Mastering Windows Server 2022 with Azure Cloud Services: IaaS, PaaS, and SaaS

✍ Scribed by William Panek

• Publisher: Sybex
• Year: 2022
• Tongue: English
• Leaves: 547
• Edition: 1
• Category: Library

✦ Synopsis

Extend your on-premises Windows Server deployments to the cloud with Azure

In Mastering Windows Server 2022 with Azure Cloud Services: IaaS, PaaS, and SaaS, 5-time Microsoft MVP Winner William Panek delivers a comprehensive and practical blueprint for planning, implementing, and managing environments that include Azure IaaS-hosted Windows Server-based workloads.

You’ll learn to use the expansive, hybrid capabilities of Azure, how to migrate virtual and physical server workloads to Azure IaaS, PaaS, and SaaS, and how to manage and secure Azure virtual machines running Windows Server 2022.

This book also offers:

• Foundational explanations of core Azure capabilities, including Infrastructure-as-a-Service (IaaS), Platform-as-a-Service (PaaS), and Software-as-a-Service (SaaS)
• Explorations of the tools you’ll need to implement Azure solutions, including Windows Admin Center and PowerShell
• Examples of implementing identity in Hybrid scenarios, including Azure AD DS on Azure IaaS and managed AD DS

Perfect for IT professionals who manage on-premises Windows Server environments, seek to use Azure to manage server workloads, and want to secure virtual machines running on Windows Server 2022, Mastering Windows Server 2022 with Azure Cloud Services: IaaS, PaaS, and SaaS is also a must-read resource for anyone involved in administering or operating Microsoft Azure IaaS workloads.

