20417c enu companion

8/21/2019 20417C ENU Companion

1/169

O F F I C I A L M I C R O S O F T L E A R N I N G P R O D U C T

20417CUpgrading Your Skills to MCSA WindowsServer 2012

Companion Content


2/169

ii Upgrading Your Skills to MCSA Windows Server 2012

Information in this document, including URL and other Internet Web site references, is subject to change

without notice. Unless otherwise noted, the example companies, organizations, products, domain names,

e-mail addresses, logos, people, places, and events depicted herein are fictitious, and no association with

any real company, organization, product, domain name, e-mail address, logo, person, place or event is

intended or should be inferred. Complying with all applicable copyright laws is the responsibility of the

user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in

or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical,

photocopying, recording, or otherwise), or for any purpose, without the express written permission of

Microsoft Corporation.

Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property

rights covering subject matter in this document. Except as expressly provided in any written license

agreement from Microsoft, the furnishing of this document does not give you any license to these

patents, trademarks, copyrights, or other intellectual property.

The names of manufacturers, products, or URLs are provided for informational purposes only and

Microsoft makes no representations and warranties, either expressed, implied, or statutory, regarding

these manufacturers or the use of the products with any Microsoft technologies. The inclusion of a

manufacturer or product does not imply endorsement of Microsoft of the manufacturer or product. Links

may be provided to third party sites. Such sites are not under the control of Microsoft and Microsoft is not

responsible for the contents of any linked site or any link contained in a linked site, or any changes or

updates to such sites. Microsoft is not responsible for webcasting or any other form of transmission

received from any linked site. Microsoft is providing these links to you only as a convenience, and the

inclusion of any link does not imply endorsement of Microsoft of the site or the products contained

therein.

2014 Microsoft Corporation. All rights reserved.

Microsoft and the trademarks listed at

http://www.microsoft.com/about/legal/en/us/IntellectualProperty/Trademarks/EN-US.aspxare trademarks of

the Microsoft group of companies. All other trademarks are property of their respective owners

Product Number: 20417C

Released: 01/2014
http://www.microsoft.com/about/legal/en/us/IntellectualProperty/Trademarks/EN-US.aspxhttp://www.microsoft.com/about/legal/en/us/IntellectualProperty/Trademarks/EN-US.aspxhttp://www.microsoft.com/about/legal/en/us/IntellectualProperty/Trademarks/EN-US.aspx


3/169

MICROSOFT LICENSE TERMSMICROSOFT INSTRUCTOR-LED COURSEWARE

These license terms are an agreement between Microsoft Corporation (or based on where you live, one of itsaffiliates) and you. Please read them. They apply to your use of the content accompanying this agreement which

includes the media on which you received it, if any. These license terms also apply to Trainer Content and anyupdates and supplements for the Licensed Content unless other terms accompany those items. If so, those termsapply.

BY ACCESSING, DOWNLOADING OR USING THE LICENSED CONTENT, YOU ACCEPT THESE TERMS.IF YOU DO NOT ACCEPT THEM, DO NOT ACCESS, DOWNLOAD OR USE THE LICENSED CONTENT.

If you comply with these license terms, you have the rights below for each license you acquire.

1. DEFINITIONS.

a. Authorized Learning Center means a Microsoft IT Academy Program Member, Microsoft LearningCompetency Member, or such other entity as Microsoft may designate from time to time.

b. Authorized Training Session means the instructor-led training class using Microsoft Instructor-LedCourseware conducted by a Trainer at or through an Authorized Learning Center.

c. Classroom Device means one (1) dedicated, secure computer that an Authorized Learning Center ownsor controls that is located at an Authorized Learning Centers training facilities that meets or exceeds thehardware level specified for the particular Microsoft Instructor-Led Courseware.

d. End User means an individual who is (i) duly enrolled in and attending an Authorized Training Sessionor Private Training Session, (ii) an employee of a MPN Member, or (iii) a Microsoft full-time employee.

e. Licensed Content means the content accompanying this agreement which may include the MicrosoftInstructor-Led Courseware or Trainer Content.

f. Microsoft Certified Trainer or MCT means an individual who is (i) engaged to teach a training sessionto End Users on behalf of an Authorized Learning Center or MPN Member, and (ii) currently certified as aMicrosoft Certified Trainer under the Microsoft Certification Program.

g. Microsoft Instructor-Led Courseware means the Microsoft-branded instructor-led training course thateducates IT professionals and developers on Microsoft technologies. A Microsoft Instructor-LedCourseware title may be branded as MOC, Microsoft Dynamics or Microsoft Business Group courseware.

h. Microsoft IT Academy Program Member means an active member of the Microsoft IT AcademyProgram.

i.

Microsoft Learning Competency Member means an active member of the Microsoft Partner Networkprogram in good standing that currently holds the Learning Competency status.

j. MOC means the Official Microsoft Learning Product instructor-led courseware known as MicrosoftOfficial Course that educates IT professionals and developers on Microsoft technologies.

k. MPN Member means an active Microsoft Partner Network program member in good standing.


4/169

l. Personal Device means one (1) personal computer, device, workstation or other digital electronic devicethat you personally own or control that meets or exceeds the hardware level specified for the particularMicrosoft Instructor-Led Courseware.

m.Private Training Sessionmeans the instructor-led training classes provided by MPN Members forcorporate customers to teach a predefined learning objective using Microsoft Instructor-Led Courseware.

These classes are not advertised or promoted to the general public and class attendance is restricted toindividuals employed by or contracted by the corporate customer.

n. Trainer means (i) an academically accredited educator engaged by a Microsoft IT Academy ProgramMember to teach an Authorized Training Session, and/or (ii) a MCT.

o. Trainer Content means the trainer version of the Microsoft Instructor-Led Courseware and additionalsupplemental content designated solely for Trainers use to teach a training session using the MicrosoftInstructor-Led Courseware. Trainer Content may include Microsoft PowerPoint presentations, trainerpreparation guide, train the trainer materials, Microsoft One Note packs, classroom setup guide and Pre-release course feedback form. To clarify, Trainer Content does not include any software, virtual harddisks or virtual machines.

2. USE RIGHTS. The Licensed Content is licensed not sold. The Licensed Content is licensed on a one copyper user basis, such that you must acquire a license for each individual that accesses or uses the LicensedContent.

2.1 Below are five separate sets of use rights. Only one set of rights apply to you.

a. If you are a Microsoft IT Academy Program Member:i. Each license acquired on behalf of yourselfmay only be used to review one (1) copy of the Microsoft

Instructor-Led Courseware in the form provided to you. If the Microsoft Instructor-Led Courseware isin digital format, you may install one (1) copy on up to three (3) Personal Devices. You may notinstall the Microsoft Instructor-Led Courseware on a device you do not own or control.

ii. For each license you acquire on behalf of an End User or Trainer, you may either:1. distribute one (1) hard copy version of the Microsoft Instructor-Led Courseware to one (1) End

User who is enrolled in the Authorized Training Session, and only immediately prior to thecommencement of the Authorized Training Session that is the subject matter of the MicrosoftInstructor-Led Courseware being provided, or

2. provide one (1) End User with the unique redemption code and instructions on how they canaccess one (1) digital version of the Microsoft Instructor-Led Courseware, or

3. provide one (1) Trainer with the unique redemption code and instructions on how they canaccess one (1) Trainer Content,

provided you comply with the following:iii. you will only provide access to the Licensed Content to those individuals who have acquired a valid

license to the Licensed Content,iv. you will ensure each End User attending an Authorized Training Session has their own valid licensed

copy of the Microsoft Instructor-Led Courseware that is the subject of the Authorized Training

Session,v. you will ensure that each End User provided with the hard-copy version of the Microsoft Instructor-

Led Courseware will be presented with a copy of this agreement and each End User will agree thattheir use of the Microsoft Instructor-Led Courseware will be subject to the terms in this agreementprior to providing them with the Microsoft Instructor-Led Courseware. Each individual will be requiredto denote their acceptance of this agreement in a manner that is enforceable under local law prior totheir accessing the Microsoft Instructor-Led Courseware,

vi. you will ensure that each Trainer teaching an Authorized Training Session has their own validlicensed copy of the Trainer Content that is the subject of the Authorized Training Session,


5/169

vii. you will only use qualified Trainers who have in-depth knowledge of and experience with theMicrosoft technology that is the subject of the Microsoft Instructor-Led Courseware being taught forall your Authorized Training Sessions,

viii.you will only deliver a maximum of 15 hours of training per week for each Authorized TrainingSession that uses a MOC title, and

ix. you acknowledge that Trainers that are not MCTs will not have access to all of the trainer resources

for the Microsoft Instructor-Led Courseware.

