Windows Server 2008 Unleashed

Windows Server 2008 Unleashed......Page 1
Table of Contents......Page 6
Introduction......Page 50
Part I: Windows Server 2008 Overview......Page 54
Windows Server 2008 Defined......Page 56
When Is the Right Time to Migrate?......Page 61
Versions of Windows Server 2008......Page 62
What's New and What's the Same About Windows Server 2008?......Page 66
Changes in Active Directory......Page 69
Windows Server 2008 Benefits for Administration......Page 71
Improvements in Security in Windows Server 2008......Page 75
Improvements in Windows Server 2008 for Better Branch Office Support......Page 76
Improvements for Thin Client Terminal Services......Page 79
Improvements in Clustering and Storage Area Network Support......Page 82
Improvements in Server Roles in Windows Server 2008......Page 83
Identifying Which Windows Server 2008 Service to Install or Migrate to First......Page 86
2 Planning, Prototyping, Migrating, and Deploying Windows Server 2008 Best Practices......Page 92
Identifying the Business Goals and Objectives to Implement Windows Server 2008......Page 93
Identifying the Technical Goals and Objectives to Implement Windows Server 2008......Page 96
The Discovery Phase: Understanding the Existing Environment......Page 102
The Design Phase: Documenting the Vision and the Plan......Page 105
The Migration Planning Phase: Documenting the Process for Migration......Page 110
The Prototype Phase: Creating and Testing the Plan......Page 115
The Pilot Phase: Validating the Plan to a Limited Number of Users......Page 117
The Migration/Implementation Phase: Conducting the Migration or Installation......Page 120
Preplanning and Preparing a Server Installation......Page 126
Installing a Clean Version of Windows Server 2008 Operating System......Page 132
Upgrading to Windows Server 2008......Page 141
Understanding Server Core Installation......Page 146
Managing and Configuring a Server Core Installation......Page 148
Performing an Unattended Windows Server 2008 Installation......Page 153
Part II: Windows Server 2008 Active Directory......Page 156
4 Active Directory Domain Services Primer......Page 158
Examining the Evolution of Directory Services......Page 159
Understanding the Development of AD DS......Page 160
Examining AD DS's Structure......Page 161
Outlining AD DS's Components......Page 164
Understanding Domain Trusts......Page 169
Defining Organizational Units......Page 171
Outlining the Role of Groups in an AD DS Environment......Page 172
Explaining AD DS Replication......Page 174
Outlining the Role of DNS in AD DS......Page 176
Outlining AD DS Security......Page 178
Outlining AD DS Changes in Windows Server 2008......Page 179
Understanding AD DS Domain Design......Page 192
Choosing a Domain Namespace......Page 194
Examining Domain Design Features......Page 195
Choosing a Domain Structure......Page 196
Understanding the Single Domain Model......Page 197
Understanding the Multiple Domain Model......Page 200
Understanding the Multiple Trees in a Single Forest Model......Page 203
Understanding the Federated Forests Design Model......Page 204
Understanding the Empty-Root Domain Model......Page 207
Understanding the Placeholder Domain Model......Page 211
Understanding the Special-Purpose Domain Design Model......Page 212
Renaming an AD DS Domain......Page 213
6 Designing Organizational Unit and Group Structure......Page 218
Defining Organizational Units in AD DS......Page 219
Defining AD Groups......Page 221
Examining OU and Group Design......Page 224
Starting an OU Design......Page 225
Using OUs to Delegate Administration......Page 227
Group Policies and OU Design......Page 228
Understanding Group Design......Page 230
Exploring Sample Design Models......Page 231
Understanding AD DS Replication in Depth......Page 238
Understanding Active Directory Sites......Page 243
Planning Replication Topology......Page 251
Outlining Windows Server 2008 IPv6 Support......Page 257
Detailing Real-World Replication Designs......Page 260
Deploying Read-Only Domain Controllers (RODCs)......Page 264
Keeping a Distributed Environment in Sync......Page 270
Active Directory Federation Services......Page 276
Microsoft Identity Lifecycle Manager (ILM) 2007......Page 279
Harnessing the Power and Potential of ILM 2007......Page 283
Understanding and Using Windows Server 2008 UNIX Integration Components......Page 288
