MCSA Windows Server 2016 Study Guide: Exam 70-742

  • ID: 4302716
  • Book
  • 384 Pages
  • John Wiley and Sons Ltd
1 of 4
Covers 100% of Identity with Windows Server 2016 exam objectives, including install and configure Active Directory Domain Services (AD DS), manage and maintain AD DS, create and manage Group Policy, implement Active Directory Certificate Services (AD CS), implement identity federation and access solutions, and much more... Includes online interactive learning environment with:

+ Custom practice exam
+50 electronic flashcards
+Searchable key term glossary
+Vioeos for the chapter exercises

Your complete study guide to the final MCSA exam, fully updated for Windows Server 2016

You're ready for the third and final MCSA exam. This edition of the bestselling, comprehensive study guide covers 100% of the objectives for Exam 70–742, getting you fully prepared. Four–time Microsoft MVP William Panek covers server deployment, maintenance, and management; file and print server configuration; network services and access; Active Directory; Group Policy; server infrastructure, and much more. You will reinforce your study with hands–on exercises, monitor your progress with practice tests, and understand practical application through real–world scenarios. Access to the Sybex online interactive learning environment lets you review from anywhere on any device. You'll face the exam with complete confidence.

Coverage of 100% of all exam objectives in this Study Guide means you'll be ready to:

- Installing and configuring Active Directory Domain Services
- Managing and maintaining AD DS
- Creating and managing Group Policy
- Implementing Active Directory Certificate Services
- Implementing identity federation and access solutions
- . . . and much more

Interactive learning environment

Take your exam prep to the next level with Sybex's superior interactive online study tools. To access our learning environment, simply visit [external URL] type in your unique PIN, and instantly gain access to:

- FREE access to Sybex's online inter– active learning environment and study tools for one year.
- Interactive test bank includes a practice exam to help you identify areas where further review is needed. Get more than 90% of the answers correct, and you're ready to take the certification exam.
- 50 electronic flashcards to reinforce learning and last–minute prep before the exam.
- Comprehensive glossary in PDF format gives you instant access to the key terms so you are fully prepared.
- Videos to accompany many chapter exercises.

ABOUT THE MCSA WINDOWS SERVER CERTIFICATION

The Microsoft Certified Solutions Associate (MCSA) program verifies your skills. To earn the MCSA Server 2016 certification, you must successfully complete three exams: 70–740, 70–741, and 70–742. This study guide covers everything you need to know to pass the third and final exam, 70–742. Visit https:// [external URL] mcsa–windows–server–2016–certification.aspx for more information.
READ MORE
Note: Product cover images may vary from those shown
2 of 4

