Windows Server 2008 UnLeashed......Page 1
Table of Contents......Page 5
Introduction......Page 49
Part I: Windows Server 2008 Overview......Page 53
Windows Server 2008 Defined......Page 55
When Is the Right Time to Migrate?......Page 60
Versions of Windows Server 2008......Page 61
What's New and What's the Same About Windows Server 2008?......Page 65
Changes in Active Directory......Page 68
Windows Server 2008 Benefits for Administration......Page 70
Improvements in Security in Windows Server 2008......Page 74
Improvements in Windows Server 2008 for Better Branch Office Support......Page 75
Improvements for Thin Client Terminal Services......Page 78
Improvements in Clustering and Storage Area Network Support......Page 81
Improvements in Server Roles in Windows Server 2008......Page 82
Identifying Which Windows Server 2008 Service to Install or Migrate to First......Page 85
2 Planning, Prototyping, Migrating, and Deploying Windows Server 2008 Best Practices......Page 91
Identifying the Business Goals and Objectives to Implement Windows Server 2008......Page 92
Identifying the Technical Goals and Objectives to Implement Windows Server 2008......Page 95
The Discovery Phase: Understanding the Existing Environment......Page 101
The Design Phase: Documenting the Vision and the Plan......Page 104
The Migration Planning Phase: Documenting the Process for Migration......Page 109
The Prototype Phase: Creating and Testing the Plan......Page 114
The Pilot Phase: Validating the Plan to a Limited Number of Users......Page 116
The Migration/Implementation Phase: Conducting the Migration or Installation......Page 119
Preplanning and Preparing a Server Installation......Page 125
Installing a Clean Version of Windows Server 2008 Operating System......Page 131
Upgrading to Windows Server 2008......Page 140
Understanding Server Core Installation......Page 145
Managing and Configuring a Server Core Installation......Page 147
Performing an Unattended Windows Server 2008 Installation......Page 152
Part II: Windows Server 2008 Active Directory......Page 155
4 Active Directory Domain Services Primer......Page 157
Examining the Evolution of Directory Services......Page 158
Understanding the Development of AD DS......Page 159
Examining AD DS's Structure......Page 160
Outlining AD DS's Components......Page 163
Understanding Domain Trusts......Page 168
Defining Organizational Units......Page 170
Outlining the Role of Groups in an AD DS Environment......Page 171
Explaining AD DS Replication......Page 173
Outlining the Role of DNS in AD DS......Page 175
Outlining AD DS Security......Page 177
Outlining AD DS Changes in Windows Server 2008......Page 178
Understanding AD DS Domain Design......Page 191
Choosing a Domain Namespace......Page 193
Examining Domain Design Features......Page 194
Choosing a Domain Structure......Page 195
Understanding the Single Domain Model......Page 196
Understanding the Multiple Domain Model......Page 199
Understanding the Multiple Trees in a Single Forest Model......Page 202
Understanding the Federated Forests Design Model......Page 203
Understanding the Empty-Root Domain Model......Page 206
Understanding the Placeholder Domain Model......Page 210
Understanding the Special-Purpose Domain Design Model......Page 211
Renaming an AD DS Domain......Page 212
6 Designing Organizational Unit and Group Structure......Page 217
Defining Organizational Units in AD DS......Page 218
Defining AD Groups......Page 220
Examining OU and Group Design......Page 223
Starting an OU Design......Page 224
Using OUs to Delegate Administration......Page 226
Group Policies and OU Design......Page 227
Understanding Group Design......Page 229
Exploring Sample Design Models......Page 230
Understanding AD DS Replication in Depth......Page 237
Understanding Active Directory Sites......Page 242
Planning Replication Topology......Page 250
Outlining Windows Server 2008 IPv6 Support......Page 256
Detailing Real-World Replication Designs......Page 259
Deploying Read-Only Domain Controllers (RODCs)......Page 263
Keeping a Distributed Environment in Sync......Page 269
Active Directory Federation Services......Page 275
Microsoft Identity Lifecycle Manager (ILM) 2007......Page 278
Harnessing the Power and Potential of ILM 2007......Page 282
Understanding and Using Windows Server 2008 UNIX Integration Components......Page 287
Reviewing the Subsystem for UNIX-Based Applications (SUA)......Page 294