b. If you are a Microsoft Learning Competency Member:i. Each license acquired on behalf of yourselfmay only be used to review one (1) copy of the Microsoft


ii. For each license you acquire on behalf of an End User or Trainer, you may either:1. distribute one (1) hard copy version of the Microsoft Instructor-Led Courseware to one (1) End

User attending the Authorized Training Session and only immediately prior to thecommencement of the Authorized Training Session that is the subject matter of the MicrosoftInstructor-Led Courseware provided, or

2. provide one (1) End User attending the Authorized Training Session with the unique redemption

code and instructions on how they can access one (1) digital version of the Microsoft Instructor-Led Courseware, or

3. you will provide one (1) Trainer with the unique redemption code and instructions on how theycan access one (1) Trainer Content,


license to the Licensed Content,iv. you will ensure that each End User attending an Authorized Training Session has their own valid

licensed copy of the Microsoft Instructor-Led Courseware that is the subject of the AuthorizedTraining Session,

v. you will ensure that each End User provided with a hard-copy version of the Microsoft Instructor-LedCourseware will be presented with a copy of this agreement and each End User will agree that theiruse of the Microsoft Instructor-Led Courseware will be subject to the terms in this agreement prior toproviding them with the Microsoft Instructor-Led Courseware. Each individual will be required todenote their acceptance of this agreement in a manner that is enforceable under local law prior totheir accessing the Microsoft Instructor-Led Courseware,

vi. you will ensure that each Trainer teaching an Authorized Training Session has their own validlicensed copy of the Trainer Content that is the subject of the Authorized Training Session,

vii. you will only use qualified Trainers who hold the applicable Microsoft Certification credential that isthe subject of the Microsoft Instructor-Led Courseware being taught for your Authorized TrainingSessions,

viii.you will only use qualified MCTs who also hold the applicable Microsoft Certification credential that isthe subject of the MOC title being taught for all your Authorized Training Sessions using MOC,

ix. you will only provide access to the Microsoft Instructor-Led Courseware to End Users, andx. you will only provide access to the Trainer Content to Trainers.


6/169

c. If you are a MPN Member:i. Each license acquired on behalf of yourself may only be used to review one (1) copy of the Microsoft


ii. For each license you acquire on behalf of an End User or Trainer, you may either:

1.

distribute one (1) hard copy version of the Microsoft Instructor-Led Courseware to one (1) EndUser attending the Private Training Session, and only immediately prior to the commencementof the Private Training Session that is the subject matter of the Microsoft Instructor-LedCourseware being provided, or

2. provide one (1) End User who is attending the Private Training Session with the uniqueredemption code and instructions on how they can access one (1) digital version of theMicrosoft Instructor-Led Courseware, or

3. you will provide one (1) Trainer who is teaching the Private Training Session with the uniqueredemption code and instructions on how they can access one (1) Trainer Content,


license to the Licensed Content,iv. you will ensure that each End User attending an Private Training Session has their own valid licensed

copy of the Microsoft Instructor-Led Courseware that is the subject of the Private Training Session,v. you will ensure that each End User provided with a hard copy version of the Microsoft Instructor-Led

Courseware will be presented with a copy of this agreement and each End User will agree that theiruse of the Microsoft Instructor-Led Courseware will be subject to the terms in this agreement prior toproviding them with the Microsoft Instructor-Led Courseware. Each individual will be required todenote their acceptance of this agreement in a manner that is enforceable under local law prior totheir accessing the Microsoft Instructor-Led Courseware,

vi. you will ensure that each Trainer teaching an Private Training Session has their own valid licensedcopy of the Trainer Content that is the subject of the Private Training Session,

vii. you will only use qualified Trainers who hold the applicable Microsoft Certification credential that isthe subject of the Microsoft Instructor-Led Courseware being taught for all your Private TrainingSessions,

viii.you will only use qualified MCTs who hold the applicable Microsoft Certification credential that is thesubject of the MOC title being taught for all your Private Training Sessions using MOC,

ix. you will only provide access to the Microsoft Instructor-Led Courseware to End Users, andx. you will only provide access to the Trainer Content to Trainers.

d. If you are an End User:For each license you acquire, you may use the Microsoft Instructor-Led Courseware solely for yourpersonal training use. If the Microsoft Instructor-Led Courseware is in digital format, you may access theMicrosoft Instructor-Led Courseware online using the unique redemption code provided to you by thetraining provider and install and use one (1) copy of the Microsoft Instructor-Led Courseware on up tothree (3) Personal Devices. You may also print one (1) copy of the Microsoft Instructor-Led Courseware.You may not install the Microsoft Instructor-Led Courseware on a device you do not own or control.

e. If you are a Trainer.i. For each license you acquire, you may install and use one (1) copy of the Trainer Content in the

form provided to you on one (1) Personal Device solely to prepare and deliver an AuthorizedTraining Session or Private Training Session, and install one (1) additional copy on another PersonalDevice as a backup copy, which may be used only to reinstall the Trainer Content. You may notinstall or use a copy of the Trainer Content on a device you do not own or control. You may alsoprint one (1) copy of the Trainer Content solely to prepare for and deliver an Authorized TrainingSession or Private Training Session.


7/169

ii. You may customize the written portions of the Trainer Content that are logically associated withinstruction of a training session in accordance with the most recent version of the MCT agreement.If you elect to exercise the foregoing rights, you agree to comply with the following: (i)customizations may only be used for teaching Authorized Training Sessions and Private TrainingSessions, and (ii) all customizations will comply with this agreement. For clarity, any use of

customizerefers only to changing the order of slides and content, and/or not using all the slides orcontent, it does not mean changing or modifying any slide or content.

2.2 Separation of Components. The Licensed Content is licensed as a single unit and you may notseparate their components and install them on different devices.

2.3 Redistribution of Licensed Content. Except as expressly provided in the use rights above, you maynot distribute any Licensed Content or any portion thereof (including any permitted modifications) to anythird parties without the express written permission of Microsoft.

2.4 Third Party Notices. The Licensed Content may include third party code tent that Microsoft, not thethird party, licenses to you under this agreement. Notices, if any, for the third party code ntent are includedfor your information only.

2.5 Additional Terms. Some Licensed Content may contain components with additional terms,conditions, and licenses regarding its use. Any non-conflicting terms in those conditions and licenses alsoapply to your use of that respective component and supplements the terms described in this agreement.

3. LICENSED CONTENT BASED ON PRE-RELEASE TECHNOLOGY. If the Licensed Contents subjectmatter is based on a pre-release version of Microsoft technology (Pre-release), then in addition to theother provisions in this agreement, these terms also apply:

a. Pre-Release Licensed Content. This Licensed Content subject matter is on the Pre-release version ofthe Microsoft technology. The technology may not work the way a final version of the technology willand we may change the technology for the final version. We also may not release a final version.Licensed Content based on the final version of the technology may not contain the same information asthe Licensed Content based on the Pre-release version. Microsoft is under no obligation to provide youwith any further content, including any Licensed Content based on the final version of the technology.

b. Feedback. If you agree to give feedback about the Licensed Content to Microsoft, either directly orthrough its third party designee, you give to Microsoft without charge, the right to use, share andcommercialize your feedback in any way and for any purpose. You also give to third parties, withoutcharge, any patent rights needed for their products, technologies and services to use or interface withany specific parts of a Microsoft technology, Microsoft product, or service that includes the feedback.You will not give feedback that is subject to a license that requires Microsoft to license its technology,technologies, or products to third parties because we include your feedback in them. These rightssurvive this agreement.

c. Pre-release Term. If you are an Microsoft IT Academy Program Member, Microsoft LearningCompetency Member, MPN Member or Trainer, you will cease using all copies of the Licensed Content on

the Pre-release technology upon (i) the date which Microsoft informs you is the end date for using theLicensed Content on the Pre-release technology,or (ii) sixty (60) days after the commercial release of thetechnology that is the subject of the Licensed Content, whichever is earliest (Pre-release term).Upon expiration or termination of the Pre-release term, you will irretrievably delete and destroy all copiesof the Licensed Content in your possession or under your control.


