Windows Server 2012 Unleashed - Api.pageplace.de
Rand Morimoto, Ph.D., MCITP, MVP Michael Noel, MVP, MCITP Guy Yardeni, MCITP, CISSP, MVP Omar Droubi, MCSE, MCTS Andrew Abbate, MCITP Chris Amaris, MCITP, MCTS, CISSP Technical Edit by Tyson Kopczynski, CISSP, GCIH Windows Server 2012 UNLEASHED 800 East 96th Street, Indianapolis, Indiana 46240 USA
Windows Server 2012 Unleashed Copyright 2013 by Pearson Education, Inc. All rights reserved. No part of this book shall be reproduced, stored in a retrieval system, or transmitted by any means, electronic, mechanical, photocopying, recording, or otherwise, without written permission from the publisher. No patent liability is assumed with respect to the use of the information contained herein. Although every precaution has been taken in the preparation of this book, the publisher and author assume no responsibility for errors or omissions. Nor is any liability assumed for damages resulting from the use of the information contained herein. ISBN-13: 978-0-672-33622-5 ISBN-10: 0-672-33622-7 Library of Congress Cataloging-in-Publication Data is on file. Printed in the United States of America Fifth Printing: March 2015 Trademarks All terms mentioned in this book that are known to be trademarks or service marks have been appropriately capitalized. Sams Publishing cannot attest to the accuracy of this information. Use of a term in this book should not be regarded as affecting the validity of any trademark or service mark. Editor-in-Chief Greg Wiegand Executive Editor Neil Rowe Development Editor Mark Renfrow Managing Editor Kristy Hart Project Editor Andrew Beaster Copy Editor Keith Cline Indexer Brad Herriman Proofreader Jess DeGabriele Warning and Disclaimer Every effort has been made to make this book as complete and as accurate as possible, but no warranty or fitness is implied. The information provided is on an “as is” basis. The authors and the publisher shall have neither liability nor responsibility to any person or entity with respect to any loss or damages arising from the information contained in this book or from the use of the programs accompanying it. Technical Editor Tyson Kopczynski Bulk Sales Interior Designer Gary Adair Sams Publishing offers excellent discounts on this book when ordered in quantity for bulk purchases or special sales. For more information, please contact U.S. Corporate and Government Sales 1-800-382-3419 corpsales@pearsontechgroup.com For sales outside of the U.S., please contact International Sales international@pearsoned.com Publishing Coordinator Cindy Teeters Cover Designer Anne Jones Compositor Nonie Ratcliff Contributing Writers Colin Spence Yasu SabaLin Aman Ayaz Peter Handley
Contents at a Glance Introduction. Part I . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Windows Server 2012 Overview 1 Windows Server 2012 Technology Primer . 2 Planning, Prototyping, Migrating, and 3 Installing Windows Server 2012 and Server Core . Deploying Windows Server 2012 Part II 1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 51 85 Windows Server 2012 Active Directory . . . . . . . . . . . . . . . . . . . . . . 115 4 Active Directory Domain Services Primer 5 Designing a Windows Server 2012 Active Directory . . . . . . . . . . . . . . . 149 6 Designing Organizational Unit and Group Structure . . . . . . . . . . . . . . 175 7 Active Directory Infrastructure . 8 Creating Federated Forests and Lightweight Directories 9 Integrating AD in a Unix Environment . Part III . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 195 Networking Services 10 Domain Name System, WINS, and DNSSEC 11 DHCP, IPv6, IPAM 12 Internet Information Services. Part IV 13 . . . . . . . . . . . . . . . . . . . . 257 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 319 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 387 Security Sever-Level Security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 429 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 459 14 Securing Data in Transit 15 Network Policy Server, Network Access Protection and Routing and Remote Access . Part V 16 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 479 Migrating to Windows Server 2012 Migrating from Active Directory 2008 / 2008 R2 to Active Directory 2012 17 . . . . . . . . . . . . 229 . . . . . . . . . . . . . . . . . . . . . . . 245 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 503 Compatibility Testing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 545