✦ Table of Contents

Cover
Title Page
Copyright Page
Contents at a Glance
Contents
Introduction
Who Should Read This Book?
What’s Inside?
Recommended Home Lab Setup
How to Contact Sybex or the Author
Chapter 1 Understanding Windows Server 2022
Features and Advantages of Windows Server 2022
Deciding Which Windows Server 2022 Version to Use
Deciding on the Type of Installation
Removed Features
The Bottom Line
Chapter 2 Understanding Virtualization
Introduction to Virtualization
Hyper-V Features
Hyper-V Architecture
Hyper-V Operating Systems
Linux and FreeBSD Image Deployments
Virtualization in Azure
The Bottom Line
Chapter 3 Installing and Configuring Hyper-V
Hyper-V Installation and Configuration
Hyper-V Requirements
Install the Hyper-V Role
Hyper-V in Server Manager
Using Hyper-V Manager
Configure Hyper-V Settings
Manage Virtual Switches
Managing Virtual Hard Disks
Configuring Virtual Machines
Creating and Managing Virtual Machines
Linux and FreeBSD Image Deployments
PowerShell Commands
The Bottom Line
Chapter 4 Installing Windows Server 2022
Installing the Windows Server 2022 OS
Installing with the Desktop Experience
Installing Windows Server 2022 Server Core
Activating and Servicing Windows
Key Management Service
Automatic Virtual Machine Activation
Active Directory-Based Activation
Servicing Windows Server 2022
Configuring Windows Server Updates
Windows Update
Using Windows Server Update Services
Understanding Features On Demand
The Bottom Line
Chapter 5 Understanding IP
Understanding TCP/IP
Details of the TCP/IP Model
How TCP/IP Layers Communicate
Understanding Port Numbers
Understanding IP Addressing
The Hierarchical IP Addressing Scheme
Understanding Network Classes
Subnetting a Network
Implementing Subnetting
An Easier Way to Apply Subnetting
Applying Subnetting the Traditional Way
Working with Classless Inter-Domain Routing
Supernetting
Understanding IPv6
IPv6 History and Need
New and Improved IPv6 Concepts
IPv6 Addressing Concepts
IPv6 Integration/Migration
The Bottom Line
Chapter 6 Implementing DNS
Introducing DNS
HOSTS File
Understanding Servers, Clients, and Resolvers
Understanding the DNS Process
Introducing DNS Database Zones
Understanding Primary Zones
Understanding Secondary Zones
Understanding Active Directory Integrated DNS
Understanding Stub Zones
GlobalName Zones
Zone Transfers and Replication
Advantages of DNS in Windows Server 2022
Background Zone Loading
Support for IPv6 Addresses
Support for Read-Only Domain Controllers
DNS Socket Pools
DNS Cache Locking
Response Rate Limiting
Unknown Record Support
IPv6 Root Hints
DNS Security Extensions
DNS Devolution
Record Weighting
Netmask Ordering
DnsUpdateProxy Group
DNS Policies
Introducing DNS Record Types
Start of Authority (SOA) Records
Name Server Records
Host Record
Alias Record
Pointer Record
Mail Exchanger Record
Service Record
Configuring DNS
Installing DNS
Load Balancing with Round Robin
Configuring a Caching-Only Server
Setting Zone Properties
Configuring Zones for Dynamic Updates
Delegating Zones for DNS
DNS Forwarding
Manually Creating DNS Records
DNS Aging and Scavenging
DNS PowerShell Commands
The Bottom Line
Chapter 7 Understanding Active Directory
Verifying the File System
Resilient File System (ReFS)
NTFS
Verifying Network Connectivity
Basic Connectivity Tests
Tools and Techniques for Testing Network Configuration
Understanding Active Directory
Domains
Trees
Forests
Understanding Domain and Forest Functionality
About the Domain Functional Level
About Forest Functionality
Planning the Domain Structure
Installing Active Directory
Improved Active Directory Features
Read-Only Domain Controllers
Active Directory Prerequisites
The Installation Process
Installing Additional Domain Controllers by Using Install from Media
Verifying Active Directory Installation
Using Event Viewer
Using Active Directory Administrative Tools
Testing from Clients
Creating and Configuring Application Data Partitions
Creating Application Data Partitions
Managing Replicas
Removing Replicas
Using ntdsutil to Manage Application Data Partitions
Configuring DNS Integration with Active Directory
The Bottom Line
Chapter 8 Administering Active Directory
Active Directory Overview
Understanding Active Directory Features
Understanding Security Principals
An Overview of OUs
The Purpose of OUs
Benefits of OUs
Planning the OU Structure
Logical Grouping of Resources
Understanding OU Inheritance
Delegating Administrative Control
Applying Group Policies
Creating OUs
Managing OUs
Moving, Deleting, and Renaming OUs
Administering Properties of OUs
Delegating Control of OUs
Creating and Managing Active Directory Objects
Overview of Active Directory Objects
Managing Object Properties
Understanding Groups
Filtering and Advanced Active Directory Features
Moving, Renaming, and Deleting Active Directory Objects
Resetting an Existing Computer Account
Understanding Dynamic Access Control
Managing Security and Permissions
Publishing Active Directory Objects
Making Active Directory Objects Available to Users
Publishing Printers
Publishing Shared Folders
PowerShell for Active Directory
The Bottom Line
Chapter 9 Configuring DHCP
Understanding DHCP
Introducing the DORA Process
Advantages and Disadvantages of DHCP
Ipconfig Lease Options
Understanding Scope Details
Installing and Authorizing DHCP
Installing DHCP
Introducing the DHCP Snap-In
Authorizing DHCP for Active Directory