8/169

4. SCOPE OF LICENSE. The Licensed Content is licensed, not sold. This agreement only gives you somerights to use the Licensed Content. Microsoft reserves all other rights. Unless applicable law gives you morerights despite this limitation, you may use the Licensed Content only as expressly permitted in thisagreement. In doing so, you must comply with any technical limitations in the Licensed Content that onlyallows you to use it in certain ways. Except as expressly permitted in this agreement, you may not: access or allow any individual to access the Licensed Content if they have not acquired a valid license

for the Licensed Content, alter, remove or obscure any copyright or other protective notices (including watermarks), branding

or identifications contained in the Licensed Content, modify or create a derivative work of any Licensed Content, publicly display, or make the Licensed Content available for others to access or use, copy, print, install, sell, publish, transmit, lend, adapt, reuse, link to or post, make available or

distribute the Licensed Content to any third party, work around any technical limitations in the Licensed Content, or reverse engineer, decompile, remove or otherwise thwart any protections or disassemble the

Licensed Content except and only to the extent that applicable law expressly permits, despite thislimitation.

5. RESERVATION OF RIGHTS AND OWNERSHIP. Microsoft reserves all rights not expressly granted toyou in this agreement. The Licensed Content is protected by copyright and other intellectual property lawsand treaties. Microsoft or its suppliers own the title, copyright, and other intellectual property rights in theLicensed Content.

6. EXPORT RESTRICTIONS. The Licensed Content is subject to United States export laws and regulations.You must comply with all domestic and international export laws and regulations that apply to the LicensedContent. These laws include restrictions on destinations, end users and end use. For additional information,see www.microsoft.com/exporting.

7. SUPPORT SERVICES. Because the Licensed Content is as is, we may not provide support services for it.

8. TERMINATION. Without prejudice to any other rights, Microsoft may terminate this agreement if you fail

to comply with the terms and conditions of this agreement. Upon termination of this agreement for anyreason, you will immediately stop all use of and delete and destroy all copies of the Licensed Content inyour possession or under your control.

9. LINKS TO THIRD PARTY SITES. You may link to third party sites through the use of the LicensedContent. The third party sites are not under the control of Microsoft, and Microsoft is not responsible forthe contents of any third party sites, any links contained in third party sites, or any changes or updates tothird party sites. Microsoft is not responsible for webcasting or any other form of transmission receivedfrom any third party sites. Microsoft is providing these links to third party sites to you only as aconvenience, and the inclusion of any link does not imply an endorsement by Microsoft of the third partysite.

10. ENTIRE AGREEMENT.This agreement, and any additional terms for the Trainer Content, updates and

supplements are the entire agreement for the Licensed Content, updates and supplements.

11. APPLICABLE LAW.a. United States. If you acquired the Licensed Content in the United States, Washington state law governs

the interpretation of this agreement and applies to claims for breach of it, regardless of conflict of lawsprinciples. The laws of the state where you live govern all other claims, including claims under stateconsumer protection laws, unfair competition laws, and in tort.


9/169

b. Outside the United States. If you acquired the Licensed Content in any other country, the laws of thatcountry apply.

12. LEGAL EFFECT. This agreement describes certain legal rights. You may have other rights under the lawsof your country. You may also have rights with respect to the party from whom you acquired the LicensedContent. This agreement does not change your rights under the laws of your country if the laws of your

country do not permit it to do so.

13. DISCLAIMER OF WARRANTY. THE LICENSED CONTENT IS LICENSED "AS-IS" AND "ASAVAILABLE."YOU BEAR THE RISK OF USING IT. MICROSOFT AND ITS RESPECTIVEAFFILIATES GIVES NO EXPRESS WARRANTIES, GUARANTEES, OR CONDITIONS. YOU MAYHAVE ADDITIONAL CONSUMER RIGHTS UNDER YOUR LOCAL LAWS WHICH THIS AGREEMENTCANNOT CHANGE. TO THE EXTENT PERMITTED UNDER YOUR LOCAL LAWS, MICROSOFT ANDITS RESPECTIVE AFFILIATES EXCLUDES ANY IMPLIED WARRANTIES OF MERCHANTABILITY,FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT.

14. LIMITATION ON AND EXCLUSION OF REMEDIES AND DAMAGES. YOU CAN RECOVER FROMMICROSOFT, ITS RESPECTIVE AFFILIATES AND ITS SUPPLIERS ONLY DIRECT DAMAGES UPTO US$5.00. YOU CANNOT RECOVER ANY OTHER DAMAGES, INCLUDING CONSEQUENTIAL,

LOST PROFITS, SPECIAL, INDIRECT OR INCIDENTAL DAMAGES.

This limitation applies too anything related to the Licensed Content, services, content (including code) on third party Internet

sites or third-party programs; ando claims for breach of contract, breach of warranty, guarantee or condition, strict liability, negligence,

or other tort to the extent permitted by applicable law.

It also applies even if Microsoft knew or should have known about the possibility of the damages. Theabove limitation or exclusion may not apply to you because your country may not allow the exclusion orlimitation of incidental, consequential or other damages.

Please note: As this Licensed Content is distributed in Quebec, Canada, some of the clauses in thisagreement are provided below in French.

Remarque : Cele contenu sous licence tant distribu au Qubec, Canada, certaines des clausesdans ce contrat sont fournies ci-dessous en franais.

EXONRATION DE GARANTIE.Le contenu sous licence vis par une licence est offert tel quel . Touteutilisation de ce contenu sous licence est votre seule risque et pril. Microsoft naccorde aucune autre garantieexpresse. Vous pouvez bnficier de droits additionnels en vertu du droit local sur la protection duesconsommateurs, que ce contrat ne peut modifier. La ou elles sont permises par le droit locale, les garantiesimplicites de qualit marchande, dadquation un usage particulier et dabsence de contrefaon sont exclues.

LIMITATION DES DOMMAGES-INTRTS ET EXCLUSION DE RESPONSABILIT POUR LES

DOMMAGES. Vous pouvez obtenir de Microsoft et de ses fournisseurs une indemnisation en cas de dommagesdirects uniquement hauteur de 5,00 $ US. Vous ne pouvez prtendre aucune indemnisation pour les autresdommages, y compris les dommages spciaux, indirects ou accessoires et pertes de bnfices.Cette limitation concerne:

tout ce qui est reli au le contenu sous licence, aux services ou au contenu (y compris le code)figurant sur des sites Internet tiers ou dans des programmes tiers; et.

les rclamations au titre de violation de contrat ou de garantie, ou au titre de responsabilitstricte, de ngligence ou dune autre faute dans la limite autorise par la loi en vigueur.


10/169

Elle sapplique galement, mme si Microsoft connaissait ou devrait connatre lventualit dun tel dommage. Sivotre pays nautorise pas lexclusion ou la limitation de responsabilit pour les dommages indirects, accessoiresou de quelque nature que ce soit, il se peut que la limitation ou lexclusion ci-dessus ne sappliquera pas votregard.

EFFET JURIDIQUE. Le prsent contrat dcrit certains droits juridiques. Vous pourriez avoir dautres droits

prvus par les lois de votre pays. Le prsent contrat ne modifie pas les droits que vous confrent les lois de votrepays si celles-ci ne le permettent pas.

Revised July 2013


11/169

Installing and Configuring Windows Server 2012 1-1

Module 1

Installing and Configuring Windows Server 2012

Contents:Lesson 1:Installing Windows Server 2012 R2 2

Lesson 2:Configuring Windows Server 2012 R2 and Windows Server 2012 4

Lesson 3:Configuring Remote Management for Windows Server 2012 R2 and

Windows Server 2012 7

Module Review and Takeaways 9

Lab Review Questions and Answers 10


12/169

1-2 Upgrading Your Skills to MCSA Windows Server 2012

Lesson 1

Installing Windows Server 2012 R2

Contents:

Resources 3


13/169


Resources

Hardware Requirements for Installing Windows Server 2012 R2

Additional Reading: For more information about the Windows Server Virtualization

Validation Program, seehttp://go.microsoft.com/fwlink/?LinkId=269652

Migrating Server Roles

Additional Reading: Migrating Roles and Features in Windows Server

http://go.microsoft.com/fwlink/?LinkID=331437
http://go.microsoft.com/fwlink/?LinkId=269652http://go.microsoft.com/fwlink/?LinkId=269652http://go.microsoft.com/fwlink/?LinkId=269652http://go.microsoft.com/fwlink/?LinkID=331437http://go.microsoft.com/fwlink/?LinkID=331437http://go.microsoft.com/fwlink/?LinkID=331437http://go.microsoft.com/fwlink/?LinkId=269652


14/169


Lesson 2

Configuring Windows Server 2012 R2 and WindowsServer 2012

Contents:Demonstration: Exploring Server Manager in Windows Server 2012 R2 5

Demonstration: Installing and Optimizing Server Roles in Windows Server 2012 6


15/169


Demonstration: Exploring Server Manager in Windows Server 2012 R2

Demonstration Steps

1. Sign in to server LON-DC1 with the Adatum\Administrator account and the password Pa$$w0rd.

2. In Server Manager, click Manage, and then click Add Roles and Features. This starts the Add Roles

and Features Wizard.