iv Windows Server 2012 Unleashed Part VI Windows Server 2012 Administration and Management . . . . . . . . . . . . . . . . . . . . . . . . 569 18 Windows Server 2012 Administration . 19 Windows Server 2012 Group Policies and Policy Management 20 Windows Server 2012 Management and Maintenance Practices 21 Automating Tasks Using PowerShell Scripting . 22 Documenting a Windows Server 2012 Environment 23 Integrating System Center Operations Manager 2012 with Windows Server 2012 Part VII . . . . . . . . . . . . . . 785 Remote and Mobile Technologies Server-to-Client Remote and Mobile Access . 25 Remote Desktop Services . . . . . . . . . . . . . . . . . . . . . 903 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 965 Desktop Administration . . . . . . . . . 1019 . . . . . . . . . . . . . . . . 1053 . . . . . . . . . . . . . . . . . . 1115 26 Windows Server 2012 Administration Tools for Desktops . 27 Group Policy Management for Network Clients . Part IX . . . . . . 663 . . . . . . . . . . . . . . . . . . 719 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 815 24 Part VIII . . . . . . . 605 Fault Tolerance Technologies 28 File System Management and Fault Tolerance 29 System-Level Fault Tolerance (Clustering / Network Load Balancing) . . 1189 30 Backing Up the Windows Server 2012 Environment 31 Recovering from a Disaster Part X . . . . . . . . . . . . . 1245 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1273 Optimizing, Tuning, Debugging, and Problem Solving . . . . . 1303 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1349 32 Optimizing Windows 2012 for Branch Office Communications 33 Logging and Debugging 34 Capacity Analysis and Performance Optimization Part XI . . . . . . . . . . . . . . . 1419 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1459 Integrated Windows Application Services 35 Sharepoint 2010 Products 36 Deploying and Using Windows Virtualization . . . . . . . . . . . . . . . . . . 1497
Table of Contents Introduction. Part I 1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Windows Server 2012 Overview Windows Server 2012 Technology Primer . . . . . . . . . . . . . . . . . . . . . . . . When Is the Right Time to Migrate? . . . . . . . . . . . . . . . . . Versions of Windows Server 2012. . . . . . . . . . . . . . . . . . . Improvements for Continuous Availability . . . . . . . . . . . . Enhancements for Flexible Identity and Security . . . . . . . . Enabling Users to Work Anywhere . . . . . . . . . . . . . . . . . . Simplifying the Datacenter . . . . . . . . . . . . . . . . . . . . . . . Addition of Migration Tools . . . . . . . . . . . . . . . . . . . . . . Identifying Which Windows Server 2012 Service to Install or Migrate to First . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Best Practices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 1 Planning, Prototyping, Migrating, and Deploying Windows Server 2012 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 15 16 20 23 29 35 44 . . . . . . . . . 45 49 49 . . . . . . . . . . . . . . . . . . 51 . . . . . . . . . . . . . . . . . . Determining the Scope of Your Project . . . . . . . . . . . . . . . . Identifying the Business Goals and Objectives to Implement Windows Server 2012 . . . . . . . . . . . . . . . . . . . . . . . . . . . Identifying the Technical Goals and Objectives to Implement Windows Server 2012 . . . . . . . . . . . . . . . . . The Discovery Phase: Understanding the Existing Environment . . . . . . . . . . . . . . . . . . . . . . . . . . . The Design Phase: Documenting the Vision and the Plan . . . The Migration Planning Phase: Documenting the Process for Migration . . . . . . . . . . . . . . . . . . . . . . . . . . . The Prototype Phase: Creating and Testing the Plan. . . . . . . The Pilot Phase: Validating the Plan to a Limited Number of Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . The Migration/Implementation Phase: Conducting the Migration or Installation . . . . . . . . . . . . . . . . . . . . . . . . . Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Best Practices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52 . . . . . . . . 52 . . . . . . . . 55 . . . . . . . . 61 64 . . . . . . . . . . . . . . . . 69 74 . . . . . . . . 76 . . . . . . . . 79 80 81 . . . . . . . . . . . . . . . . . . . . . . . .