Understanding the Identity Management for UNIX Components......Page 295
Administrative Improvements with Windows Server 2008......Page 298
Part III: Networking Services......Page 301
10 Domain Name System and IPv6......Page 303
Understanding the Need for DNS......Page 304
Getting Started with DNS on Windows Server 2008......Page 306
Resource Records......Page 309
Understanding DNS Zones......Page 313
Performing Zone Transfers......Page 317
Understanding DNS Queries......Page 320
Other DNS Components......Page 321
Understanding the Evolution of Microsoft DNS......Page 326
DNS in Windows Server 2008......Page 327
DNS in an Active Directory Domain Services Environment......Page 329
Troubleshooting DNS......Page 333
IPv6 Introduction......Page 337
How to Configure IPv6 on Windows Server 2008......Page 341
11 DHCP/WINS/Domain Controllers......Page 349
Understanding the Key Components of an Enterprise Network......Page 350
Exploring the Dynamic Host Configuration Protocol (DHCP)......Page 352
Exploring DHCP Changes in Windows Server 2008......Page 359
Performing DHCP Failover......Page 360
Exploring Advanced DHCP Concepts......Page 364
Securing DHCP......Page 367
Reviewing the Windows Internet Naming Service (WINS)......Page 369
Installing and Configuring WINS......Page 371
Planning, Migrating, and Maintaining WINS......Page 375
Exploring Global Catalog Domain Controller Placement......Page 377
Understanding Internet Information Services (IIS) 7.0......Page 383
Planning and Designing Internet Information Services 7.0......Page 388
Installing and Upgrading IIS 7.0......Page 389
Installing and Configuring Websites......Page 395
Installing and Configuring FTP Services......Page 403
Securing Internet Information Services 7.0......Page 413
Part IV: Security......Page 425
Defining Windows Server 2008 Security......Page 427
Deploying Physical Security......Page 428
Using the Integrated Windows Firewall with Advanced Security......Page 433
Hardening Server Security......Page 436
Examining File-Level Security......Page 438
Additional Security Mechanisms......Page 441
Using Windows Server Update Services......Page 442
14 Transport-Level Security......Page 451
Introduction to Transport-Level Security in Windows Server 2008......Page 452
Deploying a Public Key Infrastructure with Windows Server 2008......Page 453
Understanding Active Directory Certificate Services (AD CS) in Windows Server 2008......Page 454
AD DS Rights Management Services......Page 460
Using IPSec Encryption with Windows Server 2008......Page 463
Understanding Network Access Protection (NAP) in Windows Server 2008......Page 467
Deploying a Windows Server 2008 Network Policy Server......Page 469
Enforcing Policy Settings with a Network Policy Server......Page 473
Deploying and Enforcing a Virtual Private Network (VPN) Using an RRAS Server......Page 482
Part V: Migrating to Windows Server 2008......Page 489
Beginning the Migration Process......Page 491
Big Bang Migration......Page 495
Phased Migration......Page 499
Multiple Domain Consolidation Migration......Page 512
17 Compatibility Testing for Windows Server 2008......Page 525
The Importance of Compatibility Testing......Page 526
Preparing for Compatibility Testing......Page 527
Researching Products and Applications......Page 534
Verifying Compatibility with Vendors......Page 537
Lab-Testing Existing Applications......Page 543
Documenting the Results of the Compatibility Testing......Page 545
Determining Whether a Prototype Phase Is Required......Page 546
Part VI: Windows Server 2008 Administration and Management......Page 549
18 Windows Server 2008 Administration......Page 551
Defining the Administrative Model......Page 552
Examining Active Directory Site Administration......Page 553
Configuring Sites......Page 555
Examining Windows Server 2008 Active Directory Groups......Page 562
Creating Groups......Page 563
Understanding User Profiles......Page 567
Managing Users with Local Security and Group Policies......Page 570
Managing Printers with the Print Management Console......Page 577
Group Policy Overview......Page 585
Group Policy ProcessingβHow Does It Work?......Page 586
Local Group Policies......Page 588
Security Templates......Page 590
Elements of Group Policy......Page 591
Group Policy Administrative Templates Explained......Page 602
Policy Management Tools......Page 606