3. On the Before you begin page of the Add Roles and Features Wizard, click Next.

4. On the Installation Typepage of the Add Roles and Features Wizard, select Role-based or feature-

based installation, and then click Next.

5. On the Select destination serverpage of the Add Roles and Features Wizard, click Select a server

from the server pool. Verify that LON-DC1.Adatum.comis selected, and click Next.

6. On the Select server rolespage of the Add Roles and Features Wizard, select Fax Server. In the Add

Roles and Features Wizard dialog box that opens, click Add Features.

7. On the Select server rolespage of the Add Roles and Features Wizard, click Next.

8.

On the Select featurespage of the Add Roles and Features Wizard, select BranchCache , and thenclick Next.

9. On the Fax Serverpage of the Add Roles and Features Wizard, click Next.

10. On the Print and Document Servicespage of the Add Roles and Features Wizard, click Next.

11. On the Select role servicespage of the Add Roles and Features Wizard, click Next.

12. On the Confirmationpage of the Add Roles and Features Wizard, select the Restart the destination

server automatically if requiredcheck box. In the Add Roles and Features Wizarddialog box,

click Yes, and then click Install.

13. On the Installation progresspage of the Add Roles and Features Wizard, click Close.

14.

Click the flag icon next to Server Manager Dashboard and review the messages.

15. On the Server Manager console, click the Dashboardnode.

16. In the Roles and Server Groups area, under DNS, click Events.

17. In the DNS - Events Detail Viewdialog box, change the time period to 12 hoursand the Event

Sources to All, and then click OK.

18. In the Roles and Server Groups area, under DNS, click BPAresults.

19. On the DNS - BPA Results Detail Viewdialog box, on the Severity Levelsdrop-down menu, select

All, and then click OK.

20. In the Server Manager console, on the Toolsmenu, review the tools that are installed on LON-DC1.

21.

Hold down the Start key to start the Microsoft design style Startscreen.

22. On the Start screen, click Administrator, and then c lick Sign Out.

23. Sign in to LON-DC1 by u sing the Adatum\Administrator account and the password Pa$$w0rd.

24. On the taskbar, click the WindowsPowerShellicon.

25. In the Windows PowerShell window, type the following command, and press Enter:

Stop-Computer


16/169


Demonstration: Installing and Optimizing Server Roles in Windows Server2012

Demonstration Steps

1. Sign in to server LON-DC1 by us ing the Adatum\Administrator account, and the password

Pa$$w0rd.

2. In the already open Server Manager console, click Manage, and then click Add Roles and Features.

3. On the Before You Beginpage of the Add Roles and Features Wizard, click Next.

4. On the Installation Typepage, select Role-based or feature-based installation, and then click

Next.

5. On the Server Selectionpage, click Select a server from the server pool. Verify that LON-

DC1.Adatum.com is selected, and click Next.

6. On the Select server roles page, select Application Server, and then click Next.

7. On the Featurespage, click Next.

8.

On the Application Serverpage, click Next.

9. On the Role Servicespage, click Next.

10. On the Confirmationpage, click Install. To dismiss the Add Role and Features wizard, click Close.

11. Click the App Servernode of the Server Manager console.

12. Click the Dashboardnode, and under App Server, click Performance.

13. Review the console, and click OK.

14. Under the DHCPsection, click BPA results. Discuss the BPA results, and click OK.


17/169


Lesson 3

Configuring Remote Management for WindowsServer 2012 R2 and Windows Server 2012

Contents:Resources 8

Demonstration: Configuring Servers for Remote Management 8


18/169


Resources

How Remote Management Works in Windows Server 2012 R2 andWindows Server 2012

Additional Reading: For more information on Windows Remote Management, visit thefollowing link:http://go.microsoft.com/fwlink/?LinkId=269663

Additional Reading: For more information on configuring Windows Remote Management,

visit the following Performance Team post:http://go.microsoft.com/fwlink/?LinkId=269664

Additional Reading: For more information on Remote Windows PowerShell, visit the

following link:http://go.microsoft.com/fwlink/?LinkId=269667

Demonstration: Configuring Servers for Remote Management

Demonstration Steps

1. Sign in to LON-DC1 using the Adatum\Administrator account with the password Pa$$w0rd.

2. In the Server Managerconsole, click Local Server, and next to Remote Management, click

Enabled.

3. On the Configure Remote Managementdialog box, clear the check box next to Enable remote

management of this server from other computers, and then click OK.

4. Close the Server Managerconsole.

5. Open Windows PowerShell from the taskbar.

6. At the WindowsPowerShellprompt, run the winrm qccommand. When you are prompted, type Y,

and then press Enter.

7. Open the Server Managerconsole. Click Local Server, and then verify that Remote Managementis

now enabled.
http://go.microsoft.com/fwlink/?LinkId=269663http://go.microsoft.com/fwlink/?LinkId=269663http://go.microsoft.com/fwlink/?LinkId=269663http://go.microsoft.com/fwlink/?LinkId=269664http://go.microsoft.com/fwlink/?LinkId=269664http://go.microsoft.com/fwlink/?LinkId=269664http://go.microsoft.com/fwlink/?LinkId=269667http://go.microsoft.com/fwlink/?LinkId=269667http://go.microsoft.com/fwlink/?LinkId=269667http://go.microsoft.com/fwlink/?LinkId=269667http://go.microsoft.com/fwlink/?LinkId=269664http://go.microsoft.com/fwlink/?LinkId=269663


19/169


Module Review and Takeaways

Best Practices Unless you must have a Server with a GUI installation to support roles and features, deploy Server

Core.

Use Windows Remote Management to manage multiple servers from a single server by using the

Server Manager console.

Use Windows PowerShell remoting to run remote Windows PowerShell sessions, rather than logging

on locally to perform the same task.

Review Question(s)

Question: Why is the Server Core installation the default installation option for Windows Server 2012 R2

installations?

Answer: The Server Core installation is the default installation option for Windows Server 2012 R2

because it enables you to deploy the most frequently used roles with a minimal hardware

footprint.

Real-world Issues and Scenarios Unless a particular role requires it, consider using the Server Core installation option as your default

server deployment option. You can always install the GUI later if required.

Understand which roles and features you must deploy on a server prior to deploying that server,

rather than deploying roles and features to servers without planning.

You should plan to manage many servers from one console, rather than logging on to each server

individually.

Common Issues and Troubleshooting Tips

Common Issue Troubleshooting Tip

Remote management connections fail Verify firewall settings.

Windows PowerShell commands are notavailable

Ensure that appropriate Windows PowerShell modules,such as Server Manager, are loaded.

Cannot install GUI features on Server Coredeployment

Mount a WIM image that holds all the Windows Server2012 R2 files, and use the -source option of theInstall-WindowsFeature cmdlet.

Unable to restart a computer runningServer Core

Use sconfig.cmdor the shutdown /rcommand.

Unable to join the domain Verify DNS resolution and network connectivitybetween the host and the domain controller.


20/169


Lab Review Questions and Answers

Lab: Installing and Configuring Windows Server 2012 R2

Question and Answers

Question: What steps would you have to take to deploy Windows Server 2012 R2 over a virtual network?

Answer: You would have to configure WDS. You also would have to configure virtual machines to use

legacy network adapters.

Question: Which command could you use to configure the network address settings on a computer

running Server Core, other than sconfig.cmd?

Answer: You can use the netshcommand prompt utility to configure the network address settings.

Question: After performing Exercise 3, would you be able to make a Remote Desktop connection from

LON-DC1 to LON-SVR5?

Answer: No. Although you do enable Windows Remote Management, Remote Desktop is not enabled

during this exercise.


21/169

Managing Windows Server 2012 by Using Windows PowerShell 2-1

Module 2

Managing Windows Server 2012 by Using WindowsPowerShell

Contents:Lesson 1:Overview of Windows PowerShell 2

Lesson 2:Using Windows PowerShell to Manage AD DS 4

Lesson 3:Managing Servers by Using Windows PowerShell 6




22/169


Lesson 1

Overview of Windows PowerShell

Contents:

Resources 3

Demonstration: Using the Windows PowerShell Integrated Scripting

Environment (ISE) 3


23/169


Resources

Windows PowerShell Syntax

Additional Reading: Approved Verbs for Windows PowerShell Commands


Using Windows PowerShell Modules

Additional Reading: Windows PowerShell Modules

http://go.microsoft.com/fwlink/?linkID=270852

What Is New in Windows PowerShell?