Reviewing the Subsystem for UNIX-Based Applications (SUA)......Page 295
Understanding the Identity Management for UNIX Components......Page 296
Administrative Improvements with Windows Server 2008......Page 299
Part III: Networking Services......Page 302
10 Domain Name System and IPv6......Page 304
Understanding the Need for DNS......Page 305
Getting Started with DNS on Windows Server 2008......Page 307
Resource Records......Page 310
Understanding DNS Zones......Page 314
Performing Zone Transfers......Page 318
Understanding DNS Queries......Page 321
Other DNS Components......Page 322
Understanding the Evolution of Microsoft DNS......Page 327
DNS in Windows Server 2008......Page 328
DNS in an Active Directory Domain Services Environment......Page 330
Troubleshooting DNS......Page 334
IPv6 Introduction......Page 338
How to Configure IPv6 on Windows Server 2008......Page 342
11 DHCP/WINS/Domain Controllers......Page 350
Understanding the Key Components of an Enterprise Network......Page 351
Exploring the Dynamic Host Configuration Protocol (DHCP)......Page 353
Exploring DHCP Changes in Windows Server 2008......Page 360
Performing DHCP Failover......Page 361
Exploring Advanced DHCP Concepts......Page 365
Securing DHCP......Page 368
Reviewing the Windows Internet Naming Service (WINS)......Page 370
Installing and Configuring WINS......Page 372
Planning, Migrating, and Maintaining WINS......Page 376
Exploring Global Catalog Domain Controller Placement......Page 378
Understanding Internet Information Services (IIS) 7.0......Page 384
Planning and Designing Internet Information Services 7.0......Page 389
Installing and Upgrading IIS 7.0......Page 390
Installing and Configuring Websites......Page 396
Installing and Configuring FTP Services......Page 404
Securing Internet Information Services 7.0......Page 414
Part IV: Security......Page 426
Defining Windows Server 2008 Security......Page 428
Deploying Physical Security......Page 429
Using the Integrated Windows Firewall with Advanced Security......Page 434
Hardening Server Security......Page 437
Examining File-Level Security......Page 439
Additional Security Mechanisms......Page 442
Using Windows Server Update Services......Page 443
14 Transport-Level Security......Page 452
Introduction to Transport-Level Security in Windows Server 2008......Page 453
Deploying a Public Key Infrastructure with Windows Server 2008......Page 454
Understanding Active Directory Certificate Services (AD CS) in Windows Server 2008......Page 455
AD DS Rights Management Services......Page 461
Using IPSec Encryption with Windows Server 2008......Page 464
Understanding Network Access Protection (NAP) in Windows Server 2008......Page 468
Deploying a Windows Server 2008 Network Policy Server......Page 470
Enforcing Policy Settings with a Network Policy Server......Page 474
Deploying and Enforcing a Virtual Private Network (VPN) Using an RRAS Server......Page 483
Part V: Migrating to Windows Server 2008......Page 490
Beginning the Migration Process......Page 492
Big Bang Migration......Page 496
Phased Migration......Page 500
Multiple Domain Consolidation Migration......Page 513
17 Compatibility Testing for Windows Server 2008......Page 526
The Importance of Compatibility Testing......Page 527
Preparing for Compatibility Testing......Page 528
Researching Products and Applications......Page 535
Verifying Compatibility with Vendors......Page 538
Lab-Testing Existing Applications......Page 544
Documenting the Results of the Compatibility Testing......Page 546
Determining Whether a Prototype Phase Is Required......Page 547
Part VI: Windows Server 2008 Administration and Management......Page 550
18 Windows Server 2008 Administration......Page 552
Defining the Administrative Model......Page 553
Examining Active Directory Site Administration......Page 554
Configuring Sites......Page 556
Examining Windows Server 2008 Active Directory Groups......Page 563
Creating Groups......Page 564
Understanding User Profiles......Page 568
Managing Users with Local Security and Group Policies......Page 571
Managing Printers with the Print Management Console......Page 578
Group Policy Overview......Page 586
Group Policy Processing—How Does It Work?......Page 587
Local Group Policies......Page 589
Security Templates......Page 591
Elements of Group Policy......Page 592
Group Policy Administrative Templates Explained......Page 603
Policy Management Tools......Page 607