Designing a Group Policy Infrastructure......Page 614
GPO Administrative Tasks......Page 616
20 Windows Server 2008 Management and Maintenance Practices......Page 633
Initial Configuration Tasks......Page 634
Managing Windows Server 2008 Roles and Features......Page 635
Server Manager......Page 639
Server Manager Diagnostics Page......Page 644
Server Manager Configuration Page......Page 648
Server Manager Storage Page......Page 653
Auditing the Environment......Page 657
Managing Windows Server 2008 Remotely......Page 664
Using Common Practices for Securing and Managing Windows Server 2008......Page 671
Keeping Up with Service Packs and Updates......Page 672
Maintaining Windows Server 2008......Page 677
Understanding Shells......Page 691
Understanding PowerShell......Page 693
Using Windows PowerShell......Page 715
22 Documenting a Windows Server 2008 Environment......Page 737
Benefits of Documentation......Page 738
Types of Documents......Page 739
Knowledge Sharing and Knowledge Management......Page 740
Windows Server 2008 Project Documents......Page 741
Administration and Maintenance Documents......Page 754
Network Infrastructure......Page 758
Disaster Recovery Documentation......Page 759
Performance Documentation......Page 762
Routine Reporting......Page 763
Security Documentation......Page 764
23 Integrating System Center Operations Manager 2007 with Windows Server 2008......Page 767
Explaining How OpsMgr Works......Page 768
Outlining OpsMgr Architecture......Page 769
Understanding How to Use OpsMgr......Page 772
Understanding OpsMgr Component Requirements......Page 774
Understanding Advanced OpsMgr Concepts......Page 775
Securing OpsMgr......Page 779
Part VII: Remote and Mobile Technologies......Page 787
24 Server-to-Client Remote and Mobile Access......Page 789
Windows Server 2008 RRAS Features and Services......Page 790
Virtual Private Networking in Windows Server 2008......Page 791
Authentication Options to an RRAS System......Page 795
VPN Protocols......Page 797
Choosing Between PPTP, L2TP/IPSec, and SSTP......Page 801
VPN Scenario......Page 805
Connection Manager......Page 830
25 Terminal Services......Page 835
Why Implement Terminal Services......Page 836
How Terminal Services Works......Page 839
Terminal Services Features......Page 841
Planning for Terminal Services......Page 853
Deploying Terminal Services......Page 856
Securing Terminal Services......Page 881
Sizing and Optimizing Terminal Services Environments......Page 883
Supporting Terminal Services......Page 885
Part VIII: Desktop Administration......Page 889
26 Windows Server Administration Tools for Desktops......Page 891
Managing Desktops and Servers......Page 892
Operating System Deployment Options......Page 893
Windows Server 2008 Windows Deployment Services......Page 895
Installing Windows Deployment Services (WDS)......Page 897
Creating Discover Images......Page 905
Creating Custom Installations Using Capture Images......Page 911
General Desktop Administration Tasks......Page 915
27 Group Policy Management for Network Clients......Page 917
Windows Group Policies......Page 918
Group Policy Feature Set......Page 922
Planning Workgroup and Stand-Alone Local Group Policy Configuration......Page 926
Planning Domain Group Policy Objects......Page 929
Managing Computers with Domain Policies......Page 938
Managing Users with Policies......Page 957
Managing Active Directory with Policies......Page 963
Part IX: Fault Tolerance Technologies......Page 985
Windows Server 2008 File System Overview/Technologies......Page 987
File System Access Services and Technologies......Page 992
Windows Server 2008 Disks......Page 994
Utilizing External Disk Subsystems......Page 997
Managing Windows Server 2008 Disks......Page 998
System File Reliability......Page 1004
Adding the File Services Role......Page 1005
Managing Data Access Using Windows Server 2008 Shares......Page 1007
Volume-Based NTFS Quota Management......Page 1012
File Server Resource Manager (FSRM)......Page 1013
The Distributed File System......Page 1024
Planning a DFS Deployment......Page 1027
Installing DFS......Page 1030
Managing and Troubleshooting DFS......Page 1036
Using the Volume Shadow Copy Service......Page 1039
29 System-Level Fault Tolerance (Clustering/Network Load Balancing)......Page 1045
Building Fault-Tolerant Windows Server 2008 Systems......Page 1046
Windows Server 2008 Clustering Technologies......Page 1049