Additional Reading: Get Started with Windows PowerShell Desired State Configuration


Additional Reading: What's New in Windows PowerShell


Demonstration: Using the Windows PowerShell Integrated ScriptingEnvironment (ISE)

Demonstration Steps

1. Sign in to LON-DC1 as Adatum\Administrator with the password Pa$$word.

2. Browse to the Start screen, type Windows PowerShell ISE, and then right-click the Windows

PowerShell ISE app tile. In the app bar, click Run as administrator.

3. Click View, and click Show Script Pane.

4. Click File, and click Open. Navigate to the demonstration script at E:\ModXA\Democode\Using

Windows PowerShell ISE.ps1, and then click Open.

5. Follow the instructions within the script to complete the demonstration.

6. Close the Using Windows PowerShell ISE.ps1 tab.
http://go.microsoft.com/fwlink/?LinkID=331439http://go.microsoft.com/fwlink/?LinkID=331439http://go.microsoft.com/fwlink/?linkID=270852http://go.microsoft.com/fwlink/?linkID=270852http://go.microsoft.com/fwlink/?LinkID=331440http://go.microsoft.com/fwlink/?LinkID=331440http://go.microsoft.com/fwlink/?LinkID=331441http://go.microsoft.com/fwlink/?LinkID=331441http://go.microsoft.com/fwlink/?LinkID=331441http://go.microsoft.com/fwlink/?LinkID=331440http://go.microsoft.com/fwlink/?linkID=270852http://go.microsoft.com/fwlink/?LinkID=331439


24/169


Lesson 2

Using Windows PowerShell to Manage AD DS

Contents:

Question and Answers 5

Resources 5

Demonstration: Managing AD DS by Using Windows PowerShell 5


25/169



Using Windows PowerShell VariablesQuestion: How do you declare variables and assign values to them?

Answer: You can declare a variable and assign it a value by using an equal sign (=) or by using Set-

Variable.

Resources

Additional Reading: about_Variables


Demonstration: Managing AD DS by Using Windows PowerShell

Demonstration Steps

1. Sign in to LON-DC1 with the user name Adatum\Administrator and the password Pa$$w0rd.

2. On the Start screen, type Windows PowerShell ISE, and then right-click Windows PowerShell ISE. In

the pop-up window, click Run as administrator.

3. Click File, and click Open. Locate the demonstration script at E:\ModXA\Democode\Managing

Users and Groups.ps1, and click Open.

4. Follow the instructions within the script to complete the demonstration.
http://go.microsoft.com/fwlink/?linkID=269668http://go.microsoft.com/fwlink/?linkID=269668http://go.microsoft.com/fwlink/?linkID=269668


26/169


Lesson 3

Managing Servers by Using Windows PowerShell

Contents:

Resources 7

Demonstration: Managing a Server by Using Windows PowerShell 7


27/169


Resources

What Is Windows PowerShell Web Access?

Additional Reading: Install and Use Windows PowerShell Web Access


Introduction to Windows PowerShell Workflow

Additional Reading: Getting Started with Windows PowerShell Workflow


Demonstration: Managing a Server by Using Windows PowerShell

Demonstration Steps

1.

Start virtual machines LON-DC1, LON-SVR1, and LON-SVR2, and then sign in to LON-DC1 with username Adatum\Administrator and the password Pa$$w0rd.

2. On LON-DC1, start Internet Explorer.

3. In the address bar, type https://LON-DC1.adatum.com/pswa.

4. Sign in to Windows PowerShell Web Access by using the following information:

o User name:Administrator

o Password:Pa$$w0rd

o Computer:LON-DC1

5. Start a new job by running the following command:

Start-Job -ScriptBlock {Get-ADUser Filter *}

6. Obtain the status of the job by running Get-Job.

7. Create a new scheduled job by running the following commands, each followed by Enter:

$Trigger = New-JobTrigger Weekly DaysOfWeek Monday,Friday At 9:00AMRegister-ScheduledJob Name ScheduledJob1 ScriptBlock {Get-ADUser Filter * } -

Trigger $Trigger

8. Run the scheduled job immediately by running:

Start-Job DefinitionName ScheduledJob1
http://go.microsoft.com/fwlink/?linkID=269669http://go.microsoft.com/fwlink/?linkID=269669http://go.microsoft.com/fwlink/?LinkID=331442http://go.microsoft.com/fwlink/?LinkID=331442http://go.microsoft.com/fwlink/?LinkID=331442http://go.microsoft.com/fwlink/?linkID=269669


28/169



Best Practices Set a goal to spend time learning how to use Windows PowerShell for your common tasks. This

will make you more comfortable when working with Windows PowerShell, and will equip you for

using it to perform more complex tasks and resolve certain problems.

Save the commands that you have used to resolve problems in a script file for later reference.

Use Windows PowerShell ISE to help you write scripts and ensure that you are using the correct

syntax.

Review Question(s)Question: Which cmdlet will display the content of a text file?

Answer: Get-Contentdisplays the content of a text file. It is also acceptable to use type, which is an alias

for Get-Content.

Question: Which cmdlet will move a file to another directory?

Answer: Move-Itemmoves a file to another directory. It is also acceptable to use moveand mias aliases

for Move-Item.

Question: Which cmdlet will rename a file?

Answer: Rename-Itemrenames a file. It is also acceptable to use ren, which is an alias for Rename-Item.

Question: Which cmdlet will create a new directory?

Answer: New-Itemcreates a new directory. It is also acceptable to useni, which is an alias for New-

Item.

Question: Which cmdlet do you think would retrieve information from the event log?

Answer: Get-EventLogretrieves information from the event log.

Question: Which cmdlet do you think would start a stopped virtual machine?

Answer: Start-VMwould start a stopped virtual machine.

Real-world Issues and Scenarios

Many common tools can be replaced with Windows PowerShell cmdlets. The following table shows some

examples of common commands that can be replaced with Windows PowerShell cmdlets in Windows

Server 2012 R2.

Old Command Windows PowerShell Equivalent

ipconfig /a Get-NetIPConfigurat ion

Shutdown.exe Restart-Computer

Net Start Start-Service (Restart-Service)

Net Stop Stop-Service (Restart-Service)

Net Use New-SmbMapping

Netstat Get-NetTCPConnection


29/169


Old Command Windows PowerShell Equivalent

Netsh advfirewall add New-NetFirewallRule

Route Print Get-NetRoute

ToolsYou can use the tools in the following table to work with Windows PowerShell.

Tool Description

Windows PowerShellIntegrated Script Editor (ISE)

Windows PowerShell ISE provides a simple, yet powerful interface tocreate and test scripts, and discover new cmdlets.

Microsoft Visual StudioWorkflow Designer

This is a development tool that is used to create WindowsPowerShell workflows.

Powershell.exe This is the Windows PowerShell executable.

Active DirectoryAdministrative Center

This tool enables you to perform common Active Directorymanagement tasks, such as creating and modifying user andcomputer accounts. All of the changes that you make by using thismanagement tool are logged in the Windows PowerShell Historypane.

Common Issues and Troubleshooting Tips

Common Issue Troubleshooting Tip

Administrators cannot find the correctWindows PowerShell cmdlet for a task.

Use the Get-Command cmdlets and Help inWindows PowerShell ISE to search for cmdlets.

Administrator cannot connect to a serverby using remote Windows PowerShell.

There are several possible reasons why this couldoccur. For example, Remote Windows PowerShellconnections may be blocked by Windows AdvancedFirewall, or the WinRM service may be misconfiguredor disabled.

Get-Helpdoes not provide any help forcmdlets.

You may have to download the latest Help files. Youcan download the latest files by using the Update-Helpcmdlet.

An administrator is new to WindowsPowerShell, and is uncomfortable with thecommand-line.

Use Windows PowerShell ISE to become morefamiliar with the command line. Also, use theGet-CommandandShow-Commandcmdlets to provideadditional help.


30/169



Lab: Managing Servers Running Windows Server 2012 by Using WindowsPowerShell

Question and AnswersQuestion: What happens if you try to run an unsigned script that you have created locally and the

execution policy is set to RemoteSigned?

