Contents at a Glance
by Chris Amaris, Andrew Abbate, Michael Noel, Omar Droubi, Guy Yardeni, Jeffrey Sha
Windows Server 2016: Unleashed
- Cover Page
- Title Page
- Copyright Page
- Contents at a Glance
- Table of Contents
- Foreword
- About the Authors
- Dedication
- Acknowledgments
- We Want to Hear from You!
- Reader Services
- Introduction
- Part I: Windows Server 2016 Overview
- Chapter 1. Windows Server 2016 Technology Primer
- Windows Server 2016 Defined
- When Is the Right Time to Migrate?
- Versions of Windows Server 2016
- Improvements for Continuous Availability
- Enhancements for Flexible Identity and Security
- Increased Support for Standards
- Enhancing the Windows Server 2016 Security Subsystem
- Server Core and Minimized User Interface
- Dynamic Access Control
- DNSSEC—Zone Signing
- Transport Security Using IPSec and Certificate Services
- Security Policies, Policy Management, and Policy Enforcement Tools
- BitLocker for Server Security
- Windows Rights Management Services
- Active Directory Unification for Various Directory Services
- Enabling Users to Work Anywhere
- Simplifying the Datacenter
- Server Manager Tool
- Improvements in Distributed Administration
- PowerShell for Administrative Tasks
- Active Directory Administrative Center
- Storage Spaces
- Improvements in Group Policy Management
- IP Address Management
- Managing Windows 2016 with Performance and Reliability Monitoring Tools
- Leveraging the Best Practice Analyzer
- Windows Deployment Services Integration
- Distributed File System
- Addition of Migration Tools
- Identifying Which Windows Server 2016 Service to Install or Migrate to First
- Summary
- Best Practices
- Chapter 2. Planning, Prototyping, Migrating, and Deploying Windows Server 2016
- Determining the Scope of Your Project
- Identifying the Business Goals and Objectives to Implement Windows Server
- Identifying the Technical Goals and Objectives to Implement Windows Server
- The Discovery Phase: Understanding the Existing Environment
- The Design Phase: Documenting the Vision and the Plan
- The Migration Planning Phase: Documenting the Process for Migration
- The Prototype Phase: Creating and Testing the Plan
- The Pilot Phase: Validating the Plan to a Limited Number of Users
- The Migration/Implementation Phase: Conducting the Migration or Installation
- Summary
- Best Practices
- Chapter 3. Installing Windows Server 2016 and Server Core
- Planning for a Server Installation
- Installing a Clean Version of Windows Server 2016 Operating System
- Customizing the Language, Time, Currency, and Keyboard Preferences
- The Install Now Page
- Selecting the Type of Operating System to Install
- Accepting the Terms of the Windows Server 2016 License
- Selecting the Type of Windows Server 2016 Installation
- Selecting the Location for the Installation
- Finalizing the Installation and Customizing the Configuration
- Upgrading to Windows Server 2016
- Understanding Server Core Installation
- Managing and Configuring a Server Core Installation
- Launching the Command Prompt in a Server Core Installation
- Changing the Server Core Administrator’s Password
- Changing the Server Core Machine Name
- Assigning a Static IPV4 IP Address and DNS Settings
- Adding the Server Core System to a Domain
- Activating the Server Core System
- Using SCONFIG to Configure a Server Core Installation
- Server Core Roles and Feature Installations
- Installing the Active Directory Domain Services Role
- Performing an Unattended Windows Server 2016 Installation
- Nano Server
- Summary
- Best Practices
- Chapter 1. Windows Server 2016 Technology Primer
