+353-1-416-8900REST OF WORLD
+44-20-3973-8888REST OF WORLD
1-917-300-0470EAST COAST U.S
1-800-526-8630U.S. (TOLL FREE)

MCSA Windows Server 2016 Study Guide: Exam 70-742. Edition No. 2

  • Book

  • 384 Pages
  • May 2018
  • John Wiley and Sons Ltd
  • ID: 4302716

NOTE: As the response to the coronavirus (COVID-19) continues to evolve rapidly around the world, Microsoft has announced that it’s extending the retirement date of the current MCSA Windows Server 2016 certification until January 31, 2021. Pearson VUE has temporarily closed many of its testing centers worldwide in response to global government regulations to battle the spread of COVID-19. As an alternative to taking your exam at a testing center, online proctoring is available, which allows you to take your certification exam in the comfort of your own home or office.  Instead of taking the required exams at a Pearson VUE testing center near you, Pearson VUE will be offering only online proctored exams for the foreseeable future. This means you will have more time to prepare for the current exams:

  • 70-740: Installation, Storage, and Compute with Windows Server 2016

  • 70-741: Networking with Windows Server 2016

  • 70-742: Identity with Windows Server 2016

To help you prepare for the exams, our Study Guides are available for purchase.



Comprehensive preparation for the final MCSA exam, updated for Windows Server 2016

MCSA Windows Server 2016 Study Guide: Exam 70-742 is the ultimate preparation resource for the third and final MCSA exam. Tightly focused and highly relevant, this guide provides everything you need to go into the exam fully prepared; expert coverage of all exam objectives helps ensure comprehensive understanding, and hundreds of practice questions help you track your progress and prioritize areas most in need of review. Access to online study aids allows you to study on the go, with electronic flashcards, practice tests, and a glossary to help you get the most out of your preparation plan. Hands-on exercises test your practical skills, while real-world scenarios give you a preview of how MCSA skills and concepts are applied in the workplace.

Bestselling author and four-time Microsoft MVP, William Panek, covers server deployment, maintenance, and management; file and print server configuration; network services and access; Active Directory; Group Policy; server infrastructure and more, this book is your comprehensive companion for the latest exam.

  • Study 100 percent of Exam 70-742 objectives, updated for Windows Server 2016
  • Practice your skills with real-world hands-on exercises
  • Review from anywhere with access to online study aids
  • Assess your readiness with challenging practice exams

Windows Server 2016 includes enhancements to Hyper-V, Storage Spaces, and Active Directory, along with many brand new and updated features - all of which are reflected in the latest exam. To ensure complete readiness and avoid exam-day surprises, it is critical that your study resources be up-to-date and comprehensive in scope; MCSA Windows Server 2016 Study Guide: Exam 70-742 covers everything you need to know, with a practical approach that promotes true understanding.

