Microsoft 70-741 – Networking with Windows Server 2016

Plan and implement IPv4 addressing schemes for networks by configuring each host with compatible IP addresses, subnet IDs, and a proper default gateway within a structured design.

Identify the three components to connect a system to a network—the network interface card, the TCP/IP protocol, and network clients—and how Ethernet or Wi‑Fi enable connectivity and resource sharing.

Learn how IPv4 assigns a unique IP address, uses a subnet mask to separate network and host portions, and relies on a default gateway to reach remote networks.

Explore how IPv4 addresses use 32-bit binary numbers represented in dotted decimal notation as four octets, each ranging from 0 to 255.

Explore how IPv4 addresses use a network ID and host ID, and how a 32-bit subnet mask separates them with continuous ones followed by zeros.

Learn how the default gateway enables off-subnet communication by routing packets to a router on the local subnet, and why gateway presence and accuracy matter.

Convert decimal to binary and back to master binary addressing for IPs. Learn how eight-bit octets and subnet masks define network and host IDs.

Understand how classful IPv4 addressing used first octet ranges to define class a, b, and c with default masks, and why classless routing replaced it.

Explore subnets as smaller network segments with a unique network ID and shared default gateway, connected by router interfaces, enabling multiple subnet IDs from a single IP block.

Learn the subnetting method by borrowing bits from the host ID to extend the subnet mask, creating subnet IDs and multiple subnets, illustrated with 10.0.0.0/8.

Begin with a class a network and its /8 mask, identify subnets and hosts, then extend the mask by 2^N, convert to decimal, and define subnet IDs and ranges.

Explore subnetting of a single network into multiple subnets by extending the subnet mask, calculating subnets with two-to-the-N, and identifying network IDs and host ranges.

Identify public versus private IPv4 addresses and explain why NAT is used, then describe common private ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) and the APIPA 169.254.x.x fallback.

Explore IPv4 network types, from simple, classful private addressing with fixed subnet masks to complex classless schemes using variable length subnet masking (VLS) to optimize subnets.

Explore classless IP addressing with variable length subnet masking to optimize subnets for 80, 30, and 25 hosts, including two-address router links and avoiding waste.

Apply an IP addressing scheme to IPv4 hosts and assign valid addresses for each network segment using Windows Server 2016 and Windows 10 tools.

Configure IPv4 addresses for clients and servers either statically or dynamically, with static addresses manual and error-prone, and dynamic addresses automated by a DHP server.

Configure ipv4 addresses with gui tools like the network and sharing center or settings app, or use PowerShell with new net ip addresses and get net ip address for server.

Explore configuring IPv4 in Windows Server 2016 using GUI options and PowerShell, including static IP setup, DNS settings, and advanced IPv4 properties.

Develop the skills to manage and troubleshoot IPv4 connectivity, diagnose and resolve connectivity issues, and minimize user productivity impact in a Windows Server 2016 network.

Learn how network routing moves packets between subnets using routers and routing tables, including static and dynamic routes, metrics, gateways, interfaces, and routing protocols.

Learn how to read and interpret routing tables in Windows Server 2016, including default routes, network destinations, netmask, gateway, interface, and metric to select the best path.

Explore how routers learn routes via dynamic protocols and configure static routes in Windows Server 2016 using route add, network ID and mask, gateway, and PowerShell net route.

Execute a structured IPv4 troubleshooting methodology to diagnose connectivity issues by identifying affected systems and scope, then determine what is not working and narrow the cause with targeted questions.

Explore essential command line troubleshooting tools for Windows Server 2016 networking, including ipconfig, ping, tracert, route, telnet, and netstat, to verify configuration, diagnose connectivity, and inspect routing.

Explore graphical network troubleshooting tools such as Resource Monitor’s network tab and Event Viewer logs. Learn how graphical user interface diagnostics complement command-line tools for Windows Server 2016 network troubleshooting.

Learn to troubleshoot Windows Server 2016 with Windows PowerShell, using commands like Get-NetAdapter, Get-NetIPInterface, Test-Connection, Test-NetConnection, and Resolve-DnsName in hands-on demos.

Learn to troubleshoot IPv4 using basic command-line tools like ipconfig and Get-NetIPConfiguration, test connectivity with ping and Test-NetConnection, and diagnose DNS and firewall issues with traceroute, netstat, and Resource Monitor.

Capture and analyze network traffic with Microsoft Message Analyzer MMS, a replacement for Network Monitor that monitors connections, captures packets, and inspects contents by source and destination IPs and protocols.

Explain IPv4 limitations and how IPv6 addresses address space. Learn to implement IPv6 for network hosts on Windows Server 2016.

Explore the purpose of IPv6 and how it expands address space beyond IPv4 to enable globally unique public addresses for all devices.

Identify how ipv6 provides public addresses and reduces nat dependence for direct internet access. Recognize hierarchical routing, built-in ipsec security, and improved quality of service.