- Part II: Windows Server 2016 Active Directory
- Chapter 4. Active Directory Domain Services Primer
- The Evolution of Directory Services
- Understanding the Development of AD DS
- AD DS Structure
- Outlining AD DS Components
- Understanding Domain Trusts
- Defining Organizational Units
- Outlining the Role of Groups in an AD DS Environment
- Understanding AD DS Replication
- Outlining the Role of DNS in AD DS
- Outlining AD DS Security
- Getting Familiar with AD DS Features in Windows Server 2016
- Restoring Deleted AD DS Objects Using the Active Directory Recycle Bin
- Restarting AD DS on a Domain Controller
- Implementing Multiple Password Policies per Domain
- Auditing Changes Made to AD Objects
- Reviewing Additional Active Directory Services
- Examining Additional Windows Server 2016 AD DS Features
- Reviewing Legacy Windows Server Active Directory Improvements
- Summary
- Best Practices
- Chapter 5. Designing a Windows Server 2016 Active Directory
- Understanding AD DS Domain Design
- Choosing a Domain Namespace
- Examining Domain Design Features
- Choosing a Domain Structure
- Understanding the Single-Domain Model
- Understanding the Multiple-Domain Model
- Understanding the Multiple Trees in a Single-Forest Model
- Reviewing the Federated-Forests Model
- Understanding the Empty-Root Domain Model
- Understanding the Placeholder Domain Model
- Understanding the Special-Purpose Domain Model
- Renaming an AD DS Domain
- Summary
- Best Practices
- Chapter 6. Designing Organizational Unit and Group Structure
- Chapter 7. Active Directory Infrastructure
- Understanding AD DS Replication in Depth
- Understanding Active Directory Sites
- Windows Server 2016 Site Functionality
- Associating Subnets with Sites
- Creating Site Links
- Turning Off Site Link Bridging
- Understanding the Knowledge Consistency Checker and the Intersite Topology Generator
- Determining Site Cost
- Utilizing Preferred Site Link Bridgeheads
- Deploying AD DS DCs on Server Core
- Planning Replication Topology
- Mapping Site Design into Network Design
- Establishing Sites
- Choosing Between One Site or Many Sites
- Optimizing Subnet Site Associations
- Determining Site Links and Site Link Costs
- Choosing Replication Scheduling
- Choosing SMTP or IP Replication
- Windows Server 2016 Replication
- DC Promotion from Media
- Identifying Linked-Value Replication/Universal Group Membership Caching
- Removing Lingering Objects
- Disabling Replication Compression
- Understanding How AD Avoids Full Synchronization of Global Catalog with Schema Changes
- The Intersite Topology Generator Algorithm
- Windows Server 2016 IPv6 Support
- Detailing Real-World Replication Designs
- Deploying Read-Only Domain Controllers
- Deploying a Clone Virtualized DC
- Summary
- Best Practices
- Chapter 8. Creating Federated Forests and Lightweight Directories
- Chapter 4. Active Directory Domain Services Primer
- Part III: Networking Services
- Chapter 9. Domain Name System, WINS, and DNSSEC
- The Need for DNS
- Getting Started with DNS on Windows Server 2016
- Resource Records
- Understanding DNS Zones
- Performing Zone Transfers
- Understanding DNS Queries
- Other DNS Components
- Understanding the Evolution of Microsoft DNS
- DNS in Windows Server 2016
- DNS in an Active Directory Domain Services Environment
- Troubleshooting DNS
- Using the DNS Event Viewer to Diagnose Problems
- Using Performance Monitor to Monitor DNS
- Client-Side Cache and HOST Resolution Problems
- Using the Nslookup Command-Line Utility
- Using the Ipconfig Command-Line Utility
- Using the Tracert Command-Line Utility