Determining the Correct Clustering Technology......Page 1053
Overview of Failover Clusters......Page 1055
Deploying Failover Clusters......Page 1061
Backing Up and Restoring Failover Clusters......Page 1080
Deploying Network Load Balancing Clusters......Page 1082
Managing NLB Clusters......Page 1091
30 Backing Up the Windows Server 2008 Environment......Page 1095
Understanding Your Backup and Recovery Needs and Options......Page 1096
Creating the Disaster Recovery Solution......Page 1100
Documenting the Enterprise......Page 1101
Developing a Backup Strategy......Page 1102
Windows Server Backup Overview......Page 1103
Using Windows Server Backup......Page 1106
Managing Backups Using the Command-Line Utility wbadmin.exe......Page 1115
Backing Up Windows Server 2008 Role Services......Page 1116
Volume Shadow Copy Service (VSS)......Page 1125
Windows Server 2008 Startup Options......Page 1127
Ongoing Backup and Recovery Preparedness......Page 1129
When Disasters Strike......Page 1133
Disaster Scenario Troubleshooting......Page 1136
Recovering from a Server or System Failure......Page 1139
Managing and Accessing Windows Server Backup Media......Page 1147
Windows Server Backup Volume Recovery......Page 1148
Recovering Role Services and Features......Page 1151
Part X: Optimizing, Tuning, Debugging, and Problem Solving......Page 1161
32 Optimizing Windows Server 2008 for Branch Office Communications......Page 1163
Understanding Read-Only Domain Controllers (RODCs)......Page 1164
Installing a Read-Only Domain Controller......Page 1168
Understanding BitLocker Drive Encryption......Page 1181
Configuring BitLocker Drive Encryption on a Windows Server 2008 Branch Office Domain Controller......Page 1183
Enhancing Replication and WAN Utilization at the Branch Office......Page 1192
Using the Task Manager for Logging and Debugging......Page 1197
Using Event Viewer for Logging and Debugging......Page 1201
Performance and Reliability Monitoring......Page 1211
Setting Baseline Values......Page 1221
Using the Debugging Tools Available in Windows Server 2008......Page 1223
Task Scheduler......Page 1234
Defining Capacity Analysis......Page 1241
Using Capacity-Analysis Tools......Page 1246
Monitoring System Performance......Page 1266
Optimizing Performance by Server Roles......Page 1275
Part XI: Integrated Windows Application Services......Page 1283
35 Windows SharePoint Services 3.0......Page 1285
Understanding the History of SharePoint Technologies......Page 1286
What Are the Differences Between Windows SharePoint Services 3.0 and SharePoint Server 2007?......Page 1288
Identifying the Need for Windows SharePoint Services......Page 1290
Installing Windows SharePoint Services......Page 1292
Lists and Libraries in Windows SharePoint Services 3.0......Page 1303
Integrating Office 2007 Applications with Windows SharePoint Services 3.0......Page 1318
Managing the Site Collection......Page 1323
36 Windows Media Services......Page 1333
Understanding Windows Media Services......Page 1334
Installing Windows Media Services......Page 1339
Using Windows Media Services for Real-Time Live Broadcasts......Page 1342
Broadcasting Stored Single Files......Page 1346
Hosting a Directory of Videos for On-Demand Playback......Page 1348
Combining Multiple Files for a Combined Single Broadcast......Page 1351
Understanding Windows Media Encoder......Page 1354
Broadcasting a Live Event......Page 1356
Capturing Audio or Video for Future Playback......Page 1359
Using Other Windows Media Encoder Options......Page 1361
Understanding Microsoft's Virtualization Strategy......Page 1365
Planning Your Implementation of Hyper-V......Page 1369
Installation of the Microsoft Hyper-V Server Role......Page 1371
Becoming Familiar with the Hyper-V Administrative Console......Page 1374
Installing a Guest Operating System Session......Page 1378
Modifying Guest Session Configuration Settings......Page 1382
Launching a Hyper-V Guest Session......Page 1384
Using Snapshots of Guest Operating System Sessions......Page 1386
A......Page 1391
B......Page 1398
C......Page 1401
D......Page 1407
E......Page 1418
F......Page 1420
G......Page 1423
H......Page 1427
I......Page 1428
JβK......Page 1433
L......Page 1434
M......Page 1436
N......Page 1441
O......Page 1444
P......Page 1446
R......Page 1452
S......Page 1458
T......Page 1468
U......Page 1472
V......Page 1474
W......Page 1477
XβZ......Page 1484