This lecture compares IPv4 and IPv6, highlighting how IPv6 replaces broadcast with multicast, uses neighbor solicitation and router solicitation/advertisement, and updates DNS records and address space.

Explore the IPv6 address structure, including 128-bit hex notation, eight 16-bit blocks separated by colons, and zero compression, with prefix notation and network vs host identification.

Explore IPv6 address types, focusing on unicast addresses for global, unique local, and link local scopes, while noting that multicast and anycast are auto-assigned; learn transitional technologies for IPv4–IPv6 coexistence.

Examine IPv6 auto configuration, including stateless configuration driven by router advertisements with the subnet prefix and default gateway, plus stateful DHCPv6 use and address states from tentative to invalid.

Configure IPv6 by manual addresses, stateful autoconfiguration with a DHCPv6 server, or stateless autoconfiguration from router advertisements; link-local addresses auto-configure, with global or unique local unicast addresses.

Configure ipv6 on windows servers using tcp ip v6 properties to obtain automatic or static addresses, set prefix length, default gateway, dns, and explore advanced settings and command line options.

Explore how IPv4 and IPv6 must coexist during long-term network transitions, and learn Windows-enabled technologies that support ongoing IPv4/IPv6 coexistence.

Identify IPv4-only, IPv6-only, and dual-stack nodes to clarify their capabilities for IPv6 and IPv4, and note how tunneling shapes node requirements.

Explains how Windows Server 2016 supports IPv4 and IPv6 in a single protocol stack, enabling easier migration and dynamic DNS coexistence with A, AAAA, and PTR records.

Explore IPv6 over IPv4 tunneling by encapsulating IPv6 packets inside IPv4 headers with protocol field 41, define tunnel endpoints, and utilize automated technologies like ISO Tap 64 and Tirado.

Explore ISATAP, an address assignment technology that tunnels IPv6 inside IPv4 to provide unicast IPv6 connectivity on intranets, using ISATAP hosts or routers and auto configuration.

Explore six to four, providing unicast ipv6 connectivity over ipv4 via a router with a public ipv4 interface and an internal ipv6 interface, using 2002 hex addresses, without nat translation.

Learn how Teredo tunnels IPv6 over IPv4 to provide connectivity behind NAT, using a Teredo server to coordinate two clients and allow direct communication after the initial connection.

Learn a multi-step plan to migrate from ipv4 to native ipv6, enabling extended coexistence by upgrading applications, routing, devices, dns infrastructure, and hosts to support ipv6.

Plan, implement, and troubleshoot IPv4 and IPv6 addressing on Windows Server 2016 networks, using essential IP configuration tools, and explore coexistence protocols for seamless transitions.

Review chapter 01 from Microsoft 70-741 – networking with Windows Server 2016 as part of the course chapter review.

Explore the DHCP server role, its core functionality, and the lease generation and renewal process, with a focus on how these concepts apply to Windows Server 2016.

Automates DHCP address assignment on local networks, reducing errors and ensuring clients receive accurate configuration information as they move between networks.

Explore the DHCP components, including the server, scope, lease database, and client service, and learn the lease generation, renewal, and address validation processes.

Learn the DHCP lease generation process from client discovery to acknowledgment, including broadcasts, MAC addressing, server offers, requests, and lease duration with gateways and DNS options.

The eight-day lease renews at 50 percent via a dcpi request to the dhcp server; if renewal fails, the client broadcasts at 87.5 percent and uses a 169.254.x.x address.

Explore DHCP considerations, ensuring client broadcasts reach servers, preventing conflicts with multiple servers, and selecting lease durations based on address space, network type, and mobility.

Transition from overview to deploying dhcp on Windows Server 2016, outlining the components and processes involved. Learn practical steps to deploy dhcp within the Windows Server 2016 environment.

Install and configure a dhp server on Windows Server 2016, remotely or locally, with a static address, then authorize, create scopes and options, and establish security groups.

Windows server 2016 requires dhcp authorization by active directory to start, preventing rogue dhcp servers. Standalone devices may bypass this, so use Microsoft Message Analyzer to locate rogue dhcp servers.

Install the DHCP server role on Windows Server 2016 using Server Manager or PowerShell, including the admin tools. Authorize the server and plan a static IP address, subnet, and scopes.

Create and manage DHCP scopes to define address ranges, including start and end addresses and a subnet mask; use exclusions and reservations with optional DCP options via console or PowerShell.

Configure DHCP options at the server, scope, class, and reservation levels to ensure clients receive default gateway and DNS settings, with bottom-up priority guiding conflicts.

Explore creating and configuring DHCP scopes on Windows Server 2016 via the DHCP console or PowerShell, including scope ranges, exclusions, lease durations, reservations, and scope or server options.

Learn how DHCP relay agents enable clients on separate subnets to obtain IP addresses by intercepting broadcasts and forwarding requests to a DHCP server, with per-subnet scope considerations.

