MOC 20412B: Configuring Advanced Windows Server 2012 Services

Course Overview

This course provides students with the knowledge and skills to provision and configure

advanced services using Windows Server 2012.

Course Introduction 7m

Course Introduction

Module 01 - Implementing Advanced Network Services 1h 33m

Lesson 1: Configuring Advanced DHCP Features

Overview of DHCP Components

Configuring DHCP Interaction With DNS

Configuring Advanced DHCP Scope Designs

DHCP Integration With IPv6

What Is DHCP Name Protection?

What Is DHCP Failover?

Demo - Configuring DHCP Failover

Lesson 2: Configuring Advanced DNS Settings

Managing DNS Services

Optimizing DNS Name Resolution

What Is the GlobalNames Zone?

Options for Implementing DNS Security

How DNSSEC Works

New DNSSEC Features for Windows Server 2012

Demo - Configuring DNSSEC

Lesson 3: Implementing IPAM

What Is IPAM?

IPAM Architecture

Requirements for IPAM Implementation

Managing IP Addressing Using IPAM

Demo - Installing and Configuring IPAM

IPAM Management and Monitoring

Considerations for Implementing IPAM

Module 01 Review

Module 02 - Implementing Advanced File Services 1h 23m

Lesson 1: Configuring iSCSI Storage

What Is iSCSI?

iSCSI Target Server and iSCSI Initiator

Options for implementing High Availability for iSCSI

iSCSI Security Options

Demo - Configuring an iSCSI Target

Demo - Connecting to the iSCSI Storage

Considerations for Implementing iSCSI Storage

Lesson 2: Configuring BranchCache

How Does BranchCache Work?

BranchCache Requirements

Configuring BranchCache Server Settings

Configuring BranchCache Client Settings

Demo - Configuring BranchCache

Monitoring BranchCache

Lesson 3: Optimizing Storage Usage

What Is File Server Resource Manager?

What Is File Classification?

What Are Classification Rules?

Demo - Configuring File Classification

Options for Storage Optimization in Windows Server 2012

Demo - Configuring Data Deduplication

Module 02 Review

Module 03 - Implementing Dynamic Access Control 1h 25m

Lesson 1: Overview of Dynamic Access Control

What Is Dynamic Access Control?

Foundation Technologies for Dynamic Access Control

Dynamic Access Control vs. Alternative Permissions Technologies

What Is Identity?

What Is a Claim?

What Is a Central Access Policy?

Lesson 2: Planning for Dynamic Access Control

Reasons for Implementing Dynamic Access Control

Planning for Central Access Policy

Planning File Classifications

Planning File Access Auditing

Planning Access Denied Assistance

Lesson 3: Deploying Dynamic Access Control

Prerequisites for Implementing Dynamic Access Control

Enabling Support in AD DS for Dynamic Access Control

Demo - Planning for Dynamic Access Control

Implementing Claims and Resource Property Objects

Demo - Configuring User and Device Claims

Implementing Central Access Policies and Rules

Demo - Configuring Central Access Policies and Rules

Implementing File Access Auditing

Implementing Access Denied Assistance

Implementing File Classifications

Implementing Central Access Policy Changes

Demo - Validating Dynamic Access Control

Module 03 Review

Module 04 - Implementing Distributed Active Directory Domain Services Deployments 1h 18m

Lesson 1: Overview of Distributed AD DS Deployments

Discussion: Overview of AD DS Components

Overview of Domain and Forest Boundaries in an AD DS Structure

Why Implement Multiple Domains?

Why Implement Multiple Forests?

DNS Requirements for Complex AD DS Environments

Lesson 2: Deploying a Distributed AD DS Environment

Demo - Installing a Domain Controller in a New Domain in a Forest

AD DS Domain Functional Levels

AD DS Forest Functional Levels

Upgrading a Previous Version of AD DS to Windows Server 2012

Migrating to Windows Server 2012 AD DS from a Previous Version

Lesson 3: Configuring AD DS Trusts

Overview of Different AD DS Trust Types

How Trusts Work Within a Forest

How Trusts Work Between Forests

Configuring Advanced AD DS Trust Settings

Demo - Configuring a Forest Trust

Module 04 Review

Module 05 - Implementing Active Directory Domain Services Sites and Replication 1h 28m

Lesson 1: Overview of AD DS Replication

What Are AD DS Partitions?

Characteristics of AD DS Replication

How AD DS Replication Works Within a Site

Resolving Replication Conflicts

How Replication Topology Is Generated

How RODC Replication Works

How SYSVOL Replication Works

Lesson 2: Configuring AD DS Sites

What Are AD DS Sites?

Why Implement Additional Sites?

Demo - Configuring AD DS Sites

How Replication Works Between Sites

What Is the Intersite Topology Generator?