Creating and Managing DHCP Scopes
Creating a New Scope in IPv4
Creating a New Scope in IPv6
Changing Scope Properties (IPv4 and IPv6)
Changing Server Properties
Managing Reservations and Exclusions
Setting Scope Options for IPv4
Activating and Deactivating Scopes
Creating a Superscope for IPv4
Creating IPv4 Multicast Scopes
Integrating Dynamic DNS and IPv4 DHCP
Using DHCP Failover Architecture
Working with the DHCP Database Files
Working with Advanced DHCP Configuration Options
Implement DHCPv6
Configure High Availability for DHCP, Including DHCP Failover and Split Scopes
Configure DHCP Name Protection
PowerShell Commands
The Bottom Line
Chapter 10 Building Group Policies
Introducing Group Policy
Understanding Group Policy Settings
The Security Settings Section of the GPO
Client-Side Extensions
Group Policy Objects
Group Policy Inheritance
Planning a Group Policy Strategy
Implementing Group Policy
Creating GPOs
Linking Existing GPOs to Active Directory
Forcing a GPO to Update
Managing Group Policy
Managing GPOs
Security Filtering of a Group Policy
Delegating Administrative Control of GPOs
Controlling Inheritance and Filtering Group Policy
Assigning Script Policies
Understanding the Loopback Policy
Managing Network Configuration
Configuring Network Settings
Automatically Enrolling User and Computer Certificates in Group Policy
Redirecting Folders
Managing GPOs with Windows PowerShell Group Policy Cmdlets
Item-Level Targeting
Back Up, Restore, Import, Copy, and Migration Tables
The Bottom Line
Chapter 11 Advanced Group Policy Options
Deploying Software Through a GPO
The Software Management Life Cycle
The Windows Installer
Deploying Applications
Implementing Software Deployment
Preparing for Software Deployment
Software Restriction Policies
Using AppLocker
Group Policy Slow Link Detection
Publishing and Assigning Applications
Applying Software Updates
Verifying Software Installation
Configuring Automatic Updates in Group Policy
Configuring Software Deployment Settings
The Software Installation Properties Dialog Box
Removing Programs
Microsoft Windows Installer Settings
Troubleshooting Group Policies
RSoP in Logging Mode
RSoP in Planning Mode
Using the gpresult.exe Command
Using the Group Policy Infrastructure Status Dashboard
The Bottom Line
Chapter 12 Understanding Cloud Concepts
Understand Cloud Concepts
Cloud Advantages
Understanding CapEx vs. OpEx
Understanding Different Cloud Concepts
Understanding the Difference between IaaS, PaaS, and SaaS
Infrastructure as a Service
Platform as a Service
Software as a Service
Compare and Contrast the Service Types
The Bottom Line
Chapter 13 Configuring Azure
Understanding Azure Benefits
Azure Benefits
Understanding the Azure Dashboards
Using the Azure Dashboard
Configuring the Azure Portal Settings
The Bottom Line
Chapter 14 Understanding Azure Active Directory
Azure Active Directory
Understanding Azure AD
Self-Service Password Reset
The Bottom Line
Chapter 15 Creating a Hybrid Network
Creating a Hybrid Network
Password Hash Synchronization with Azure AD
Azure Active Directory Pass-Through Authentication
Federation with Azure AD
Common Identity Scenarios
Azure AD Connect
Implement Active Directory Federation Services
What Is a Claim?
AD FS in Windows Server 2022
Configuring a Web Application Proxy
Active Directory Federation Services Installation
AD FS and AD Connect
Planning Azure AD Authentication Options
Azure AD Multi-Factor Authentication
Azure AD Connect Sync—Understand and Customize Synchronization
Creating an Azure Recovery Policy
Model Apps
Automate Tasks in Recovery Plans
Run a Test Failover on Recovery Plans
Create a Recovery Plan
The Bottom Line
Chapter 16 Understanding Microsoft Endpoint
Using Microsoft Endpoint Manager
Understanding AutoPilot
Autopilot Benefits
Autopilot Prerequisites
Deployment Scenarios
Planning for Secure Applications Data on Devices
Configuring Managed Apps for Mobile Application Management (MAM)
Protecting Enterprise Data using Windows Information Protection (WIP)
The Bottom Line
Chapter 17 Configuring Security
Managing Windows Security
Windows Defender Security Center
Configuring Windows Firewall
Understanding Windows Firewall Basics
Windows Firewall with Advanced Security
Managing Security
Implementing Azure Windows Defender Advanced Threat Protection
Understanding Windows Defender Application Guard
Understanding Windows Defender Credential Guard
Implementing and Managing Windows Defender Exploit Guard
Using Windows Defender Application Control
The Bottom Line
Chapter 18 Creating Azure Policies
Azure Devices and Policies
Compliance Policies
Device Configuration Profiles
PowerShell Commands
The Bottom Line
Appendix: The Bottom Line
Chapter 1: Understanding Windows Server 2022
Chapter 2: Understanding Virtualization
Chapter 3: Installing and Configuring Hyper-V
Chapter 4: Installing Windows Server 2022
Chapter 5: Understanding IP
Chapter 6: Implementing DNS
Chapter 7: Understanding Active Directory
Chapter 8: Administering Active Directory
Chapter 9: Configuring DHCP
Chapter 10: Building Group Policies
Chapter 11: Advanced Group Policy Options
Chapter 12: Understanding Cloud Concepts
Chapter 13: Configuring Azure
Chapter 14: Understanding Azure Active Directory
Chapter 15: Creating a Hybrid Network
Chapter 16: Understanding Microsoft Endpoint
Chapter 17: Configuring Security
Chapter 18: Creating Azure Policies
Index
EULA