Explore general management aspects of DHCP and troubleshoot to keep the service available, secure, and functional in Windows Server 2016 networks.

Secure DHCP by limiting access, enforcing physical and wireless security (WPA2, 802.1x with a radius server), and enabling DHCP name protection and auditing to prevent rogue servers.

Enable, which is enabled by default, and monitor DHCP auditing to detect unauthorized IP assignments and rogue servers, and regularly review daily audit logs that are overwritten every seven days.

Configure dhcp security and auditing by enabling audit logging, dynamic dns updates, and mac filtering with allow lists; then monitor lease activity via audit logs and PowerShell.

Explore how Windows Server 2016 DHCP uses user and vendor classes and policy-based assignments to allocate IP addresses and options, with examples and configuration via management console or PowerShell.

Explore super scopes that group multiple scopes for administration, enabling multi netting, gradual migration to new subnets, and multicast scopes with madcap addressing for imaging.

Plan high availability for DHCP by identifying single points of failure and using failover clustering with two servers, shared storage, and options like split scopes or DHCP failover.

Windows server 2016 DHCP failover lets two servers service clients in a failover relationship, with hot standby or load sharing modes and configurable options.

Configure dhcp failover on Windows Server 2016 to enable high availability and load balancing between partner servers, using the wizard or PowerShell.

Explore how the DHCP database stores scope, reservations, and leases, including transaction logs and checkpoint files. Learn backup, restore, reconciliation, and moving the database between servers.

Migrate dhcp by installing the dhcp role on the new server, stopping the old server service, exporting the dhcp data, and importing it using netsh or dhcp server import commands.

Diagnose and resolve dhcp issues quickly by identifying address conflicts, such as duplicate leases, overlapping scopes, or incorrect exclusions, and use conflict detection to verify addresses before allocation.

Learn how the dhcp server role in windows server 2016 automatically assigns ip addresses through a four-step process with leases and renewals, deployment via server manager or powershell, and troubleshooting.

Review chapter 02 of Microsoft 70-741 on networking with Windows Server 2016, reinforcing core concepts and exam-focused strategies.

implement dns servers in windows server 2016 by mastering name resolution basics and the functionality dns provides.

Explain basics of name resolution in TCP/IP networks, showing how DNS translates user-friendly names to IP addresses before packets are transmitted; Wins remains an alternative but is no longer required.

Explore the domain name system, a distributed, hierarchical application layer protocol that resolves hostnames to IP addresses via a hierarchical database and authoritative servers.

Describe the dns name space from root domains to root name servers, root hints, and routing queries to top-level domains like dot com, org, and edu.

Explore hostnames and netbios names in windows, where the hostname equals the computer name up to 255 chars and forms an fqdn with the domain, while netbios is deprecated.

Explore how internet name resolution uses a dns client resolver to perform a recursive query, then iterative udp queries to root and dot com name servers to return ip address.

Understand the dns infrastructure, including the dns server and its zones with resource records, route hints and forwarders for resolving queries, and the dns client resolver cache keyed by ttl.

Explore how DNS zones define the namespace a server authoritatively hosts, and review resource records like A, AAAA, CNAME, MX, SRV, SOA, NS, and PTR.

Install the DNS server role via the wizard or install-windowsfeature, then configure clients to use a preferred and alternate DNS server; alternate is used only if the preferred is unavailable.

Demonstrates installing the DNS server role on Windows Server 2016, using server manager and PowerShell, and verifying DNS configuration on a domain controller and remote FS1.

Learn to create and configure DNS zones after installing the DNS server, then build and manage resource records inside zones; most servers are authoritative for part of the namespace.

Learn how DNS resource records identify hosts and services, including A and AAAA, CNAME, MX, NS, and SRV records, and how dynamic updates register and update records in domains.

Explore forward and reverse lookup zones, and compare primary, secondary, stub, and Active Directory integrated zones, including zone transfers and conditional forwarding in Windows environments.

Configure and optimize zone replication across master and secondary servers using full, incremental, and fast zone transfers, SOA settings, and DNS notify to keep zones synchronized.

Create and configure dns zones on Windows Server, including primary, secondary, and stub zones with dynamic updates, zone transfers, and conditional forwarders.

Explain dns name resolution flow from a client query to the local dns server, through dot com servers, to the abc dot com authoritative server, and back with cached results.

Explore how domain name resolution works and can be optimized via caching on clients and servers, ttls from authoritative responses, central caches via caching-only servers, and forwarding.

View and flush the DNS cache on client and server to resolve negative caching and host not found errors.

Configure and troubleshoot DNS caching on clients and servers, view and clear cache entries, and manage forwarders, including standard and conditional forwarders.

Learn how domain delegation splits a DNS zone into subdomains, delegates authority to separate servers, and improves traffic distribution by using authoritative name servers.