vi Windows Server 2012 Unleashed 3 Installing Windows Server 2012 and Server Core . . . . . . . . . . . . . . . . . . Planning for a Server Installation . . . . . . . . . . . . . . . . . . . . . Installing a Clean Version of Windows Server 2012 Operating System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Upgrading to Windows Server 2012 . . . . . . . . . . . . . . . . . . . Understanding Server Core Installation. . . . . . . . . . . . . . . . . Managing and Configuring a Server Core Installation . . . . . . Performing an Unattended Windows Server 2012 Installation. Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Best Practices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Part II 4 85 . . . . . . 91 99 . 103 . 105 . 113 . 113 . 113 . . . . . . . . . . . . . . . . . . . . . . 115 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Windows Server 2012 Active Directory Active Directory Domain Services Primer. The Evolution of Directory Services . . . . . . . . . . . . . . . Understanding the Development of AD DS . . . . . . . . . . AD DS Structure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Outlining AD DS Components . . . . . . . . . . . . . . . . . . . Understanding Domain Trusts . . . . . . . . . . . . . . . . . . . Defining Organizational Units . . . . . . . . . . . . . . . . . . . Outlining the Role of Groups in an AD DS Environment Understanding AD DS Replication . . . . . . . . . . . . . . . . Outlining the Role of DNS in AD DS . . . . . . . . . . . . . . Outlining AD DS Security . . . . . . . . . . . . . . . . . . . . . . Outlining AD DS Changes in Windows Server 2012 . . . . Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Best Practices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 . . . . . . . 85 Designing a Windows Server 2012 Active Directory . . . . . . . . . . . 116 . . . . . . . . . . . 117 . . . . . . . . . . . 118 . . . . . . . . . . . 121 . . . . . . . . . . . 125 . . . . . . . . . . . 127 . . . . . . . . . . . 128 . . . . . . . . . . . 130 . . . . . . . . . . . 132 . . . . . . . . . . . 134 . . . . . . . . . . . 135 . . . . . . . . . . . 146 . . . . . . . . . . . 146 . . . . . . . . . . . . . . . Understanding AD DS Domain Design . . . . . . . . . . . . . . . Choosing a Domain Namespace . . . . . . . . . . . . . . . . . . . . Examining Domain Design Features . . . . . . . . . . . . . . . . . Choosing a Domain Structure . . . . . . . . . . . . . . . . . . . . . Understanding the Single-Domain Model . . . . . . . . . . . . . Understanding the Multiple-Domain Model . . . . . . . . . . . Understanding the Multiple Trees in a Single-Forest Model. Understanding the Federated-Forests Model . . . . . . . . . . . Understanding the Empty-Root Domain Model . . . . . . . . . Understanding the Placeholder Domain Model . . . . . . . . . Understanding the Special-Purpose Domain Model . . . . . . Renaming an AD DS Domain . . . . . . . . . . . . . . . . . . . . . . 149 . . . . . . . . . 149 . . . . . . . . . 151 . . . . . . . . . 152 . . . . . . . . . 154 . . . . . . . . . 155 . . . . . . . . . 158 . . . . . . . . . 160 . . . . . . . . . 162 . . . . . . . . . 165 . . . . . . . . . 167 . . . . . . . . . 169 . . . . . . . . . 170
Contents Summary . . . Best Practices 6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 173 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 173 Designing Organizational Unit and Group Structure . Defining Organizational Units in AD DS . Defining AD Groups . . . . . . . . . . . . . . . OU and Group Design . . . . . . . . . . . . . . Starting an OU Design. . . . . . . . . . . . . . Using OUs to Delegate Administration . . Group Policies and OU Design . . . . . . . . Understanding Group Design. . . . . . . . . Exploring Sample Design Models . . . . . . Summary . . . . . . . . . . . . . . . . . . . . . . . Best Practices . . . . . . . . . . . . . . . . . . . . 7 Active Directory Infrastructure . 9 . . . . . . . . . . . . . . . 175 . . . . . . . . . . . . . . . . . . . . . . 176 . . . . . . . . . . . . . . . . . . . . . . 178 . . . . . . . . . . . . . . . . . . . . . . 182 . . . . . . . . . . . . . . . . . . . . . . 182 . . . . . . . . . . . . . . . . . . . . . . 184 . . . . . . . . . . . . . . . . . . . . . . 186 . . . . . . . . . . . . . . . . . . . . . . 186 . . . . . . . . . . . . . . . . . . . . . . 188 . . . . . . . . . . . . . . . . . . . . . . 