub-and-spoke data distribution.
Configure dfs replication to keep a shared accounting folder in sync across two servers. Create a replication group with multiple targets and a full mesh topology.
Learn how BranchCache reduces WAN utilization by caching files locally in branch offices, so users access content from local copies on web, app, or file servers without pulling from headquarters.
BranchCache offers hosted and distributed cache modes; hosted uses a server and hash checks to serve unchanged content from cache, while distributed caches on clients to cut bandwidth.
Install BranchCache feature on the hosted server and BranchCache for network files role service, then configure clients with group policy for hosted or distributed mode and enable http and ws-discovery.
Configure branch cache by installing branch cache feature on the host server via server manager, then enable branch cache for network files on the content server as a role service.
Configure BranchCache across server and client using Group Policy, choosing between hosted or distributed cache, and fine-tuning latency and hosted cache servers for efficient network file access.
Explore how NIC teaming in Windows Server 2016 combines up to 32 NICs into a single logical interface to boost redundancy and aggregated bandwidth for physical and Hyper-V environments.
Set up NIC teaming on Windows Server 2016 via Server Manager, select adapters, configure team mode and dynamic load balancing, add a standby adapter, and use a single IP.
Explore new SMB features in Windows Server 2016, including preauthentication integrity, AES-128-GCM encryption, and cluster dialect fencing for safe rolling upgrades in mixed 2012 R2 environments.
Explore SMB 3.0+ high-availability features in Server 2016, including Hyper-V on SMB, SMB multichannel, SQL Server over SMB, Storage Spaces Direct, and Storage Replica for stretch failover clusters.
Learn how virtual receive side scaling extends network throughput by balancing workload across multiple virtual cores, requiring host level support and enabling virtual rss in vm network settings.
Configure a network controller in Hyper-V to manage physical and virtual networks, enable SET for better throughput and resiliency, and deploy converged network adapters with rdma NICs for unified traffic.
Dynamic VMQ distributes VM network traffic across multiple cores for better throughput in Server 2016, auto-enabled by default and scalable with traffic fluctuations.
Explore SDN, software defined networking, and how a Server 2016 network controller via PowerShell creates a virtualized network layer that moves virtual machines across hosts while maintaining connectivity.
Explore the benefits of software-defined networks over the limitations of physical networks, including flexibility, abstraction of hardware, and scalable deployment across on-premises, private cloud, and public cloud environments.
Explore how software defined networks use network virtualization to create multiple isolated virtual networks over a shared physical network, enabling traffic isolation and IP address space reuse.
Explore how network virtualization enables flexible virtual machine placement across hosts and subnets, IP address reuse for multiple tenants, and live migrations without changing virtual addresses.
Explore how the Windows Server 2016 Network Controller configures virtual and physical networks, including software load balancing, firewall, and RAS gateway management, via southbound and northbound APIs.
Install the network controller on Windows Server 2016 Datacenter edition, ensure a Windows 8+ management client, enable dynamic DNS, and configure certificate-based authentication for non-domain joined virtual machines.
Install the network controller role using PowerShell on a 2016 datacenter server. Configure a high-availability network controller cluster, then deploy and validate the controller via PowerShell commands.
Review how to implement highly available DHCP with built-in failover, use IPAM for a single view of DHCP and DNS servers, and enable direct access for always-on remote connectivity.
Pre-requisites: Experience working with Windows Server 2008 or Server 2012, Windows Server infrastructure enterprise environment. Knowledge of the Open Systems Interconnection (OSI) model. Understanding of core networking infrastructure components and technologies such as cabling, routers, hubs, and switches. Familiarity with networking topologies and architectures such as local area networks (LANs), wide area networks (WANs) and wireless networking. Some basic knowledge of the TCP/IP protocol stack, addressing and name resolution. Experience with and knowledge of Hyper-V and virtualization. Hands-on experience working with the Windows client operating systems such as Windows 8.1 or Windows 10
Description: This course focuses on networking features and functionality available in Windows Server 2016, such as DNS, DHCP, and IPAM implementations. We will review remote access solutions, such as VPN and Direct Access. Additionally, this course will look at DFS and BranchCache solutions, advanced network features and functionality, and understanding of software-defined networking.