Explore how a dns zone hosts multiple domains, differentiate subdomains from domain delegation, and configure authoritative servers to transfer namespace control in Windows Server 2016.

Discover how DNS zone information enhances active directory integration in a Windows environment. Follow the steps to configure it and learn the resulting benefits.

Active directory domain services centralizes authentication and management, enabling single sign-on and group policy. DNS integration uses SRV records and AD-stored DNS data for secure, reliable name resolution.

Explore how SRV service records enable clients to locate domain controllers offering Kerberos authentication by querying DNS, performing LDAP calls, and using site information to route logon traffic.

Demonstrate how DNS SRV records locate domain controllers and services in Active Directory, with dynamic updates, and explain Kerberos, LDAP, and Global Catalog records and their ports.

Active Directory integrated zones enable multi-master DNS replication by storing writable zone copies on domain controllers, boosting availability and enabling secure dynamic updates and ACL-based delegation.

Configure an Active Directory integrated DNS zone by selecting a storage location, understanding application partitions and naming contexts, and choosing domain or forest DNS zones for replication.

Configure active directory integrated zones to enable multi-master replication, security, and fault tolerance in DNS, including storing zones in Active Directory and enabling secure dynamic updates.

Explore advanced DNS settings, including high availability, load balancing, and security. Discuss the scenarios in which organizations would utilize these features.

Explore dns round-robin load balancing, network load balancing, netmask ordering, dns client ordering, and recursion settings that limit resolution to a zone for security purposes.

Explain the global names zone, a single DNS zone for resolving single-label names across multiple domains, created with DNS cmd and managed as a forward lookup zone named global names.

Configure the global names zone to enable single-label resolution across domains. Learn to add records, enable global names, and create an Active Directory integrated primary zone.

Split DNS uses identical domain names for internal and external networks, with two independent DNS servers hosting distinct zones and no zone transfers, directing users to the right resources.

Discover how DNS policies in Windows Server 2016 manipulate query handling and redirect clients to the closest data center for improved availability and traffic management.

Identify client groups and zone records, define subnets to tailor DNS policies, and use recursion scopes and zone scopes to deliver different records per client.

Learn how DNS policies in Windows Server 2016 control name resolution across subnets by mapping records to subnet-specific zone scope and applying a query resolution policy.

Learn DNS security configurations, including cache locking and TTL-based cache control to prevent spoofed cached records, plus DNS socket pool and DNS based authentication of named entities to deter attacks.

Secure DNS responses by digitally signing a zone and its records with DNSSEC, enabling clients to validate responses with signatures and detect tampering, spoofing, or cache manipulation.

Implement DNSSEC by signing zones with the wizard and distributing trust anchors via active directory or stores. Configure the name resolution policy table to govern DNS client behavior for DNSSEC.

Troubleshoot DNS name resolution in Windows networks by mastering the essential tools and stepwise procedures for diagnosing and resolving DNS issues.

Discover how to troubleshoot DNS in Windows Server 2016 using the DNS management console, aging and scavenging, logging, PowerShell commands, DNS CMD, DNS Lookup, and ipconfig to verify records.

Use the Get DNS Server Statistics command to view enhanced server and zone statistics, including zone transfer statistics, queries, and resource records, and compare details with graphical DNS management console.

Learn to use Windows command line tools like ipconfig, display DNS, flush DNS, and register DNS to manage the local DNS cache and records.

Troubleshoot name resolution by evaluating DNS client resolver cache and host file entries on Windows Server 2016. Verify connectivity by IP before hostname resolution to avoid DNS misdiagnosis.

Discover DNS services management, including delegating administrative control, reviewing logs, enabling debug logging, configuring aging and scavenging, and backing up DNS databases via system state backups or DNS CMD.

Troubleshoot DNS issues from improper server or zone configurations and missing resource records, using look up, DNS server diagnostics, recursive queries, and audit logging.

Learn to troubleshoot DNS using PowerShell, including Get-DnsServerStatistics and zone statistics, review zone transfer and update statistics, and configure debugging, event logging, and aging and scavenging for accurate name resolution.

Configure and troubleshoot DNS on Windows Server 2016, covering DNS zones, resource records, Active Directory integration, security features, and advanced settings such as socket pool and cache locking.

Review chapter 03 concepts for Microsoft 70-741 networking with Windows Server 2016, reinforcing core networking fundamentals and exam-ready topics.

Explore IPAM overview, including its functionality, architecture, deployment requirements and considerations, and its integration with System Center Virtual Machine Manager to manage virtual address spaces in private clouds.

Explore IP address management (IPAM) for discovering, auditing, and allocating addresses across large networks, with four modules: discovery, address space management, multi-server management, and operational auditing.

Explore IPAM benefits for managing large IPv6 address spaces and subnets, including space planning, allocation, utilization, and DHCP/DNS records management.

Explore the new Windows Server 2016 IPAM features, including enhanced IP address management, DNS and DHCP integration, zone and record management, forest-wide scalability, and Windows PowerShell-based RBAC for IPAM objects.