193 . . . . . . . . . . . . . . . . . . . . . . 194 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Understanding AD DS Replication in Depth Understanding Active Directory Sites . . . . . Planning Replication Topology . . . . . . . . . Windows Server 2012 IPv6 Support . . . . . . Detailing Real-World Replication Designs . . Deploying Read-Only Domain Controllers . Deploying a Clone Virtualized DC . . . . . . . Summary . . . . . . . . . . . . . . . . . . . . . . . . . Best Practices . . . . . . . . . . . . . . . . . . . . . . 8 vii 195 . . . . . . . . . . . . . . . . . . . . 195 . . . . . . . . . . . . . . . . . . . . 200 . . . . . . . . . . . . . . . . . . . . 207 . . . . . . . . . . . . . . . . . . . . 214 . . . . . . . . . . . . . . . . . . . . 216 . . . . . . . . . . . . . . . . . . . . 220 . . . . . . . . . . . . . . . . . . . . 223 . . . . . . . . . . . . . . . . . . . . 226 . . . . . . . . . . . . . . . . . . . . 226 229 Creating Federated Forests and Lightweight Directories . . . . . . . . . . . . Keeping a Distributed Environment in Sync . . . . . . . Active Directory Federation Services . . . . . . . . . . . . . Synchronizing Directory Information with Forefront Identity Manager . . . . . . . . . . . . . . . . . . . . . . . . . Harnessing the Power and Potential of FIM . . . . . . . . Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Best Practices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 229 Integrating AD in a Unix Environment . . . . . . . . . . . . . . 235 . . . . . . . . . . . . . 238 . . . . . . . . . . . . . 241 . . . . . . . . . . . . . 244 . . . . . . . . . . . . . 244 . . . . . . . . . . . . . . . . . . . . . . . . Understanding and Using Windows Server 2012 UNIX Integration Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Reviewing the Subsystem for UNIX-Based Applications . . . . . . . . . Administrative Improvements with Windows Server 2012 . . . . . . . Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Best Practices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 245 . . . 245 . . . 252 . . . 253 . . . 255 . . . 255
viii Windows Server 2012 Unleashed Part III 10 Networking Services Domain Name System, WINS, and DNSSEC . . . . . . . . . . . . . . . . . . . . . The Need for DNS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Getting Started with DNS on Windows Server 2012 . . . . . . Resource Records . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Understanding DNS Zones . . . . . . . . . . . . . . . . . . . . . . . . Performing Zone Transfers . . . . . . . . . . . . . . . . . . . . . . . . Understanding DNS Queries . . . . . . . . . . . . . . . . . . . . . . Other DNS Components . . . . . . . . . . . . . . . . . . . . . . . . . Understanding the Evolution of Microsoft DNS . . . . . . . . . DNS in Windows Server 2012 . . . . . . . . . . . . . . . . . . . . . DNS in an Active Directory Domain Services Environment . Troubleshooting DNS . . . . . . . . . . . . . . . . . . . . . . . . . . . Secure DNS with DNSSEC . . . . . . . . . . . . . . . . . . . . . . . . Reviewing the Windows Internet Naming Service . . . . . . . Installing and Configuring WINS . . . . . . . . . . . . . . . . . . . Planning, Migrating, and Maintaining WINS . . . . . . . . . . . Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Best Practices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 DHCP, IPv6, IPAM . 12 . . . . . . . . . 258 . . . . . . . . . 262 . . . . . . . . . 265 . . . . . . . . . 269 . . . . . . . . . 273 . . . . . . . . . 276 . . . . . . . . . 277 . . . . . . . . . 285 . . . . . . . . . 286 . . . . . . . . . 288 . . . . . . . . . 292 . . . . . . . . . 301 . . . . . . . . . 308 . . . . . . . . . 308 . . . . . . . . . 312 . . . . . . . . . 316 . . . . . . . . . 316 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Understanding the Components of an Enterprise Network . Exploring DHCP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Exploring DHCP Changes in Windows Server 2012 . . . . . . Enhancing DHCP Reliability . . . . . . . . . . . . . . . . . . . . . . Exploring Advanced DHCP Concepts . . . . . . . . . . . . . . . . Securing DHCP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . IPv6 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Configuring IPv6 on Windows Server 2012 . . . . . . . . . . . . IP Address Management . . . . . . . . . . . . . . . . . . . . . . . . . Installing the IPAM Server and Client Features . . . . . . . . . Exploring the IPAM Console . . . . . . . . . . . . . . . . . . . . . . Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Best Practices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Internet Information Services. 319 . . . . . . . . . 319 . . . . . . . . . 321 . . . . . . . . . 329 . . . . . . . . . 336 . . . . . . . . . 347 . . . . . . . . . 348 . . . . . . . . . 349 . . . . . . . . . 360 . . . . . . . . . 367 . . . . . . . . . 368 . . . . . . . . . 382 . . . . . . . . . 385 . . . . . . . . . 385 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Understanding Internet Information Services 8 . Planning and Designing IIS 8 . . . . . . . . . . . . . . Installing and Upgrading IIS 8 . . . . . . . . . . . . . Installing and Configuring Websites . . . . . . . . . Installing and Configuring FTP Services . . . . . . 257 387 . . . . . . . . . . . . . . . . . 387 . . . . . . . . . . . . . . . . . 391 . . . . . . . . . . . . . . . . . 393 . . . . . . . . . . . . . . . . . 399 . . . . . . . . . . . . . . . . . 408
Contents Securing IIS 8 . Summary . . . . Best Practices . Part IV 13 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 418 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 426 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 427 Security Sever-Level Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Defining Windows Server 2012 Security . . . . . . . . . . . Deploying Physical Security . . . . . . . . . . . . . . . . . . . . Using the Integrated Windows Firewall with Advanced Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Hardening Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . Examining File-Level Security . . . . . . . . . . . . . . . . . . Malware and Backup Protection . . . . . . . . . . . . . . . . . Using Windows Server Update Services . . . . . . . . . . . . Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Best Practices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 Securing Data in Transit . Network Policy Server, Network Access Protection and Routing and Remote Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 430 . . . . . . . . . . . . 433 . . . . . . . . . . . . 437 . . . . . . . . . . . . 445 . . . . . . . . . . . . 450 . . . . . . . . . . . . 452 . . . . . . . . . . . . 457 . . . . . . . . . . . . 458 459 . . . . . . . . . . . . 460 . . . . . . . . . . . . 461 . . . . . . . . . . . . 463 . . . . . . . . . . . . 472 . . . . . . . . . . . . 475 . . . . . . . . . . . . 477 . . . . . . . . . . . . 478 . . . . . . . . . . . . Understanding Network Access Protection in Windows Server 2012 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Deploying a Windows Server 2012 Network Policy Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Enforcing Policy Settings with a Network Policy Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Verifying the Client-Side Configuration . . . . . . . . . . . Deploying a Virtual Private Network Using RRAS . . . . . Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Best Practices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 429 . . . . . . . . . . . . 429 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Introduction to Securing Data in Transit in Windows Server 2012 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Deploying a Public Key Infrastructure with Windows Server 2012 . . . . . . . . . . . . . . . . . . . . . . . Understanding Active Directory Certificate Services in Windows Server 2012 . . . . . . . . . . . . . . . . . . . . . . . Active Directory Rights Management Services . . . . . . . Using IPsec Encryption with Windows Server 2012 . . . Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Best Practices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 ix 479 . . . . . . . . . . . . 480 . . . . . . . . . . . . 482 . . . . . . . . . . . . 485 . . . . . . . . . . . . 492 . . . . . . . . . . . . 494 . . . . . . . . . . . . 500 . . . . . . . . . . . . 501