- Using the DNSCmd Command-Line Utility
- Managing DNS with PowerShell
- Secure DNS with DNSSEC
- Reviewing the Windows Internet Naming Service
- Installing and Configuring WINS
- Planning, Migrating, and Maintaining WINS
- Summary
- Best Practices
- Chapter 10. DHCP, IPv6, IPAM
- Understanding the Components of an Enterprise Network
- Exploring DHCP
- Exploring DHCP Changes in Windows Server 2016
- Enhancing DHCP Reliability
- Exploring Advanced DHCP Concepts
- Securing DHCP
- IPv6 Introduction
- Configuring IPv6 on Windows Server 2016
- IP Address Management
- Installing the IPAM Server and Client Features
- Exploring the IPAM Console
- Summary
- Best Practices
- Chapter 11. Internet Information Services
- Chapter 9. Domain Name System, WINS, and DNSSEC
- Part IV: Security
- Chapter 12. Server-Level Security
- Defining Windows Server 2016 Security
- Deploying Physical Security
- Using the Integrated Windows Firewall with Advanced Security
- Hardening Servers
- Examining File-Level Security
- Malware and Backup Protection
- Windows Server Update
- Understanding the Background of WSUS: Windows Update
- Understanding the Automatic Updates Client
- Understanding the Development of Windows Server Update Services
- Examining WSUS Prerequisites
- Installing WSUS on a Windows Server 2016 Server
- Automatically Configuring Clients via Group Policy
- Deploying Security Patches with WSUS
- Summary
- Best Practices
- Chapter 13. Securing Data in Transit
- Introduction to Securing Data in Transit in Windows Server 2016
- Deploying a Public Key Infrastructure with Windows Server 2016
- Understanding Active Directory Certificate Services in Windows Server 2016
- Active Directory Rights Management Services
- Using IPsec Encryption with Windows Server 2016
- Summary
- Best Practices
- Chapter 14. Network Policy and Access Services, Routing and Remote Access and DirectAccess
- Chapter 12. Server-Level Security
- Part V: Migrating to Windows Server 2016
- Chapter 15. Migrating to Active Directory 2016
- Beginning the Migration Process
- Big Bang Migration
- Phased Migration
- Migrating DCs
- Preparing the Forest and Domains Using Adprep
- Upgrading Existing Domain Controllers
- Replacing Existing Domain Controllers
- Moving Operation Master Roles
- Retiring Existing Windows Server DCs
- Retiring “Phantom” DCs
- Upgrading Domain and Forest Functional Levels
- Moving AD-Integrated DNS Zones to Application Partitions
- Multiple Domain Consolidation Migration
- Understanding ADMT Functionality
- Using ADMT in a Lab Environment
- ADMT v3.2 Installation Procedure
- ADMT Domain Migration Prerequisites
- Exporting Password Key Information
- Installing PES on the Source Domain
- Setting Proper Registry Permissions
- Configuring Domains for SID Migration
- Migrating Groups
- Migrating User Accounts
- Migrating Computer Accounts
- Migrating Other Domain Functionality
- Summary
- Best Practices
- Chapter 16. Compatibility Testing
- The Importance of Compatibility Testing
- Preparing for Compatibility Testing
- Researching Products and Applications
- Verifying Compatibility with Vendors
- Microsoft Assessment and Planning Toolkit
- Lab-Testing Existing Applications
- Documenting the Results of the Compatibility Testing
- Determining Whether a Prototype Phase Is Required
- Summary
- Best Practices
- Chapter 15. Migrating to Active Directory 2016
- Part VI: Windows Server 2016 Administration and Management
- Chapter 17. Windows Server 2016 Administration
- Chapter 18. Windows Server 2016 Group Policies and Policy Management
- Group Policy Overview
- Group Policy Processing: How Does It Work?