Explore IP addressing architecture with the EPAM server and EPAM client, covering data collection, databases, and role-based access control, plus deployment topologies: distributed, centralized, and hybrid for scalable IP addressing.

Learn IPAM deployment requirements for Windows Server 2016, including domain member, single purpose server, no DNS or DHP roles, IPv6 enablement, domain account login, auditing, and hardware needs.

Design ipam deployments by considering forest trust, discovery scopes, and distributed or hybrid models, including central management server options and IP address utilization.

Explore IPAM deployment and administration in Windows Server 2016, review IPAM capabilities, and evaluate architectural design options for centralized address management.

Implement IPAM by planning the deployment, provisioning servers, configuring discovery and its domain-based scope, and deploying the IPAM client to manage servers locally or remotely.

Learn to install and provision the IPAM feature in Windows Server 2016, select the database, use group policy provisioning, and configure server discovery to monitor DHCP, DNS, and domain controllers.

IPAM administration uses role-based access control to manage EPAM across multiple domains, covering eight built-in administrator roles and custom roles, access scopes, and access policies in the management console.

Utilize built-in role-based security groups to manage the EPAM infrastructure, such as DNS administrator, MSM administrator, and EPAM administrator, illustrating distributed administration in complex networks.

Explore administering IP address management with role-based access control, creating custom roles and scopes, and applying access policies to manage DNS and server operations.

Configure IPAM options to provision domain resources, linking three rows to the domain root and using a chosen prefix via the IPAM GPO provisioning command. Provisioning creates firewall rules and scheduled tasks for DHCP, DNS, domain controllers, and network policy servers, enabling monitoring and IP address tracking across the environment.

Manage DNS and DHCP servers centrally with EPAM IPAM, creating zones, resource records, conditional forwarders, and scopes, and configure Active Directory integration and failover options.

Learn how IP address management with IPAM controls address spaces, maintains an accurate inventory of in-use and static addresses, and provides configuration, monitoring, and reporting capabilities.

The EPAM feature manages IP address space with tracking, utilization, auditing, and reporting; it discovers spaces, imports CSV data, detects overlaps, finds ranges, and creates DHCP reservations and DNS records.

Explore how to view and manage IP addressing via blocks, ranges, addresses, inventory, and address range groups, with IPAM mapping ranges to blocks automatically.

Monitor dhcp and dns servers automatically and manage addresses via the console. View servers by interfaces and subnets, monitor scope utilization, zones, and group servers by geography or business units.

EPAM automatically registers IP address ranges by scope for managed servers; manually add or import ranges outside scopes or on non Microsoft DHP servers using a CSV with required fields.

Use EPAM to find and allocate available IP addresses for managed servers, verify with ping and DNS PTR checks, and reclaim addresses by deleting them from the EPAM database.

Demonstrates how IP address management (IPAM) handles your DNS and DHCP servers and address space, including creating and importing IP blocks, monitoring utilization, and generating reports for large networks.

Explore IPAM in Windows Server 2016, covering its management of address space, DNS and DHCP servers, deployment prerequisites and provisioning, and note its suitability for large networks.

Review chapter 04 content for Microsoft 70-741 networking with Windows Server 2016 to reinforce core networking topics.

Explore the concepts of remote access and the remote access technologies offered in Windows Server 2016, establishing foundational knowledge for configuring remote connectivity.

Define remote access as connecting from a remote location to a corporate network, distinguishing remote node from remote control, with remote node for general access and remote desktop for administration.

Explore the remote access server role in Windows Server 2016, covering direct access as a VPN alternative, traditional VPNs, software-based routing, and web application proxy publishing.

Install remote access server role via server manager or PowerShell to enable remote access, then configure VPN, direct access, and Web application proxy using Remote Access Management console and PowerShell.

Install remote access role on Windows Server 2016 via Server Manager or PowerShell, then configure direct access, VPN, routing, and the web application proxy with the remote access management console.

Configure remote access using the wizard-based console to set up direct access, VPN, or web application proxy, then monitor with the dashboard, operation status, remote client status, and reporting.

Centralize authentication, authorization, and accounting for remote access with the network policy and access services, using the radius server and radius proxy.

Configure NPS policies in Windows Server 2016 to control connection requests, proxy them when needed, and apply conditions, constraints, and settings that determine authentication and authorization for remote access.

Explore how a public key infrastructure strengthens remote access authentication with digital certificates issued by trusted certificate authorities, including templates, Active Directory Certificate Services, and VPN trust.

Learn how Windows Server 2016 can act as a software-based router using routing and remote access service, enabling LAN-to-LAN routing, NAT, static routes, and rip v2 for internal networks.

Explore why network address translation is essential across edge devices and how Windows Server 2016 performs NAT, translating private IPs to a public address and ports via a translation table.