Overview of SRV Resource Records for Domain Controllers

How Client Computers Locate Domain Controllers Within Sites

Lesson 3: Configuring and Monitoring AD DS Replication

What Are AD DS Site Links?

What Is Site Link Bridging?

What Is Universal Group Membership Caching?

Managing Intersite Replication

Demo - Configuring AD DS Intersite Replication

Options for Configuring Password Replication Policies for RODCs

Demo - Configuring Password Replication Policies

Tools for Monitoring and Managing Replication

Module 05 Review

Module 06 - Implementing Active Directory Certificate Services 2h 2m

Lesson 1: PKI Overview

What Is PKI?

Components of a PKI Solution

What Are CAs?

Overview of the AD CS Server Role in Windows Server 2012

What Is New in AD CS in Windows Server 2012

Public vs. Private CAs

What Is a Cross-Certification Hierarchy?

Lesson 2: Deploying CAs

Options for Implementing CA Hierarchies

Standalone vs. Enterprise Cas

Considerations for Deploying a Root CA

Demo - Deploying a Root CA

Considerations for Deploying a Subordinate CA

How to Use the CAPolicy.inf File for Installation

Lesson 3: Deploying and Managing Certificate Templates

What Are Certificate Templates?

Certificate Template Versions in Windows Server 2012

Configuring Certificate Template Permissions

Configuring Certificate Template Settings

Options for Updating a Certificate Template

Demo - Modifying and Enabling a Certificate Template

Lesson 4: Implementing Certificate Distribution and Revocation

Options for Certificate Enrollment

How Does Autoenrollment Work?

What Is the Restricted Enrollment Agent?

Demo - Configuring the Restricted Enrollment Agent

What Is Network Device Enrollment Service?

How Does Certificate Revocation Work?

Considerations for Publishing AIAs and CDPs

What Is an Online Responder?

Demo - Configuring an Online Responder

Lesson 5: Managing Certificate Recovery

Overview of Key Archival and Recovery

Configuring Automatic Key Archival

Demo - Configuring a CA for Key Archival

Recovering a Lost Key

Demo - Recovering a Lost Private Key

Module 06 Review

Module 07 - Implementing Active Directory Rights Management Services 1h 12m

Lesson 1: AD RMS Overview

What Is AD RMS?

Usage Scenarios for AD RMS

Overview of the AD RMS Components

AD RMS Certificates and Licenses

How AD RMS Works

Lesson 2: Deploying and Managing an AD RMS Infrastructure

AD RMS Deployment Scenarios

Configuring the AD RMS Cluster

Demo - Installing the First Server of an AD RMS Cluster

AD RMS Client Requirements

Implementing an AD RMS Backup and Recovery Strategy

Decommissioning and Removing AD RMS

Lesson 3: Configuring AD RMS Content Protection

What Are Rights Policy Templates?

Demo - Creating a Rights Policy Template

Providing Rights Policy Templates for Offline Use

What Are Exclusion Policies?

Demo - Creating an Exclusion Policy to Exclude an Application

AD RMS Super Users Group

Lesson 4: Configuring External Access to AD RMS

Options for Enabling External Users with AD RMS Access

Implementing TUD

Implementing TPD

Sharing AD RMS–Protected Documents by Using Windows Live ID

Considerations for Implementing External User Access to AD RMS

Module 07 Review

Module 08 - Implementing Active Directory Federation Services 1h 13m

Lesson 1: Overview of AD FS

What Is Identity Federation?

What Is Claims-Based Identity?

Web Services Overview

What Is AD FS?

How AD FS Enables SSO in a Single Organization

How AD FS Enables SSO in a Business-to-Business Federation

How AD FS Enables SSO with Online Services

Lesson 2: Deploying AD FS

AD FS Components

AD FS Prerequisites

PKI and Certificate Requirements

Federation Server Roles

Demo - Installing the AD FS Server Role

Lesson 3: Implementing AD FS for a Single Organization

What Are AD FS Claims?

What Are AD FS Claim Rules?

What Is a Claims Provider Trust?

What Is a Relying Party Trust?

Demo - Configuring Claims Provider and Relying Party Trusts

Lesson 4: Deploying AD FS in a B2B Federation Scenario

Configuring an Account Partner

Configuring a Resource Partner

Configuring Claims Rules for B2B Scenarios

How Home Realm Discovery Works

Demo - Configuring Claims Rules

Module 08 Review

Module 09 - Implementing Network Load Balancing 48m

Lesson 1: Overview of NLB

What Is NLB?