- Local Group Policies
- Domain-Based Group Policies
- Security Templates
- Understanding Group Policy
- Group Policy Objects
- GPO Storage and Replication
- The Group Policy Central Store
- Starter GPOs
- Policy Settings
- Preference Settings
- GPO Links
- Group Policy Link Enforcement
- Group Policy Inheritance
- Group Policy Block Inheritance
- Group Policy Order of Processing
- GPO Filtering
- Group Policy Loopback Processing
- Group Policy Slow-Link Detection and Network-Location Awareness
- Group Policy Policies Node
- Group Policy Preferences Node
- Policy Management Tools
- Designing a Group Policy Infrastructure
- GPO Administrative Tasks
- Installing the Group Policy Management Tools
- Creating a GPO Central Store
- Creating and Using Starter GPOs
- Creating New Domain Group Policies
- Creating and Configuring GPO Links
- Managing GPO Status
- Managing GPO Security Filtering
- Creating and Linking WMI Filters to GPOs
- Managing GPO Link Order of Processing
- Viewing GPO Settings and Creating Reports
- Backing Up and Restoring Domain GPOs
- Group Policy Modeling Operations
- Troubleshooting Group Policies
- GPO Administrative Delegation
- Summary
- Best Practices
- Chapter 19. Windows Server 2016 Management and Maintenance Practices
- Going Green with Windows Server 2016
- Server Manager Dashboard
- Managing Windows Server 2016 Roles and Features
- Creating a Server Group
- Viewing Events
- Server Manager Storage Page
- Auditing the Environment
- Managing Windows Server 2016 Remotely
- Common Practices for Securing and Managing Windows Server 2016
- Keeping Up with Service Packs and Updates
- Maintaining Windows Server 2016
- Summary
- Best Practices
- Chapter 20. Automating Tasks Using PowerShell Scripting
- Chapter 21. Documenting a Windows Server 2016 Environment
- Benefits of Documentation
- Types of Documents
- Planning to Document the Windows Server 2016 Environment
- Knowledge Sharing and Knowledge Management
- Windows Server 2016 Project Documents
- Administration and Maintenance Documents
- Network Infrastructure
- Disaster Recovery Documentation
- Change Management Procedures
- Performance Documentation
- Baselining Records for Documentation Comparisons
- Routine Reporting
- Security Documentation
- Summary
- Best Practices
- Part VII: Remote and Mobile Technologies
- Chapter 22. Server-to-Client Remote and Mobile Access
- Remote Access in Windows Server 2016
- VPN in Windows Server 2016
- RAS System Authentication Options
- VPN Protocols
- DirectAccess in Windows Server 2016
- Choosing Between Traditional VPN Technologies and DirectAccess
- Setting Up the Unified Remote Access Role
- DirectAccess Scenario
- VPN Scenario
- Monitoring the Remote Access Server
- Summary
- Best Practices
- Chapter 23. Remote Desktop Services
- Why Implement Remote Desktop Services?
- How Remote Desktop Works
- Understanding the Name Change
- RDS Roles
- Configuration Options and Fine-Tuning Terminology
- Planning for RDS
- Deploying RDS
- Deploying Virtual Desktops
- Enabling RemoteFX
- Securing and Supporting RDS
- Securely Building Remote Session Services
- Segmenting Resources
- Securing RDS with GPOs
- Network Level Authentication
- Changing the RDP Port
- Remotely Managing a Remote Desktop Session
- Managing RDS with PowerShell
- Group Policy for RD Session Host Servers
- Applying Service Packs and Updates
- Performing Disaster Recovery
- Summary
- Best Practices
- Chapter 22. Server-to-Client Remote and Mobile Access
- Part VIII: Desktop Administration
- Chapter 24. Windows Server 2016 Administration Tools for Desktops
- Managing Desktops and Servers
- Operating System Deployment Options
- Windows Server 2016 Windows Deployment Services
- Installing Windows Deployment Services
- Customizing Boot Images
- Creating Discover Images
- Pre-Creating Active Directory Computer Accounts for WDS (Prestaged Systems)
- Creating Custom Installations Using Capture Images
- Automating Image Deployment Using Unattend Files
- General Desktop Administration Tasks
- Summary
- Best Practices
- Chapter 25. Group Policy Management for Network Clients