Answer: When a locally created script is run on a computer with the execution policy set to

RemoteSigned, the script runs successfully without warning. This is the default policy for

Windows Server 2012 R2.

Question: How can you automate the creation of hundreds of user accounts based on data contained on

an Excel spreadsheet?

Answer: You can save the Excel file as a CSV file, and then use a Windows PowerShell script that uses the

Import-CSVand Add-ADUsercmdlets.


31/169

Managing Storage in Windows Server 2012 3-1

Module 3

Managing Storage in Windows Server 2012

Contents:Lesson 1:Storage Features in Windows Server 2012 2

Lesson 2:Configuring iSCSI Storage 6

Lesson 3:Configuring Storage Spaces in Windows Server 2012 10

Lesson 4:Configuring BranchCache in Windows Server 2012 14




32/169


Lesson 1

Storage Features in Windows Server 2012

Contents:


Resources 3

Demonstration: Configuring Data Deduplication 4

Demonstration: Managing Virtual Hard Disks 4


33/169



What Is Data Deduplication?Question: On which of your shares can you use data deduplication?

Answer: The answer varies according to the company. In smaller companies, it is very likely that there is

one share that stores all of the software or application files, and in such cases, data deduplicationwould be a good way to reduce space. Generally, data deduplication should be used on large

volumes that contain data that does not change frequently. Data deduplication cannot be used

for volumes containing an operating system.

Whats New in File Server Resource Manager?

Question: Are you currently using the File Server Resource Manager in Windows Server 2008? If yes, for

what areas do you use it?

Answer: The answer will vary based on the students experience with the File Server Resource Manager in

Windows Server 2008. File Server Resource Manager is used in the following areas:

File classification infrastructure

File management tasks

Quota management

File screening management

Resources

File and Storage Services in Windows Server 2012

Additional Reading: For more information, see File and Storage Services Overview at


What Is Data Deduplication?

Additional Reading: For more information, see Data Deduplication Overview at


For more information, see Introduction to Data Deduplication in Windows Server 2012 at


What Are Thin Provisioning and Trim Storage?

Additional Reading: For more information, see Thin Provisioning and Trim Storage

Overview athttp://go.microsoft.com/fwlink/?linkID=269672

Whats New in File Server Resource Manager?

Additional Reading: For more information, see What's New in File Server Resource

Manager in Windows Server 2012 athttp://go.microsoft.com/fwlink/?linkID=270039

For more information, see What's New in File Server Resource Manager in Windows Server 2012

R2 athttp://go.microsoft.com/fwlink/?LinkID=331422
http://go.microsoft.com/fwlink/?linkID=269670http://go.microsoft.com/fwlink/?linkID=269670http://go.microsoft.com/fwlink/?linkID=269657http://go.microsoft.com/fwlink/?linkID=269657http://go.microsoft.com/fwlink/?linkID=269671http://go.microsoft.com/fwlink/?linkID=269671http://go.microsoft.com/fwlink/?linkID=269672http://go.microsoft.com/fwlink/?linkID=269672http://go.microsoft.com/fwlink/?linkID=269672http://go.microsoft.com/fwlink/?linkID=270039http://go.microsoft.com/fwlink/?linkID=270039http://go.microsoft.com/fwlink/?linkID=270039http://go.microsoft.com/fwlink/?LinkID=331422http://go.microsoft.com/fwlink/?LinkID=331422http://go.microsoft.com/fwlink/?LinkID=331422http://go.microsoft.com/fwlink/?LinkID=331422http://go.microsoft.com/fwlink/?linkID=270039http://go.microsoft.com/fwlink/?linkID=269672http://go.microsoft.com/fwlink/?linkID=269671http://go.microsoft.com/fwlink/?linkID=269657http://go.microsoft.com/fwlink/?linkID=269670


34/169


What Are Basic and Dynamic Disks?

Additional Reading: For more information, see How Basic Disks and Volumes Work at


For more information, see Dynamic disks and volumes at


Demonstration: Configuring Data Deduplication

Demonstration Steps

Add the Data Deduplication role service

1. Sign in to LON-DC1 with the user name Adatum\Administrator and the password Pa$$w0rd.

2. In Server Manager, click Add roles and features.

3. In the Add Roles and Features Wizard, on the Before you beginpage, click Next.

4.

On the Select installation typepage, click Next.5. On the Select destination serverpage, ensure that Select server from the server poolis selected,

and then click Next.

6. On the Select server rolespage, expand File And Storage Services (Installed), expand File and

iSCSI Services (Installed), select the Data Deduplicationcheck box, and then click Next.

7. On the Select featurespage, click Next.

8. On the Confirm installation selectionspage, click Install.

9. When installation is complete, click Close.

Enable Data Deduplication on E: Drive

1.

On LON-DC1, in Server Manager, in the navigation pane, click File and Storage Services.

2. In the File and Storage Services pane, click Volumes.

3. In the Volumes pane, right-click E:, and then in the drop-down list, select Configure Data

Deduplication.

4. In the Allfiles (E:\) Deduplication Settingsdialog box, click General purpose file serverfrom the

Data duplicationlist, and in the Deduplicate files older than (in days)box, type 3, and then click

Set Deduplication Schedule.

5. In the LON-DC1 Deduplication Scheduledialog box, click Enable throughput optimization, in the

Start timedrop-down list, select the closest hour to the current time, and then click OK.

6.

In the Allfiles (E:\) Deduplication Settingsdialog box, click OK.

Demonstration: Managing Virtual Hard Disks

Demonstration Steps

Create a virtual hard disk

1. On LON-SVR1, if required, start Server Manager.

2. Click Tools, and then click Computer Management.

3. In Computer Management, click Disk Management.
http://go.microsoft.com/fwlink/?LinkID=199648http://go.microsoft.com/fwlink/?LinkID=199648http://go.microsoft.com/fwlink/?LinkID=199649http://go.microsoft.com/fwlink/?LinkID=199649http://go.microsoft.com/fwlink/?LinkID=199649http://go.microsoft.com/fwlink/?LinkID=199648


35/169


4. Wait for the disks to appear, and then right-click Disk Management, and click Create VHD.

5. In the Create and Attach Virtual Hard Disk dialog box, click Browse.

6. Browse to E:\Labfiles, type DiskFas the File name, and then click Save.

7. In the Create and Attach Virtual Hard Disk dialog box, type 10as the Virtual hard disksize.

8.

Click VHDX, click Dynamically expanding, and then c lick OK.

9. On the taskbar, click File Explorer.

10. Browse to E:\Labfilesand verify that a .vhdx file named DiskE.vhdx was created.

Manage a virtual hard disk

1. In Disk Management, right-click Disk 2, click Initialize disk, and then click OK.

2. Right-click the unallocated space on Disk 2, and click New Simple Volume.

3. On the Welcome to the New Simple Volume Wizard page, click Next.

4. On the Specify Volume Size page, click Next.

5.

On the Assign Drive Letter or Path page, click Next.

6. On the Format Partition page, type Dataas the Volume label, click Next, and then click Finish.

If the Microsoft Windows dialog box appears, click Cancel.

7. In File Explorer, verify that the Data (F:) drive is now listed.

8. Close all open windows.


36/169


Lesson 2

Configuring iSCSI Storage

Contents:


Resources 7

Demonstration: Configuring iSCSI Target 7

Demonstration: Connecting to the iSCSI Storage 8


37/169



What is iSCSI?Question: Can you use your organizations internal IP network to provide iSCSI?

Answer: Yes, you can. However, we recommend having a dedicated IP network for iSCSI so that other

network traffic does not interfere the iSCSI communication, and the iSCSI communication doesnot interfere with the network traffic.

iSCSI Target Server and iSCSI InitiatorQuestion: When would you consider implementing diskless booting from iSCSI targets?

Answer: The answer varies depending on your experience, but primarily you might consider using this

approach if you want to implement virtualization technologies such as a Virtual Desktop

Infrastructure (VDI) in your organization.

Resources

Additional Reading: For more information, see Introduction of iSCSI Target in Windows

Server 2012 athttp://go.microsoft.com/fwlink/?linkID=269674

Demonstration: Configuring iSCSI Target

Demonstration Steps

Add the iSCSI Target Server role service

1. On LON-DC1, in Server Manager, click Dashboard.

2. Click Add roles and features.

3.

In the Add Roles and Features Wizard, on the Before you beginpage, click Next.

4. On the Select installation typepage, click Next.

5. On the Select destination serverpage, ensure that Select server from the server poolis selected,



iSCSI Services, select the iSCSI Target Servercheck box, and then click Next.