x Windows Server 2012 Unleashed Part V 16 Migrating to Windows Server 2012 Migrating from Active Directory 2008 / 2008 R2 to Active Directory 2012 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Beginning the Migration Process . . . . . . . . Big Bang Migration . . . . . . . . . . . . . . . . . . Phased Migration . . . . . . . . . . . . . . . . . . . Multiple Domain Consolidation Migration . Summary . . . . . . . . . . . . . . . . . . . . . . . . . Best Practices . . . . . . . . . . . . . . . . . . . . . . 17 Compatibility Testing 18 . . . . . . . . . . . . . . . . . . . . 507 . . . . . . . . . . . . . . . . . . . . 512 . . . . . . . . . . . . . . . . . . . . 527 . . . . . . . . . . . . . . . . . . . . 542 . . . . . . . . . . . . . . . . . . . . 543 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 545 . . . . . . . . . . . . 546 . . . . . . . . . . . . 547 . . . . . . . . . . . . 553 . . . . . . . . . . . . 556 . . . . . . . . . . . . 562 . . . . . . . . . . . . 562 . . . . . . . . . . . . 565 . . . . . . . . . . . . 565 . . . . . . . . . . . . 566 . . . . . . . . . . . . 567 Windows Server 2012 Administration and Management Windows Server 2012 Administration . . . . . . . . . . . . . . . . . . . . . . . . . Defining the Administrative Model . . . . . . . . . . . . . . . Examining Active Directory Site Administration . . . . . . Configuring Sites . . . . . . . . . . . . . . . . . . . . . . . . . . . . Windows Server 2012 Active Directory Groups . . . . . . . Creating Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Managing Users with Local Security and Group Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Managing Printers with the Print Management Console . Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Best Practices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 503 . . . . . . . . . . . . . . . . . . . . 504 The Importance of Compatibility Testing . . . . . . . . . . Preparing for Compatibility Testing . . . . . . . . . . . . . . Researching Products and Applications . . . . . . . . . . . . Verifying Compatibility with Vendors . . . . . . . . . . . . Microsoft Assessment and Planning Toolkit . . . . . . . . Lab-Testing Existing Applications . . . . . . . . . . . . . . . . Documenting the Results of the Compatibility Testing. Determining Whether a Prototype Phase Is Required . . Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Best Practices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Part VI . . . . . . . . . . . . . . . . . . . . 570 . . . . . . . . . . . 571 . . . . . . . . . . . 574 . . . . . . . . . . . 582 . . . . . . . . . . . 583 . . . . . . . . . . . 588 . . . . . . . . . . . 596 . . . . . . . . . . . 602 . . . . . . . . . . . 602 Windows Server 2012 Group Policies and Policy Management . Group Policy Overview . . . . . . . . . . . . . . . . Group Policy Processing: How Does It Work? Local Group Policies . . . . . . . . . . . . . . . . . . Domain-Based Group Policies . . . . . . . . . . . 569 . . . . . . . 605 . . . . . . . . . . . . . . . . . . . 605 . . . . . . . . . . . . . . . . . . . 607 . . . . . . . . . . . . . . . . . . . 609 . . . . . . . . . . . . . . . . . . . 611
Contents Security Templates . . . . . . . . . . . . . . . Understanding Group Policy . . . . . . . . Group Policy Policies Node . . . . . . . . . Group Policy Preferences Node . . . . . . Policy Management Tools . . . . . . . . . . Designing a Group Policy Infrastructure GPO Administrative Tasks . . . . . . . . . . Summary . . . . . . . . . . . . . . . . . . . . . . Best Practices . . . . . . . . . . . . . . . . . . . 20 . . . . . . . . . . . . . . . . . . . . . . . 611 . . . . . . . . . . . . . . . . . . . . . . . 612 . . . . . . . . . . . . . . . . . . . . . . . 625 . . . . . . . . . . . . . . . . . . . . . . . 628 . . . . . . . . . . . . . . . . . . . . . . . 628 . . . . . . . . . . . . . . . . . . . . . . . 637 . . . . . . . . . . . . . . . . . . . . . . . 641 . . . . . . . . . . . . . . . . . . . . . . . 660 . . . . . . . . . . . . . . . . . . . . . . . 661 Windows Server 2012 Management and Maintenance Practices Going Green with Windows Server 2012. . . . . . . . . Server Manager Dashboard . . . . . . . . . . . . . . . . . . Managing Windows Server 2012 Roles and Features . Creating a Server Group . . . . . . . . . . . . . . . . . . . . Viewing Events . . . . . . . . . . . . . . . . . . . . . . . . . . . Server Manager Storage Page . . . . . . . . . . . . . . . . . Auditing the Environment . . . . . . . . . . . . . . . . . . . Managing Windows Server 2012 Remotely . . . . . . . Common Practices for Securing and Managing Windows Server 2012 . . . . . . . . . . . . . . . . . . . . . Keeping Up with Service Packs and Updates . . . . . . Maintaining Windows Server 2012 . . . . . . . . . . . . . Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Best Practices . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 Automating Tasks Using PowerShell Scripting . Understanding Shells . . . . . . . . . . . . . . Introduction to PowerShell . . . . . . . . . . Understanding PowerShell Fundamentals Using Windows PowerShell . . . . . . . . . . Summary . . . . . . . . . . . . . . . . . . . . . . . Best Practices . . . . . . . . . . . . . . . . . . . . 22 xi . . . . . . 663 . . . . . . . . . . . . . . 664 . . . . . . . . . . . . . . 665 . . . . . . . . . . . . . . 667 . . . . . . . . . . . . . . 672 . . . . . . . . . . . . . . 672 . . . . . . . . . . . . . . 682 . . . . . . . . . . . . . . 686 . . . . . . . . . . . . . . 695 . . . . . . . . . . . . . . 701 . . . . . . . . . . . . . . 703 . . . . . . . . . . . . . . 707 . . . . . . . . . . . . . . 717 . . . . . . . . . . . . . . 717 . . . . . . . . . . . . . . . . . . 719 . . . . . . . . . . . . . . . . . . . . . . 720 . . . . . . . . . . . . . . . . . . . . . . 722 . . . . . . . . . . . . . . . . . . . . . . 724 . . . . . . . . . . . . . . . . . . . . . . 751 . . . . . . . . . . . . . . . . . . . . . . 782 . . . . . . . . . . . . . . . . . . . . . . 783 Documenting a Windows Server 2012 Environment . . . . . . . . . . . . . . . Benefits of Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . Types of Documents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Planning to Document the Windows Server 2012 Environment Knowledge Sharing and Knowledge Management . . . . . . . . . . Windows Server 2012 Project Documents . . . . . . . . . . . . . . . . Administration and Maintenance Documents . . . . . . . . . . . . . Network Infrastructure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 785 . . . . . . 786 . . . . . . 787 . . . . . . 788 . . . . . . 788 . . . . . . 789 . . . . . . 802 . . . . . . 806
xii Windows Server 2012 Unleashed Disaster Re
Windows Server 2012 UNLEASHED 800 East 96th Street, Indianapolis, Indiana 46240 USA Rand Morimoto, Ph.D., MCITP, MVP Michael Noel, MVP, MCITP Guy Yardeni, MCITP .
Windows Server 2012 R2 Datacenter 1.3 In-place Upgrade to Windows Server 2012 R2 Performing an in-place upgrade from Windows Server 2012 or Windows Server 2008 R2 to Windows Server 2012 R2 is not recommended because this may adversely affect files and the registry. If you want to use Windows Server 2012 R2, please read this document and back-up
Several LTSC Windows Server versions that are supported with SC Series are in various phases of mainstream or extended Microsoft support: Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, and Windows Server 2019. Microsoft extended support for Windows Server 2008 R2 is scheduled to end in January 2020.
The Windows The Windows Universe Universe Windows 3.1 Windows for Workgroups Windows 95 Windows 98 Windows 2000 1990 Today Business Consumer Windows Me Windows NT 3.51 Windows NT 4 Windows XP Pro/Home. 8 Windows XP Flavors Windows XP Professional Windows XP Home Windows 2003 Server
A computer with at least a 450MHz Pentium CPU with 128 MB of RAM, running Windows 2000, Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, Windows 8/8.1, Windows 10, Windows Server 2012, Windows Server 2016 or Windows Server 2019 platforms. Instal
Web Server Hardware Processor - Fast Multi Core or Multi Processor Memory - 4 gig Disk - 500MB Operating System Windows Server 2008 Windows Server 2008 R2 Windows Server 2012 Windows Server 2012 R2 Windows Server 2016 Windows Server 2019 Windows Server 2022 Software IIS 7, 7.5, 8, 8.5 & 10
Windows Server 2012 Standard Additional Licenses apply for Windows Server 2012 R2 Standard. “Additional licenses” for Windows Server 2012 Datacenter—Each HP OEM license for Windows Server 2012 Datacenter and Windows Server 2012 R2 Datacenter support up to 2 physical processors and an unlimited
- 32 & 64 bit Windows 7, Windows 8 & Windows 10 - 32 & 64 bit Windows 2008 Server - Windows 2008 Server R2 - Windows Server 2012 - Windows Server 2012 R2 - Windows Server 2016 NOTE: Microsoft .Net Framework 4.5 is required on all o
api 20 e rapid 20e api 20 ne api campy api nh api staph api 20 strep api coryne api listeriaapi 20 c aux api 20 a rapid id 32 a api 50 ch api 50 chb/e 50 chl reagents to be ordered. strips ref microorganisms suspension inoculum transfer medium i