- The Need for Group Policies
- Windows Group Policies
- Group Policy Feature Set
- Planning Workgroup and Standalone Local Group Policy Configuration
- Planning Domain Group Policy Objects
- Managing Computers with Domain Policies
- Configuring Preference Item-Level Targeting
- Managing Users with Policies
- Managing Active Directory with Policies
- Summary
- Best Practices
- Chapter 26. Storage
- Chapter 24. Windows Server 2016 Administration Tools for Desktops
- Part IX: Fault-Tolerance Technologies
- Chapter 27. File System Management
- File System Access Services and Technologies
- Windows Folder Sharing
- DFS Namespaces and Replication
- WWW Directory Publishing
- File Transfer Protocol Service
- Server and Client for NFS
- Volume Shadow Copy Service
- BranchCache for Network Files
- Data Deduplication Service
- Continuously Available File Shares
- Distributed File System
- Distributed File System Replication
- iSCSI Target Server Service
- Adding the File and Storage Services Role
- Managing Data Access Using Windows Server 2016 Shares
- File Server Resource Manager
- The Distributed File System
- Planning a DFS Deployment
- Installing and Configuring DFS
- Using the Volume Shadow Copy Service
- Configuring Data Deduplication
- Dynamic Access Control
- Creating DAC Claim Types
- Configuring DAC Resource Properties
- Adding Configured Resource Properties to a Resource Property List
- Creating a Central Access Rule
- Creating a Central Access Policy
- Creating and Assigning a Central Access Policy GPO to File Servers
- Enabling Kerberos Armoring for Domain Controllers
- Creating and Updating a File Share to Leverage Dynamic Access Control
- Configuring User Accounts and Testing Data Access
- Summary
- Best Practices
- File System Access Services and Technologies
- Chapter 28. Operational Fault Tolerance (Clustering / Network Load Balancing)
- Building Fault-Tolerant Windows Server 2016 Systems
- Windows Server 2016 Clustering Technologies
- Determining the Correct Clustering Technology
- Overview of Failover Clusters
- Deploying Failover Clusters
- Installing the Failover Clustering Feature and Tools
- Configuring Disks for Cluster Usage
- Running the Validate a Configuration Wizard
- Creating a Failover Cluster
- Configuring Cluster Networks
- Adding Nodes to the Cluster
- Adding Storage to the Cluster
- Cluster Quorum Configuration
- Enabling Cluster Shared Volumes
- Deploying Roles on Failover Clusters
- Configuring Failover and Failback
- Testing Failover Clusters
- Failover Cluster Maintenance
- Cluster-Aware Updating
- Removing Nodes from a Failover Cluster
- Cluster Migration and Upgrades
- Backing Up and Restoring Failover Clusters
- Deploying Network Load-Balancing Clusters
- Managing NLB Clusters
- Network Teaming
- Summary
- Best Practices
- Chapter 29. Backing Up the Windows Server 2016 Environment
- Understanding Your Backup and Recovery Needs and Options
- Creating the Disaster Recovery Solution
- Documenting the Enterprise
- Developing a Backup Strategy
- Windows Server Backup Overview
- Using Windows Server Backup
- Managing Backups Using the Command-Line Utility Wbadmin.exe and Windows PowerShell Cmdlets
- Backing Up Active Directory
- Backing Up Windows Server 2016 Roles
- Volume Shadow Copy Service
- Extending Server Backup to the Enterprise with Data Protection Manager 2016
- Summary
- Best Practices
- Chapter 30. Recovering from a Disaster
- Chapter 27. File System Management
- Part X: Optimizing, Tuning, Debugging, and Problem Solving
- Chapter 31. Optimizing Windows Server 2016 for Branch Office Communications
- Key Branch Office Features in Windows Server 2016
- Understanding Read-Only Domain Controllers
- Using BitLocker with Windows Server 2016
- Understanding BitLocker Drive Encryption in Windows Server 2016
- Comprehending BitLocker’s Drive Encryption Hardware Requirements
- Understanding BitLocker Deployment Scenarios
- Configuring BitLocker Drive Encryption on a Windows Server 2016 Branch Office Domain Controller
- Installing the BitLocker Drive Encryption Feature
- Configuring the System Partitions for BitLocker