How NLB Works

How NLB Works with Server Failures and Recovery

NLB Features in Windows Server 2012

Lesson 2: Configuring an NLB Cluster

Deployment Requirements for NLB

Demo - Deploying NLB

Configuration Options for NLB

Demo - Configuring NLB Affinity and Port Rules

Network Considerations for NLB

Lesson 3: Planning an NLB Implementation

Designing Applications and Storage Support for NLB

Considerations for Deploying an NLB Cluster on Virtual Machines

Considerations for Securing NLB

Considerations for Scaling NLB

Considerations for Upgrading NLB Clusters

Module 09 Review

Module 10 - Implementing Failover Clustering 1h 33m

Lesson 1: Overview of Failover Clustering

What Is High Availability?

Failover Clustering in Windows Server 2012

Failover Cluster Components

What Are CSVs?

What Are Failover and Failback?

What Is a Quorum?

Quorum Modes in Windows Server 2012 Failover Clustering

Failover Cluster Networks

Failover Cluster Storage

Lesson 2: Implementing a Failover Cluster

Preparing for Failover Cluster Implementation

Hardware Requirements for Failover Cluster Implementation

Network Requirements for Failover Cluster Implementation

Infrastructure Requirements for Failover Cluster Implementation

Software Requirements for Failover Cluster Implementation

Demo - Validating and Configuring a Failover Cluster

Migrating Failover Clusters

Lesson 3: Configuring Highly Available Applications and Services on a Failover Cluster

Identifying Cluster Resources and Services

Process for Clustering Server Roles

Demo - Clustering a File Server Role

Configuring Failover Cluster Properties

Managing Cluster Nodes

Configuring Application Failover Settings

Lesson 4: Maintaining a Failover Cluster

Monitoring Failover Clusters

Backing Up and Restoring Failover Cluster Configuration

Maintaining and Troubleshooting Failover Clusters

What Is Cluster-Aware Updating?

Demo - Configuring CAU

Demo - Verifying CAU Completion

Lesson 5: Implementing a Multi-Site Failover Cluster

What Is a Multi-Site Failover Cluster?

Prerequisites for Implementing a Multi-Site Failover Cluster

Synchronous and Asynchronous Replication

Selecting a Quorum Mode for Multi-Site Clusters

Process for Configuring a Multi-Site Failover Cluster

Challenges for Implementing a Multi-Site Cluster

Module 10 Review

Module 11 - Implementing Failover Clustering with Hyper-V 1h

Lesson 1: Overview of Integrating Hyper-V with Failover Clustering

Options for Making Virtual Machines Highly Available

How Does a Failover Cluster Work with Hyper-V Nodes?

What Is New in Failover Clustering in Windows Server 2012 Hyper-V

Best Practices for Implementing High Availability in a Virtual Environment

Lesson 2: Implementing Hyper-V Virtual Machines on Failover Clusters

Components of Hyper-V Clusters

Prerequisites for Implementing Hyper-V Clusters

Implementing Failover Clustering for Hyper-V Virtual Machines

Configuring CSVs

Implementing Highly Available Virtual Machines on an SMB 3.0 File Share

Considerations for Implementing Hyper-V Clusters

Lesson 3: Implementing Hyper-V Virtual Machine Movement

Virtual Machine Migration Options

How Does Virtual Machine and Storage Migration Work?

How Does Live Migration Work?

How Does Hyper-V Replica Work?

Configuring Hyper-V Replica

Lesson 4: Managing Hyper-V Virtual Environments by Using VMM

What Is System Center 2012 - Virtual Machine Manager?

Prerequisites for Installing VMM 2012

Private Cloud Infrastructure Components in VMM

Managing Hosts, Host Clusters, and Host Groups with VMM

Deploying Virtual Machines with VMM

What Are Services and Service Templates?

P2V and V2V Migrations

Considerations for Deploying a Highly Available VMM Management Server

Module 11 Review

Module 12 - Implementing Disaster Recovery 59m

Lesson 1: Overview of Disaster Recovery

Identifying Disaster Recovery Requirements

What Are Service Level Agreements?

Overview of Enterprise Disaster Recovery Strategies

Disaster Mitigation Strategies

Best Practices for Implementing a Disaster Recovery

Lesson 2: Implementing Windows Server Backup

What Needs to Be Backed Up?

Backup Types

Backup Technologies

Planning Backup Capacity

Planning Backup Security

What Is Windows Server Backup?

Demo - Configuring a Scheduled Backup

What Is Windows Azure Online Backup?

Considerations for an Enterprise Backup Solution

What Is Data Protection Manager?

Lesson 3: Implementing Server and Data Recovery

Options for Server Recovery

Options for Server Restore

Options for Data Recovery

Demo - Using Windows Server Backup to Restore a Folder

Restoring with Windows Azure Online Backup

Module 12 Review

Course Closure

Total Duration: 16h 3m