Explore the web application proxy as a remote access option on Windows Server 2016, part of the remote access role.

The web application proxy provides reverse proxy access to internal resources and uses AD FS to pre-authenticate internet users, enabling federated single sign-on across networks.

Compare ETFs preauthorization with AD FS and pass-through pre authentication via the web application proxy. ETFs enables workplace join, single sign-on, multifactor authentication, and authorization claim rules to control access.

Install the remote access role, then configure the web application proxy via the wizard, and publish web apps or remote desktop gateways with certificate, external URL, preauthorization, and backend details.

Explore planning and implementing vpn connections on Windows Server 2016, a traditional remote access method, and understand how vpn delivers secure remote connectivity.

Learn how virtual private networks secure remote access by tunneling private IP packets over the public internet. Differentiate remote access from site-to-site VPNs, where routers interlink branches.

Explain how vpn connections use encapsulation to wrap packets in a remote access protocol, authenticate identities, and ensure data integrity and confidentiality through encryption.

Explore the four tunneling protocols in Windows Server 2016, including PPTP, L2TP/IPsec, SSTP, and IKEv2. Learn encapsulation, encryption options, port requirements, and firewall considerations for secure, compatible VPN deployment.

Explore remote access authentication protocols, from insecure pap to secure chap with md5 hashing, mutual authentication with msn v2, and extensible authentication protocol plus certificate-based machine authentication.

Automatically reestablishes vpn connections when connectivity returns on windows server 2016, delivering seamless, transparent connectivity within a 60-minute default window for the icv to protocol.

Learn how app-triggered VPN automatically connects a VPN profile when specified apps start, using the AD VPN connection trigger, and why split tunneling (not on domain members) is required.

Configure a vpn server by installing the remote access server role and using the getting started wizard, then set up adapters and choose static pool or relay agent address allocation.

Examine vpn configuration options after installing the vpn server, including static packet filters, port controls, logging levels, virtual vpn ports, and connection manager profiles with an executable installer.

Explore configuring a windows server 2016 vpn server via the remote access console, enabling routing and remote access, defining ip address ranges, authentication options, and firewall rules.

Learn about Direct Access in Windows Server 2016 as a VPN alternative that enables flexible remote connectivity for users and admins, creating secure behind-the-scenes tunnels to the corporate network.

DirectAccess provides seamless, secure access to corporate resources without a VPN, automatically adjusting when users are inside or outside the network, with simplified deployment via the getting started wizard.

Explore direct access components, including the edge server with two NICs and IPsec tunneling, and how the network location server uses DNS to determine client location and access internal resources.

Explore access deployment options from simple deployments using the getting started wizard to advanced configurations with multiple endpoints, load balancing, behind a network address translation device, and off premise provisioning.

Join an active directory domain, avoid domain controller deployment, and ensure at least one network adapter with a one- or two-adapter topology behind a Windows firewall enabled for all profiles.

Explore tunneling protocol options for direct access in Windows Server 2016, including ISATAP for intranets, six to four for public addresses, and IPv6 packets tunneled inside SSL via IP HTTPS.

Inside the network, a direct access client resolves the network location server FQDN, validates the certificate via CRL, signs into Active Directory, and activates domain firewall profiles for access.

Explain how external DirectAccess clients use the name resolution policy table to route internal DNS and domain authentication through an IPsec infrastructure tunnel to the DirectAccess server, with split tunneling.

Explore the components of direct access and implement it in both simple and advanced scenarios to support effective deployment.

Install the remote access role and use the getting started wizard to configure simple direct access or VPN deployments, while recognizing that simple deployments may not suit all organizations.

The getting started wizard configures direct access server and client settings, defines roles, and sets IPv6 prefixes and Kerberos authentication for trusted connections.

Self-signed certificates limit multisite deployment and multifactor authentication; external CRL requirement; no high availability for network location server; Windows 7 needs PKI.

Use the remote access setup wizard to access advanced DirectAccess options for scalable PKI infrastructure, multi-site topologies, and highly available server deployments across diverse networks.

Establish high availability by adding redundancy for direct access and web servers, using network load balancing or hardware load balancers, with identical configurations to avoid single points of failure.

Learn how to deploy direct access in multisite environments to reduce latency, enable automatic failover, and manage server assignment with IPv6 on the internal network.

Configure a public key infrastructure for direct access by deploying an internal certificate authority, creating customized templates, publishing the CRL, and distributing client certificates for IP encryption.

Configure client certificates for IP authentication via a gpo linked to direct access computer accounts, monitor issuance, and enable a one-time password with a one-time password request signing certificate template.

Configure internal network topologies for direct access with edge or perimeter deployment, dual network adapters, plan IPv6/IPv4 addressing, including two consecutive public IPv4 addresses for Tirado tunneling and firewall ports.

Configure DNS for DirectAccess by registering internal names, setting DNS suffixes and NRPT via group policy, and creating exemption rules for split-brain DNS to handle internet versus intranet resolution.