 Contents

Introduction xxi

Assessment Test xxx

Chapter 1 Installing Active Directory 1

Verifying the File System 2

Resilient File System (ReFS) 3

NTFS 4

Verifying Network Connectivity 7

Basic Connectivity Tests 7

Tools and Techniques for Testing Network Configuration 8

Understanding Domain and Forest Functionality 10

About the Domain Functional Level 10

About Forest Functionality 12

Planning the Domain Structure 13

Installing Active Directory 14

New to Active Directory 14

Read–Only Domain Controllers 15

Adprep 15

Active Directory Prerequisites 16

The Installation Process 16

Deploying Active Directory in Windows Azure 24

Installing Additional Domain Controllers

by Using Install from Media 24

Verifying Active Directory Installation 25

Using Event Viewer 25

Using Active Directory Administrative Tools 27

Testing from Clients 29

Creating and Configuring Application Data Partitions 30

Creating Application Data Partitions 31

Managing Replicas 32

Removing Replicas 33

Using ntdsutil to Manage Application l Data Partitions 33

Configuring DNS Integration with Active Directory 35

Summary 37

Exam Essentials 37

Review Questions 39

Chapter 2 Administer Active Directory 43

Active Directory Overview 44

Understanding Active Directory Features 45

Understanding Security Principals 46

An Overview of OUs 47

The Purpose of OUs 48

Benefits of OUs 48

Planning the OU Structure 49

Logical Grouping of Resources 49

Understanding OU Inheritance 51

Delegating Administrative Control 51

Applying Group Policies 53

Creating OUs 53

Managing OUs 57

Moving, Deleting, and Renaming OUs 57

Administering Properties of OUs 58

Delegating Control of OUs 59

Troubleshooting OUs 62

Creating and Managing Active Directory Objects 63

Overview of Active Directory Objects 63

Managing Object Properties 70

Understanding Groups 74

Filtering and Advanced Active Directory Features 76

Moving, Renaming, and Deleting Active

Directory Objects 77

Resetting an Existing Computer Account 79

Understanding Dynamic Access Control 79

Managing Security and Permissions 80

Using ACLs and ACEs 81

Using Group Policy for Security 82

Fine–Grained Password Policies 84

Publishing Active Directory Objects 86

Making Active Directory Objects Available to Users 87

Publishing Printers 87

Publishing Shared Folders 88

Querying Active Directory 89

Using the Active Directory Administrative Center 90

Using the Command Prompt for Active Directory

Configuration 94

PowerShell for Active Directory 95

Summary 97

Exam Essentials 97

Review Questions 99

Chapter 3 Maintaining Active Directory 103

Overview of Network Planning 104

The Three Types of Networks 105

Exploring Network Constraints 105

Overview of Active Directory Replication and Sites 106

Replicating Active Directory 107

Understanding Active Directory Site Concepts 107

Understanding Distributed File System Replication 111

Implementing Sites and Subnets 112

Creating Sites 113

Creating Subnets 115

Configuring Sites 116

Configuring Replication 117

Intrasite Replication 118

Intersite Replication 118

RODCs and Replication 124

Configuring Server Topology 125

Using Universal Group Membership Caching 128

Configuring DNS SRV Records 129

Monitoring and Troubleshooting Active Directory Replication 129

About System Monitor 130

Troubleshooting Replication 130

Reasons for Creating Multiple Domains 132

Reasons for Using Multiple Domains 132

Drawbacks of Multiple Domains 135

Creating Domain Trees and Forests 135

Planning Trees and Forests 136

The Promotion Process 139

Creating a Domain Tree 140

Joining a New Domain Tree to a Forest 142

Adding Additional Domain Controllers 142

Demoting a Domain Controller 143

Managing Multiple Domains 144

Managing Single–Master Operations 145

Managing Trusts 149

Managing UPN Suffixes 153

Name Suffix Routing 153

Managing Global Catalog Servers 153

Managing Universal Group Membership Caching 155

Upgrading Existing Domains and Forests 156

Maintain Active Directory 157

Overview of the Windows Server 2016 Backup Utility 158

Setting Up an Active Directory Backup 163

Restoring Active Directory 164

Active Directory Recycle Bin 166

Restartable Active Directory 166

Offline Maintenance 167

Monitoring Replication 169

Using the ADSI Editor 170

Wbadmin Command–Line Utility 170

Summary 171

Exam Essentials 172

Review Questions 175

Chapter 4 Implementing GPOs 179

Introducing Group Policy 180

Understanding Group Policy Settings 181

The Security Settings Section of the GPO 184

Client–Side Extensions 185

Group Policy Objects 185

Group Policy Inheritance 186

Planning a Group Policy Strategy 187

Implementing Group Policy 188

Creating GPOs 188

Linking Existing GPOs to Active Directory 191

Forcing a GPO to Update 191

Managing Group Policy 193

Managing GPOs 193

Security Filtering of a Group Policy 195

Delegating Administrative Control of GPOs 197

Controlling Inheritance and Filtering Group Policy 198

Assigning Script Policies 199

Understanding the Loopback Policy 201

Managing Network Configuration 201

Configuring Network Settings 203

Automatically Enrolling User and

Computer Certificates in Group Policy 203

Redirecting Folders 205

Managing GPOs with Windows PowerShell Group Policy Cmdlets 206

Item–Level Targeting 207

Back Up, Restore, Import, Copy, and Migration Tables 208

Deploying Software Through a GPO 211

The Software Management Life Cycle 211

The Windows Installer 213

Deploying Applications 217

Implementing Software Deployment 218

Preparing for Software Deployment 218

Software Restriction Policies 219

Using AppLocker 220

Group Policy Slow Link Detection 220

Publishing and Assigning Applications 220

Applying Software Updates 222

Verifying Software Installation 223

Configuring Automatic Updates in Group Policy 224

Configuring Software Deployment Settings 224

The Software Installation Properties Dialog Box 225

Removing Programs 228

Microsoft Windows Installer Settings 229

Troubleshooting Group Policies 229

RSoP in Logging Mode 231

RSoP in Planning Mode 233

Using the gpresult.exe Command 234

Using the Group Policy Infrastructure Status Dashboard 236

Summary 236

Exam Essentials 237

Review Questions 239

Chapter 5 Understanding Certificates 243

Features of Windows Server 2016 Certificate Services 244

Active Directory Certificate Services Roles 245

Planning the Certificate Authority Hierarchy 246

Installing AD CS 252

Configuring Active Directory Certificate Services 255

PowerShell for AD CS 266

Summary 267

Exam Essentials 268

Review Questions 269

Chapter 6 Configure Access and Information Protection Solutions 273

Implement Active Directory Federation Services 274

What Is a Claim? 274

What s New for AD FS in Windows Server 2016? 278

Active Directory Federation Services Installation 280

Workplace Join 292

Device Registration Service 292

Workplace Join Your Device 292

Active Directory Rights Management Services 293

Considerations and Requirements for AD RMS 294

Installing AD RMS 296

Managing AD RMS: AD RMS Service Connection Point 298

Configuring a Web Application Proxy 306

Publishing Applications 306

Configuring Pass–Through Authentication 307

Authentication Capabilities 308

PowerShell Commands 309

Summary 311

Exam Essentials 311

Review Questions 313

Appendix Answers to Review Questions 315

Chapter 1: Installing Active Directory 316

Chapter 2: Administer Active Directory 317

Chapter 3: Maintaining Active Directory 317

Chapter 4: Implementing GPOs 318

Chapter 5: Understanding Certificates 319

Chapter 6: Configure Access and Information

Protection Solutions 320

Index 321

Note: Product cover images may vary from those shown
3 of 4

Loading
LOADING...

4 of 4

William Panek, MCP, MCSE, MCSA, MCTS, MCITP, CCNA, is a four–time Microsoft MVP winner. He has taught at Boston University, Clark University, and the University of Maryland, and presently conducts live online classes for StormWind Studios (www.stormwind.com). Will has been a consultant and trainer for the United States Secret Service, Cisco, the United States Air Force, and the United States Army. He also creates training videos to help students prepare for various Microsoft exams.

Note: Product cover images may vary from those shown
5 of 4
Note: Product cover images may vary from those shown
Adroll
adroll