9. When installation is complete, click Close.

Create two iSCSI virtual disks and an iSCSI target on LON-DC1

1. On LON-DC1, in Server Manager, in the navigation pane, click File and Storage Services.

2. In the File and Storage Services pane, click iSCSI.

3. In the iSCSI VIRTUAL DISKS pane, click TASKS, and then in the TASKSdrop-down list, click New iSCSI

Virtual Disk.

4. In the New iSCSI Virtual Disk Wizard, on the Select iSCSI virtual disk locationpage, under Storage

location, click C:, and then click Next.

5. On the Specify iSCSI virtual disk namepage, type iSCSIDisk1, and then click Next.
http://go.microsoft.com/fwlink/?linkID=269674http://go.microsoft.com/fwlink/?linkID=269674http://go.microsoft.com/fwlink/?linkID=269674http://go.microsoft.com/fwlink/?linkID=269674


38/169


6. On the Specify iSCSI virtual disk sizepage, in the Sizebox, type 5, ensure GBis selected in the

drop-down list, and then click Next.

7. On the Assign iSCSI targetpage, click New iSCSI target, and then click Next.

8. On the Specify target namepage, in the Namebox, type LON-SVR2, and then click Next.

9.

On the Specify access serverspage, click Add.10. In the Select a method to identify the initiatordialog box, click Enter a value for the selected

type, in the Typedrop-down list select IP Address. In the Valuebox, type 172.16.0.22, and then

click OK.

11. On the Specify access serverspage, click Next.

12. On the Enable Authenticationpage, click Next.

13. On the Confirm selectionspage, click Create.

14. On the View resultspage, wait until the creation is completed, and then click Close.

15. In the iSCSI VIRTUAL DISKS pane, click TASKS, and then in the TASKSdrop-down list, click New iSCSI

Virtual Disk.16. In the New iSCSI Virtual Disk Wizard, on the Select iSCSI virtual disk locationpage, under Storage

location, click C:, and then click Next.

17. On the Specify iSCSI virtual disk namepage, type iSCSIDisk2, and then click Next.

18. On the Specify iSCSI virtual disk sizepage, in the Sizebox, type 5, ensure GBis selected in the

drop-down list, and then click Next.

19. On the Assign iSCSI targetpage, click lon-svr2, and then click Next.



Demonstration: Connecting to the iSCSI Storage

Demonstration Steps

Connect LON-SVR2 to the iSCSI target

1. Sign in to LON-SVR2 with user name Adatum\Administrator and the password Pa$$w0rd.

2. In Server Manager, on the Toolsmenu, in the Toolsdrop-down list, select iSCSI Initiator.

3. In the Microsoft iSCSI message box, click Yes.

4. In the iSCSI Initiator Propertiesdialog box, on the Targetstab, type LON-DC1, and then click

Quick Connect.

5.

In the Quick Connect window, in the Discovered targetssection, click iqn.1991-

05.com.microsoft:lon-dc1-lon-svr2-target , and then click Done.

6. In the iSCSI Initiator Propertiesdialog box, to close the dialog box, click OK.

Verify the presence of the iSCSI drive

1. In Server Manager, on the Toolsmenu, in the Tools drop-down list, select Computer Management.

2. In the Computer Management console, under Storage, click Disk Management.

Notice that the new disks are added. They are all currently offline and not formatted.

3. Close the Computer Management console.


39/169


Note: Keep the computers running. You must have them for the demonstration in the

lesson Configuring Storage Spaces in Windows Server 2012.


40/169


Lesson 3

Configuring Storage Spaces in Windows Server 2012

Contents:

Demonstration: Configuring a Storage Space 11

Demonstration: Implementing Redundant Storage Spaces 12


41/169


Demonstration: Configuring a Storage Space

Demonstration Steps

Create a storage pool

1. On LON-SVR2, open Server Manager by clicking the icon on the taskbar.

2.

In the navigation pane, click File and Storage Services, and in the Servers pane, click Storage Pools.

3. In the STORAGE POOLS pane, click TASKS, and then in the TASKSdrop-down list, click New Storage

Pool.

4. In the New Storage Pool Wizard, on the Before you beginpage, click Next.

5. On the Specify a storage pool name and subsystempage, in the Namebox, type StoragePool1,


6. On the Select physical disks for the storage poolpage, click all available Physical disks, and then

click Next.



Create a simple virtual disk and a volume

1. In the VIRTUAL DISKS pane, click TASKS, and then in the TASKSdrop-down list, click New Virtual

Disk. Note: If New Virtual Disk appears dimmed, select StoragePool1first.

2. In the New Virtual Disk Wizard, on the Before you beginpage, click Next.

3. On the Select the storage poolpage, click StoragePool1, and then click Next.

4. On the Specify the virtual disk namepage, in the Namebox, type Simple vDisk, and then click

Next.

5. On the Select the storage layoutpage, in the Layoutlist, select Simple, and then click Next.

6. On the Specify the provisioning typepage, click Thin, and then click Next. You should mention

that this configures thin provisioning for that volume.

7. On the Specify the size of the virtual diskpage in the Specify sizebox, type 2, and then click Next.


9. On the View resultspage, wait until the creation is completed. Ensure Create a volume when this

wizard closesis selected, and click Close.

10. In the New Volume Wizard, on the Before you beginpage, click Next.

11. On the Select the server and diskpage, under Disk, click Simple vdisk virtual disk, and then click

Next.

12. On the Specify the size of the volumepage, to confirm the default selection, click Next.

13. On the Assign to a drive letter or folderpage, to confirm the default selection, click Next.

14. On the Select file system settingspage, in the File systemdrop-down list, select ReFS. In the

Volume labelbox, type Simple Volume, and then click Next.


16. On the Completionpage, wait until the creation is completed, and then click Close.


42/169


Demonstration: Implementing Redundant Storage Spaces

Demonstration Steps

Create a redundant virtual disk and a volume

1. On LON-SVR2, in Server Manager, in the VIRTUAL DISKS pane, click TASKS, and then in the TASKS

drop-down list, select New Virtual Disk.

2. In the New Virtual Disk Wizard, on the Before you beginpage, click Next.

3. On the Select the storage poolpage, click StoragePool1, and then click Next.

4. On the Specify the virtual disk namepage, in the Namebox, type Mirrored vDisk, and then c lick

Next.

5. On the Select the storage layoutpage, in the Layout list, select Mirror, and then click Next.

Note: You should mention that this automatically configures a two-way mirror. You do not

see the Resiliency Settings page because you would require five disks to configure a three-way

mirror.

6. On the Specify the provisioning typepage, click Thin, and then click Next.

7. On the Specify the size of the virtual diskpage in the Specify sizebox, type 5, and then click Next.


9. On the View resultspage, wait until the creation is completed, ensure Create a volume when this

wizard closesis selected, and then click Close.

10. In the New Volume Wizard, on the Before you beginpage, click Next.

11. On the Select the server and diskpage, in the Disk pane, click the Mirrored vDiskvirtual disk, and

then click Next.12. On the Specify the size of the volumepage, to confirm the default selection, click Next.

13. On the Assign to a drive letter or folderpage, to confirm the default selection, click Next.

14. On the Select file system settingspage, in the File systemdrop-down list, select ReFS. In the

Volume labelbox, type Mirrored Volume, and then click Next.


16. On the Completionpage, wait until the creation is completed, and then click Close.

17. On the Start screen, type command prompt, and then press Enter.

18. At the command prompt, type the following command, and then press Enter:

Copy C:\windows\system32\write.exe F:\

19. Close the command prompt.

20. In Server Manager, click the Toolsmenu, and then in the Toolsdrop-down list, select Computer

Management.

21. In the Computer Management console, under Storage, click Disk Management.

Note: Notice that the two volumes E: and F: are available.


43/169


Simulate a drive failure and test volume access

1. On LON-DC1, in Server Manager, in the navigation pane, click File and Storage Services.

2. In the File and Storage Services pane, click iSCSI.

3. In the iSCSI VIRTUAL DISKS pane, in the LON-DC1 list, right-click iSCSIDisk1.vhd, and then click

Disable iSCSI Virtual Disk.

4. In the Disable iSCSI Virtual Disk warning message box, click Yes.

5. Switch to LON-SVR2.

6. In the Computer Management console, under Storage, right-click Disk Managementand in the

drop-down list, select Rescan Disks.

Note: Notice that the Simple Volume (E:) is not available, and the Mirrored Volume (F:) is

available.