- Enabling BitLocker Drive Encryption
- Utilizing the BitLocker Recovery Password
- Removing BitLocker Drive Encryption
- BranchCache in Windows Server 2016
- Printing with Branch Office Direct Printing
- Summary
- Best Practices
- Chapter 32. Logging and Debugging
- Chapter 33. Capacity Analysis and Performance Optimization
- Chapter 31. Optimizing Windows Server 2016 for Branch Office Communications
- Part XI: Integrated Windows Application Services
- Chapter 34. SharePoint 2016 Products
- Chapter 35. Windows Server Virtualization
- Understanding Microsoft’s Virtualization Strategy
- Integration of Hypervisor Technology in Windows Server
- Windows Server Hyper-V
- Microsoft Hyper-V Server as a Role in Windows Server 2016
- New and Improved Windows Server 2016 Hyper-V
- Production checkpoints
- Host Resource Protection
- Hot add and remove for network adapters and memory
- Discrete device assignment protection
- Nested virtualization
- Windows PowerShell Direct
- Linux Secure Boot
- Shared virtual hard disks
- Hyper-V Manager Improvements
- New Storage Quality of Service (QoS)
- Integration services delivered through Windows Update
- Windows Containers and Hyper-V Containers in Windows Server 2016
- Planning Your Implementation of Hyper-V
- Installing the Microsoft Hyper-V Role
- Becoming Familiar with the Hyper-V Administrative Console
- Installing a Guest Operating System Session
- Modifying Guest Session Configuration Settings
- Launching a Hyper-V Guest Session
- Using Snapshots of Guest Operating System Sessions
- Quick Migration and Live Migration
- Quick Migration
- Live Migration
- Configuring the Cluster Quorum Witness Disk
- Installing the Failover Clustering Feature
- Running the Validate a Configuration Wizard
- Creating a Node and Disk Majority Cluster
- Adding Additional Shared Storage
- Configuring Hyper-V over SMB
- Deploying New Virtual Machines on a Hyper-V Failover Cluster
- Deploying Existing Virtual Machines on Failover Clusters
- Performing a Live Migration
- Performing a Quick Migration
- Utilizing Hyper-V Replica for Site-to-Site Redundancy
- Hyper-V Containers in Windows Server 2016
- Windows Docker Containers
- Summary
- Best Practices
- Chapter 36. Integrating System Center Operations Manager 2016 with Windows Server 2016
- Index
Contents at a Glance
Part I Windows Server 2016 Overview
1 Windows Server 2016 Technology Primer
2 Planning, Prototyping, Migrating, and Deploying Windows Server 2016
3 Installing Windows Server 2016 and Server Core
Part II Windows Server 2016 Active Directory
4 Active Directory Domain Services Primer
5 Designing a Windows Server 2016 Active Directory
6 Designing Organizational Unit and Group Structure
7 Active Directory Infrastructure
8 Creating Federated Forests and Lightweight Directories
9 Domain Name System, WINS, and DNSSEC
11 Internet Information Services
14 Network Policy and Access Services, Routing and Remote Access, and DirectAccess
Part V Migrating to Windows Server 2016
15 Migrating to Active Directory 2016
Part VI Windows Server 2016 Administration and Management
17 Windows Server 2016 Administration
18 Windows Server 2016 Group Policies and Policy Management
19 Windows Server 2016 Management and Maintenance Practices
20 Automating Tasks Using PowerShell Scripting
21 Documenting a Windows Server 2016 Environment
Part VII Remote and Mobile Technologies
22 Server-to-Client Remote and Mobile Access
Part VIII Desktop Administration
24 Windows Server 2016 Administration Tools for Desktops
25 Group Policy Management for Network Clients
Part IX Fault-Tolerance Technologies
28 Operational Fault Tolerance (Clustering/Network Load Balancing)
29 Backing Up the Windows Server 2016 Environment
Part X Optimizing, Tuning, Debugging, and Problem Solving
31 Optimizing Windows Server 2016 for Branch Office Communications
33 Capacity Analysis and Performance Optimization
Part XI Integrated Windows Application Services
35 Windows Server Virtualization
36 Integrating System Center Operations Manager 2016 with Windows Server 2016
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.