Monitor direct access connectivity with the remote access management console, view the dashboard for component health and client status, and access remote access reporting and server load statistics for troubleshooting.

Explore remote access options in Windows Server 2016. Learn web application proxy with adfs functionality, vpn deployment, and direct access, including automatic network location detection managed via wizard or console.

Review key networking topics from chapter 5 of the Microsoft 70-741 course on Windows Server 2016.

Explore networking for branch offices, including connectivity and Active Directory Domain Services. Learn how to deploy Active Directory Domain Services, DNS, and file and print services for those sites.

Branch offices face unreliable or slow land links and limited on-site infrastructure, making branch cache and Windows Server 2016 features essential to reduce dependency on head office connectivity.

Assess branch office networking by weighing security, including physical security and encryption over a wide area network, reliability, performance, compliance, and budget, to decide local hosting or centralized data center.

Compare leased lines and internet-based vpn links for branch connectivity, balancing bandwidth, latency, and reliability, while using quality of service and the remote access role for secure connections.

Analyze where to place domain controllers and DNS for branch offices to ensure reliable Active Directory access and resource availability, balancing LAN and WAN replication, security, and local infrastructure.

Understand read-only domain controllers (RODC) in branch offices, with limited attribute replication, LDAP and Kerberos authentication, and security benefits from administrative role separation and password caching policies.

Install a read-only domain controller in a branch office using the promotion wizard, then configure password replication, read-only dns, and a read-only global catalog for cached passwords.

Explore presentation virtualization and virtual desktop infrastructure, running applications on a server and displaying them to remote clients via remote desktop, reducing bandwidth.

Remote desktop services on Windows Server 2016 enable access to remote desktops or applications via a session host, supporting Hyper-V based VDI and session virtualization with centralized app delivery.

Learn how file services improve branch office access with DFS replicas and branch cache, and how SMB 3.0 features like encryption, multi-channel, and directory leasing reduce round trips.

Branch office direct printing uses Windows Server 2016 as a print server to send jobs directly to nearby printers, reducing traffic and enabling centralized driver management and offline printing.

Master the distributed file system role in Windows Server 2016, enabling DFS namespace and DFS replication to provide high availability and localized access for branch office shared folders.

Introduce the distributed file system in Windows Server 2016, enabling logical hierarchies of shared folders with multiple targets and DFS replication for high availability and localized, fast access across locations.

Learn about the two primary dfs components: the namespace, a virtual folder hierarchy, and dfs replication that keeps folders synchronized across servers, whether domain-based or standalone.

Compare domain-based and standalone distributed file system namespaces, showing how domain-based offers high availability and access-based enumeration, while standalone lacks built-in high availability and can use a failover cluster.

Install the roll service, create a DFS namespace with domain-based or standalone type, then add folders and multiple targets, enable DFS replication, and configure referral ordering and failover.

Learn how to create and manage DFS namespaces and replication groups in Windows Server 2016, using domain admins or delegated rights within the DFS management console.

Create and manage a DFS namespace to organize shared folders across servers, configure domain-based namespaces with replication, and set folder targets and permissions via the DFS management console.

Discover how DFS replication keeps folders synchronized across servers using remote differential compression and cross-file remote differential compression, with a staging folder and version vector exchange to resolve conflicts.

Dfs enables sharing and replicating files across branch offices to a hub site for local access, with replication after close, not for databases, suggesting SharePoint for strict version control.

Explore how to configure DFS replication by adding multiple folder targets across servers, creating a replication group, and setting topology, schedule, and bandwidth throttling for reliable access.

Explore how data deduplication and DFS replication on Windows Server 2016 optimize capacity, scalability, and performance, with checks for integrity and configurable namespace and bandwidth options.

Clone the DFS database for initial replication to reduce bandwidth, then export and import the DFS clone, and use PowerShell commands to restore files and volume configuration XML files.

Learn to monitor and troubleshoot dfs in Windows Server 2016 using the dfs management console, diagnostics reports, and the new PowerShell dfs replication module to verify topology and replication.

Explore Branch Cache, a feature for branch offices in Windows Server 2016 that was originally introduced in earlier versions.

BranchCache reduces link utilization by caching frequently accessed files on local branch resources, on clients or a branch server, speeding access to web content, SMB shares, and updates via BITS.

Scale branch cache in Windows Server 2016 by supporting hosted cache servers in location, using the extensible storage engine and a single gpu to enable host and distributed mode switching.

Explore BranchCache modes based on server presence: hosted cache centralizes the cache on a server for high availability, while distributed cache stores the cache on clients for small offices.

Learn how data retrieval uses branch cache to authorize access and fetch files by using hashes, local or host caches, and multicast or host cache servers, reducing network usage.

Install the branch cache feature on web servers and branch cache for network files roll service on host server; enable group policy, hash publication, shares, and firewall rules.