Designing a Group Policy Infrastructure......Page 615
GPO Administrative Tasks......Page 617
20 Windows Server 2008 Management and Maintenance Practices......Page 634
Initial Configuration Tasks......Page 635
Managing Windows Server 2008 Roles and Features......Page 636
Server Manager......Page 640
Server Manager Diagnostics Page......Page 645
Server Manager Configuration Page......Page 649
Server Manager Storage Page......Page 654
Auditing the Environment......Page 658
Managing Windows Server 2008 Remotely......Page 665
Using Common Practices for Securing and Managing Windows Server 2008......Page 672
Keeping Up with Service Packs and Updates......Page 673
Maintaining Windows Server 2008......Page 678
Understanding Shells......Page 692
Understanding PowerShell......Page 694
Using Windows PowerShell......Page 716
22 Documenting a Windows Server 2008 Environment......Page 738
Benefits of Documentation......Page 739
Types of Documents......Page 740
Knowledge Sharing and Knowledge Management......Page 741
Windows Server 2008 Project Documents......Page 742
Administration and Maintenance Documents......Page 755
Network Infrastructure......Page 759
Disaster Recovery Documentation......Page 760
Performance Documentation......Page 763
Routine Reporting......Page 764
Security Documentation......Page 765
23 Integrating System Center Operations Manager 2007 with Windows Server 2008......Page 768
Explaining How OpsMgr Works......Page 769
Outlining OpsMgr Architecture......Page 770
Understanding How to Use OpsMgr......Page 773
Understanding OpsMgr Component Requirements......Page 775
Understanding Advanced OpsMgr Concepts......Page 776
Securing OpsMgr......Page 780
Part VII: Remote and Mobile Technologies......Page 788
24 Server-to-Client Remote and Mobile Access......Page 790
Windows Server 2008 RRAS Features and Services......Page 791
Virtual Private Networking in Windows Server 2008......Page 792
Authentication Options to an RRAS System......Page 796
VPN Protocols......Page 798
Choosing Between PPTP, L2TP/IPSec, and SSTP......Page 802
VPN Scenario......Page 806
Connection Manager......Page 831
25 Terminal Services......Page 836
Why Implement Terminal Services......Page 837
How Terminal Services Works......Page 840
Terminal Services Features......Page 842
Planning for Terminal Services......Page 854
Deploying Terminal Services......Page 857
Securing Terminal Services......Page 882
Sizing and Optimizing Terminal Services Environments......Page 884
Supporting Terminal Services......Page 886
Part VIII: Desktop Administration......Page 890
26 Windows Server Administration Tools for Desktops......Page 892
Managing Desktops and Servers......Page 893
Operating System Deployment Options......Page 894
Windows Server 2008 Windows Deployment Services......Page 896
Installing Windows Deployment Services (WDS)......Page 898
Creating Discover Images......Page 906
Creating Custom Installations Using Capture Images......Page 912
General Desktop Administration Tasks......Page 916
27 Group Policy Management for Network Clients......Page 918
Windows Group Policies......Page 919
Group Policy Feature Set......Page 923
Planning Workgroup and Stand-Alone Local Group Policy Configuration......Page 927
Planning Domain Group Policy Objects......Page 930
Managing Computers with Domain Policies......Page 939
Managing Users with Policies......Page 958
Managing Active Directory with Policies......Page 964
Part IX: Fault Tolerance Technologies......Page 986
Windows Server 2008 File System Overview/Technologies......Page 988
File System Access Services and Technologies......Page 993
Windows Server 2008 Disks......Page 995
Utilizing External Disk Subsystems......Page 998
Managing Windows Server 2008 Disks......Page 999
System File Reliability......Page 1005
Adding the File Services Role......Page 1006
Managing Data Access Using Windows Server 2008 Shares......Page 1008
Volume-Based NTFS Quota Management......Page 1013
File Server Resource Manager (FSRM)......Page 1014
The Distributed File System......Page 1025
Planning a DFS Deployment......Page 1028
Installing DFS......Page 1031
Managing and Troubleshooting DFS......Page 1037
Using the Volume Shadow Copy Service......Page 1040
29 System-Level Fault Tolerance (Clustering/Network Load Balancing)......Page 1046
Building Fault-Tolerant Windows Server 2008 Systems......Page 1047
Windows Server 2008 Clustering Technologies......Page 1050