Table of Contents

 Contents

Introduction xxi

Assessment Test xxx

Chapter 1 Installing Active Directory 1

Verifying the File System 2

Resilient File System (ReFS) 3

NTFS 4

Verifying Network Connectivity 7

Basic Connectivity Tests 7

Tools and Techniques for Testing Network Configuration 8

Understanding Domain and Forest Functionality 10

About the Domain Functional Level 10

About Forest Functionality 12

Planning the Domain Structure 13

Installing Active Directory 14

New to Active Directory 14

Read-Only Domain Controllers 15

Adprep 15

Active Directory Prerequisites 16

The Installation Process 16

Deploying Active Directory in Windows Azure 24

Installing Additional Domain Controllers

by Using Install from Media 24

Verifying Active Directory Installation 25

Using Event Viewer 25

Using Active Directory Administrative Tools 27

Testing from Clients 29

Creating and Configuring Application Data Partitions 30

Creating Application Data Partitions 31

Managing Replicas 32

Removing Replicas 33

Using ntdsutil to Manage Application l Data Partitions 33

Configuring DNS Integration with Active Directory 35

Summary 37

Exam Essentials 37

Review Questions 39

Chapter 2 Administer Active Directory 43

Active Directory Overview 44

Understanding Active Directory Features 45

Understanding Security Principals 46

An Overview of OUs 47

The Purpose of OUs 48

Benefits of OUs 48

Planning the OU Structure 49

Logical Grouping of Resources 49

Understanding OU Inheritance 51

Delegating Administrative Control 51

Applying Group Policies 53

Creating OUs 53

Managing OUs 57

Moving, Deleting, and Renaming OUs 57

Administering Properties of OUs 58

Delegating Control of OUs 59

Troubleshooting OUs 62

Creating and Managing Active Directory Objects 63

Overview of Active Directory Objects 63

Managing Object Properties 70

Understanding Groups 74

Filtering and Advanced Active Directory Features 76

Moving, Renaming, and Deleting Active

Directory Objects 77

Resetting an Existing Computer Account 79

Understanding Dynamic Access Control 79

Managing Security and Permissions 80

Using ACLs and ACEs 81

Using Group Policy for Security 82

Fine-Grained Password Policies 84

Publishing Active Directory Objects 86

Making Active Directory Objects Available to Users 87

Publishing Printers 87

Publishing Shared Folders 88

Querying Active Directory 89

Using the Active Directory Administrative Center 90

Using the Command Prompt for Active Directory

Configuration 94

PowerShell for Active Directory 95

Summary 97

Exam Essentials 97

Review Questions 99

Chapter 3 Maintaining Active Directory 103

Overview of Network Planning 104

The Three Types of Networks 105

Exploring Network Constraints 105

Overview of Active Directory Replication and Sites 106

Replicating Active Directory 107

Understanding Active Directory Site Concepts 107

Understanding Distributed File System Replication 111

Implementing Sites and Subnets 112

Creating Sites 113

Creating Subnets 115

Configuring Sites 116

Configuring Replication 117

Intrasite Replication 118

Intersite Replication 118

RODCs and Replication 124

Configuring Server Topology 125

Using Universal Group Membership Caching 128

Configuring DNS SRV Records 129

Monitoring and Troubleshooting Active Directory Replication 129

About System Monitor 130

Troubleshooting Replication 130

Reasons for Creating Multiple Domains 132

Reasons for Using Multiple Domains 132

Drawbacks of Multiple Domains 135

Creating Domain Trees and Forests 135

Planning Trees and Forests 136

The Promotion Process 139

Creating a Domain Tree 140

Joining a New Domain Tree to a Forest 142

Adding Additional Domain Controllers 142

Demoting a Domain Controller 143

Managing Multiple Domains 144

Managing Single-Master Operations 145

Managing Trusts 149

Managing UPN Suffixes 153

Name Suffix Routing 153

Managing Global Catalog Servers 153

Managing Universal Group Membership Caching 155

Upgrading Existing Domains and Forests 156

Maintain Active Directory 157

Overview of the Windows Server 2016 Backup Utility 158

Setting Up an Active Directory Backup 163

Restoring Active Directory 164

Active Directory Recycle Bin 166

Restartable Active Directory 166

Offline Maintenance 167

Monitoring Replication 169

Using the ADSI Editor 170

Wbadmin Command-Line Utility 170

Summary 171

Exam Essentials 172

Review Questions 175

Chapter 4 Implementing GPOs 179

Introducing Group Policy 180

Understanding Group Policy Settings 181

The Security Settings Section of the GPO 184

Client-Side Extensions 185

Group Policy Objects 185

Group Policy Inheritance 186

Planning a Group Policy Strategy 187

Implementing Group Policy 188

Creating GPOs 188

Linking Existing GPOs to Active Directory 191

Forcing a GPO to Update 191

Managing Group Policy 193

Managing GPOs 193

Security Filtering of a Group Policy 195

Delegating Administrative Control of GPOs 197

Controlling Inheritance and Filtering Group Policy 198

Assigning Script Policies 199

Understanding the Loopback Policy 201

Managing Network Configuration 201

Configuring Network Settings 203

Automatically Enrolling User and

Computer Certificates in Group Policy 203

Redirecting Folders 205

Managing GPOs with Windows PowerShell Group Policy Cmdlets 206

Item-Level Targeting 207

Back Up, Restore, Import, Copy, and Migration Tables 208

Deploying Software Through a GPO 211

The Software Management Life Cycle 211

The Windows Installer 213

Deploying Applications 217

Implementing Software Deployment 218

Preparing for Software Deployment 218

Software Restriction Policies 219

Using AppLocker 220

Group Policy Slow Link Detection 220

Publishing and Assigning Applications 220

Applying Software Updates 222

Verifying Software Installation 223

Configuring Automatic Updates in Group Policy 224

Configuring Software Deployment Settings 224

The Software Installation Properties Dialog Box 225

Removing Programs 228

Microsoft Windows Installer Settings 229

Troubleshooting Group Policies 229

RSoP in Logging Mode 231

RSoP in Planning Mode 233

Using the gpresult.exe Command 234

Using the Group Policy Infrastructure Status Dashboard 236

Summary 236

Exam Essentials 237

Review Questions 239

Chapter 5 Understanding Certificates 243

Features of Windows Server 2016 Certificate Services 244

Active Directory Certificate Services Roles 245

Planning the Certificate Authority Hierarchy 246

Installing AD CS 252

Configuring Active Directory Certificate Services 255

PowerShell for AD CS 266

Summary 267

Exam Essentials 268

Review Questions 269

Chapter 6 Configure Access and Information Protection Solutions 273

Implement Active Directory Federation Services 274

What Is a Claim? 274

What’s New for AD FS in Windows Server 2016? 278

Active Directory Federation Services Installation 280

Workplace Join 292

Device Registration Service 292

Workplace Join Your Device 292

Active Directory Rights Management Services 293

Considerations and Requirements for AD RMS 294

Installing AD RMS 296

Managing AD RMS: AD RMS Service Connection Point 298

Configuring a Web Application Proxy 306

Publishing Applications 306

Configuring Pass-Through Authentication 307

Authentication Capabilities 308

PowerShell Commands 309

Summary 311

Exam Essentials 311

Review Questions 313

Appendix Answers to Review Questions 315

Chapter 1: Installing Active Directory 316

Chapter 2: Administer Active Directory 317

Chapter 3: Maintaining Active Directory 317

Chapter 4: Implementing GPOs 318

Chapter 5: Understanding Certificates 319

Chapter 6: Configure Access and Information

Protection Solutions 320

Index 321

Authors

William Panek