Configure and enable branch cache on a file server to reduce link utilization by caching content locally. Install the feature, publish hashes, and set policy for distributed or hosted modes.

Explore configuring branch office networking with Windows Server 2016, using DFS to create a single logical folder hierarchy across locations, replicate folders, and BranchCache to minimize WAN traffic.

Chapter 06 review for Microsoft 70-741 – networking with Windows Server 2016 delivers a concise recap of the chapter, reinforcing the course's networking focus within this Windows Server 2016 module.

Explore the network features introduced by Windows Server 2016 for high performance, and understand how these enhancements optimize throughput, reliability, and scalability.

Explore high performance networking features in Windows Server 2016, including SMB 3.1.1, QoS implementation, and receive side scaling with receive segment coalescing (RSS and RC) to improve data center performance.

Explore NIC teaming in Windows Server 2016 to combine multiple network adapters into a single virtual interface, boosting redundancy and aggregated bandwidth for host and virtual machines.

Demonstrates configuring NIC teaming in Windows Server 2016 to increase throughput and provide failover, with nicknaming, VLANs, dynamic/static IPs, and options for active or standby adapters.

Adds AES-GCM encryption and SHA-512 pre-auth integrity to SMB 3.1.1, enabling secure, high-performance communication; supports VM data on SMB 3.0+ shares and requires Windows Server 2012+ with 1 Gbps.

Explore advanced SMB 3.1.1 features in Windows Server 2016, including pre-authentication integrity and enhanced encryption, plus multichannel, Hyper-V over SMB, and storage replica and storage spaces direct.

Discover how quality of service (QoS) manages and prioritizes network bandwidth for applications through packet classification and tagging, per-VM allocations, and policy-based QoS in Windows Server 2016.

Enable receive side scaling (RSS) to balance network processing loads across multiple CPU cores on Hyper-V hosts and virtual machines, using VMQ-enabled adapters to boost VM performance.

Learn how receive side coalescing (RSC) offloads network processing to reduce CPU time on the receive path by coalescing incoming packets.

Explore advanced networking features in Hyper-V on Windows Server 2016 that boost performance, scalability, and high availability in virtualized environments.

Explore virtual switch improvements in Windows Server 2016, including external, internal, and private switch types, extended port ACLs, load balancing, coexistence with non-Microsoft extensions, network function virtualization, and Network Controller.

Explore the extensible Hyper-V switch that connects virtual machines to the physical network, enabling vendor extensions, standard filtering APIs, and policy-driven management for secure, traceable networking.

Understand SR-IOV, a single root I/O virtualization feature that lets multiple VMs share PCI Express hardware, with virtual functions linked to a physical function to boost Hyper-V network performance.

Dynamic VMQ distributes traffic across physical CPU cores, assigns queues to each VM, uses an adaptive algorithm to scale CPU affinity, and is enabled by default in Windows Server 2016.

Learn advanced network adapter features in Windows Server 2016, including software defined networking, VM switches via System Center or the VM switch command, NIC teaming, and NFV enhancements.

Enable NIC teaming in virtual machines on Windows Server 2016 using multiple virtual adapters to achieve fault tolerance and load balancing within the guest operating system.

Explore software-defined networking and learn how it bypasses physical device limitations to enable dynamic, centralized network management.

Learn how software defined networking centralizes control of physical and virtual networks across data centers and clouds, with virtual networks, policies, and the network controller enabling on-demand, hybrid multi-tenant infrastructure.

Software defined networking addresses finite resources, bottlenecks, and security risks by shifting traffic to cloud-based infrastructure. It abstracts hardware into software, enabling flexible, scalable, on-demand growth.

Plan prerequisites for software defined networking by confirming network and Windows Server 2016 Hyper-V hosts, including access to routers and a virtual switch with a physical adapter and management IP.

Explore the logical networks in software defined networking, including management networks, gateways and software load balancers, transit networks, and public and private vip networks, with PowerShell and virtual machine manager.

Explore network virtualization, which enables creating virtual networks that are logically isolated on the same physical infrastructure, building on software defined networking.

Discover how network virtualization creates multiple logically isolated virtual networks on a physical infrastructure, enabling software defined networking and using two addresses per VM to separate logical from physical topology.

Network virtualization provides an abstraction layer for flexible virtual machine placement and decoupled IP addresses. It enables live migration across subnets, multi-tenant isolation, and seamless IaaS integration.

Explore how Windows Server 2016 network virtualization uses generic route encapsulation to separate customer and provider addresses, enabling VM migration while the host reports the provider address on physical network.

Review chapter 07 topics for the Microsoft 70-741 networking with Windows Server 2016 course, reinforcing core networking concepts and exam-focused practice.

Learn Windows Server 2016 networking to prepare for 70-741, covering IP addressing, DHCP, DNS, and IPAM. Explore direct access, VPN, web application proxy, and Hyper-V networking for branch offices.