Determining the Correct Clustering Technology......Page 1054
Overview of Failover Clusters......Page 1056
Deploying Failover Clusters......Page 1062
Backing Up and Restoring Failover Clusters......Page 1081
Deploying Network Load Balancing Clusters......Page 1083
Managing NLB Clusters......Page 1092
30 Backing Up the Windows Server 2008 Environment......Page 1096
Understanding Your Backup and Recovery Needs and Options......Page 1097
Creating the Disaster Recovery Solution......Page 1101
Documenting the Enterprise......Page 1102
Developing a Backup Strategy......Page 1103
Windows Server Backup Overview......Page 1104
Using Windows Server Backup......Page 1107
Managing Backups Using the Command-Line Utility wbadmin.exe......Page 1116
Backing Up Windows Server 2008 Role Services......Page 1117
Volume Shadow Copy Service (VSS)......Page 1126
Windows Server 2008 Startup Options......Page 1128
Ongoing Backup and Recovery Preparedness......Page 1130
When Disasters Strike......Page 1134
Disaster Scenario Troubleshooting......Page 1137
Recovering from a Server or System Failure......Page 1140
Managing and Accessing Windows Server Backup Media......Page 1148
Windows Server Backup Volume Recovery......Page 1149
Recovering Role Services and Features......Page 1152
Part X: Optimizing, Tuning, Debugging, and Problem Solving......Page 1162
32 Optimizing Windows Server 2008 for Branch Office Communications......Page 1164
Understanding Read-Only Domain Controllers (RODCs)......Page 1165
Installing a Read-Only Domain Controller......Page 1169
Understanding BitLocker Drive Encryption......Page 1182
Configuring BitLocker Drive Encryption on a Windows Server 2008 Branch Office Domain Controller......Page 1184
Enhancing Replication and WAN Utilization at the Branch Office......Page 1193
Using the Task Manager for Logging and Debugging......Page 1198
Using Event Viewer for Logging and Debugging......Page 1202
Performance and Reliability Monitoring......Page 1212
Setting Baseline Values......Page 1222
Using the Debugging Tools Available in Windows Server 2008......Page 1224
Task Scheduler......Page 1235
Defining Capacity Analysis......Page 1242
Using Capacity-Analysis Tools......Page 1247
Monitoring System Performance......Page 1267
Optimizing Performance by Server Roles......Page 1276
Part XI: Integrated Windows Application Services......Page 1284
35 Windows SharePoint Services 3.0......Page 1286
Understanding the History of SharePoint Technologies......Page 1287
What Are the Differences Between Windows SharePoint Services 3.0 and SharePoint Server 2007?......Page 1289
Identifying the Need for Windows SharePoint Services......Page 1291
Installing Windows SharePoint Services......Page 1293
Lists and Libraries in Windows SharePoint Services 3.0......Page 1304
Integrating Office 2007 Applications with Windows SharePoint Services 3.0......Page 1319
Managing the Site Collection......Page 1324
36 Windows Media Services......Page 1334
Understanding Windows Media Services......Page 1335
Installing Windows Media Services......Page 1340
Using Windows Media Services for Real-Time Live Broadcasts......Page 1343
Broadcasting Stored Single Files......Page 1347
Hosting a Directory of Videos for On-Demand Playback......Page 1349
Combining Multiple Files for a Combined Single Broadcast......Page 1352
Understanding Windows Media Encoder......Page 1355
Broadcasting a Live Event......Page 1357
Capturing Audio or Video for Future Playback......Page 1360
Using Other Windows Media Encoder Options......Page 1362
Understanding Microsoft's Virtualization Strategy......Page 1366
Planning Your Implementation of Hyper-V......Page 1370
Installation of the Microsoft Hyper-V Server Role......Page 1372
Becoming Familiar with the Hyper-V Administrative Console......Page 1375
Installing a Guest Operating System Session......Page 1379
Modifying Guest Session Configuration Settings......Page 1383
Launching a Hyper-V Guest Session......Page 1385
Using Snapshots of Guest Operating System Sessions......Page 1387
A......Page 1392
B......Page 1399
C......Page 1402
D......Page 1408
E......Page 1419
F......Page 1421
G......Page 1424
H......Page 1428
I......Page 1429
J–K......Page 1434
L......Page 1435
M......Page 1437
N......Page 1442
O......Page 1445
P......Page 1447
R......Page 1453
S......Page 1459
T......Page 1469
U......Page 1473
V......Page 1475
W......Page 1478
X–Z......Page 1485