7. On the taskbar, open File Explorer, click Computer, and then click Mirrored Volume (F:). You should

now see write.exein the file list.

8. Close File Explorer.

9. In Server Manager, in the STORAGE POOLS pane, on the menu bar, click Refresh Storage Pools.

Notice the warning that appears next to Mirrored vDisk.

10. In the VIRTUAL DISKS pane, in the drop-down list, right-click Simple vDisk, and then select

Properties.

11. In the Simple vDisk Propertiesdialog box, in the navigation pane, click Health.

Note: Notice the Health Statusthat should indicate Unhealthy. The Operational Status

should indicate Detached. This means that the disk is not available on this computer any longer.

12. To close the dialog box, click OK.

13. In the VIRTUAL DISKS pane, right-click Mirrored vDisk, and then in the drop-down list, select

Properties.

14. In the Mirrored vDisk Propertieswindow, in the navigation pane, click Health.

15. Notice the Health Statusshould indicate a Warning. The Operational Status should indicate

Incomplete.

16. To close the dialog box, click OK.


44/169


Lesson 4

Configuring BranchCache in Windows Server 2012

Contents:

Resources 15

Demonstration: How to Configure BranchCache 15


45/169


Resources

BranchCache Requirements

Additional Reading: For more information, see BranchCache Overview at


Demonstration: How to Configure BranchCache

Demonstration Steps

Add BranchCache for the Network Files role service

1. Sign in to LON-DC1 with user name Adatum\Administrator and the password Pa$$w0rd.

2. Open Server Manager by clicking the icon on the taskbar.

3. Click Add roles and features.

4.

In the Add Roles and FeaturesWizard, on the Before you beginpage, click Next.5. On the Select installation typepage, click Next.

6. On the Select destination serverpage, ensure that Select server from the server poolis selected,



iSCSI Services, select the BranchCache for Network Filescheck box, and then click Next.



10. When installation is complete, click Close, and then close Server Manager.

Enable BranchCache for the server

1. On the Start screen, type gpedit.msc, and then press Enter.Browse to Computer

Configuration\Administrative Templates\Network\Lanman Server, and double-click Hash

Publication for BranchCache.

2. In the Hash Publication for BranchCachedialog box, click Enabled.

3. In the Optionsbox, under Hash publication actions, select Allow hash publication only for

shared folder on which BranchCache is enabled, and then click OK.

4. Close the Local Group Policy Editor.

Enable BranchCache for a file share

1.

On the taskbar, open File Explorer, and then click Local Disk (C:).

2. On the quick access bar located on the upper-left side of the window, click New Folder, type Share,

and then press Enter.

3. Right-click Share, and click Properties.

4. In the Share Propertiesdialog box, click the Sharingtab, and then click Advanced Sharing.

5. In the Advanced Sharingdialog box, click Share this folder, and then click Caching.

6. In the Offline Settingsdialog box, select the Enable BranchCachecheck box, and then click OK.

7. In the Advanced Sharingdialog box, click OK, and then click Close.
http://go.microsoft.com/fwlink/?linkID=269675http://go.microsoft.com/fwlink/?linkID=269675http://go.microsoft.com/fwlink/?linkID=269675


46/169




47/169



Review Question(s)Question: How does BranchCache differ from Distributed File System (DFS)?

Answer: BranchCache only caches files that users in a remote location have accessed. DFS replicates files

between head office and a remote location so that all files exist in both locations.

Question: Why would you want to implement BranchCache in Hosted Cache mode instead of the

Distributed Cache mode?

Answer: When you use the Distributed Cache mode, the cache is distributed among all computers

running Windows 7 or newer. However, it is likely that these computers are turned off or that

portable computers are removed from the office. This means that a cached file might not be

available, forcing the file to be downloaded across the WAN link again. However, the Hosted

Cache mode keeps the cached files on a file server that will always be available.

Question: Is the Storage Spaces feature also available on Windows 8?

Answer: Yes, you can use Storage Spaces on both Windows Server 2012 and Windows 8.Question: Can you configure data deduplication on a boot volume?

Answer: No, you cannot configure data deduplication on a boot volume. You can configure data

deduplication only on volumes that are not system or boot volumes.

Question: Are you currently implementing volumes that are 10 terabytes or larger? What are the

problems with volumes of that size?

Answer: Depending on your situation, you may have very large volumes. However, the larger the volume,

the more difficult and lengthy the process of checking these volumes for errors becomes.

Windows Server 2012 R2 includes an enhanced version of the Chkdsk tool to optimize the

implementation of very large volumes; it also includes the new ReFS file system, which helps to

address the issue of NTFS formatted volumes.

Tools

Tool Use Where to find it

iSCSI Target Server Configure iSCSI targets In Server Manager, under File andStorage Servers

iSCSI Initiator Configure a client to connect toan iSCSI target virtual disk

In Server Manager, in the Tools drop-down list

DeduplicationEvaluation tool

(DDPEval.exe)

Analyze a volume on thepotential saving when enabling

data deduplication

C:\Windows\System32


48/169



Lab A: Managing Storage on Servers Running Windows Server 2012


Question: Why would you implement MPIO together with iSCSI? What problems would you solve withthis?

Answer: You must have an MPIO to create a second network route to the iSCSI target. This is useful when

you lose a connection to the iSCSI target because of a loss in a network adapter. With MPIO set

up and configured, if a network adapter fails, another network adapter can take over.

Question: What is the purpose of the iSCSI Initiator component?

Answer: The iSCSI Initiator component is the client component for iSCSI to connect to an iSCSI target.

Windows 8 and Windows Server 2012 already have this component preinstalled as a service. You

only have to start them to use it.

Lab B: Implementing BranchCache

Question and AnswersQuestion: In the lab, you moved LON-SVR1 to its own OU. Why?

Answer: The client configuration settings were configured in the Default Domain Policy that is linked to

the root of the domain. Those Group Policy settings prevent the Hosted cache mode from being

configured on LON-SVR1. By moving LON-SVR1 to its own OU, you were able to block

inheritance of Group Policy to that OU, and thereby prevent those settings from applying to

LON-SVR1.

Question: When would you consider implementing BranchCache into your own organization?

Answer: The answer varies, but BranchCache is only important if you have a branch office or a locationthat is connected to your organizations headquarters with a low-bandwidth link.


49/169

Implementing Network Services 4-1

Module 4

Implementing Network Services

Contents:Lesson 1:Implementing DNS and DHCP Enhancements 2

Lesson 2:Implementing IP Address Management (IPAM) 5

Lesson 3:Managing IP Address Spaces with IPAM 8

Lesson 5:Implementing NAP 11




50/169


Lesson 1

Implementing DNS and DHCP Enhancements

Contents:

Resources 3

Demonstration: Configuring DNSSEC 3

Demonstration: Configuring Failover for DHCP 4


51/169


Resources

What's New in DNS in Windows Server 2012

Reference Links: For detailed information of improved features for DNS server role in

Windows Server 2012 R2, see What's New in DNS Server in Windows Server 2012 R2 athttp://go.microsoft.com/fwlink/?LinkID=331423

Whats New in DHCP in Windows Server 2012

Reference Links: For complete list of new and improved Windows PowerShell cmdlets for

DHCP in Windows Server 2012 R2, see Windows PowerShell for DHCP Server at


Demonstration: Configuring DNSSEC

Demonstration Steps

1. Sign in to LON-DC1 as Adatum\Administrator with a password of Pa$$w0rd.

2. In Server Manager click Tools, and then, in the drop-down list, click DNS.

3. Expand LON-DC1, expand Forward Lookup Zones.Select Adatum.com.

4. On the menu, click Action, and in the drop-down list, click DNSSEC>Sign the Zone

5. In the Zone Signing Wizard, click Next.

6. On the Signing Options screen, select Customize zone signing parameters,and click Next.

7. On the Key Master screen, ensure that LON-DC1 is the Key Master. Click Next.

8.

On the Key Signing Key (KSK) screen, click Next.

9. On the KSK screen, click Add.

10. On the New Key Signing Key (KSK) screen, click OK.

11. On the Key Signing Key screen, click Next.

12. On the Zone Signing Key (ZSK) screen, click Next.

13. On the Zone Signing Key (ZKS) screen, click Add.

14. On the New Zone Signing Key (ZKS) screen, click OK.

15. On the Zone Signing Key screen, click Next.

16.

On the Next Secure (NSEC) screen, click Next.

17. On the Trust Anchors (TAs) screen, click Next.

18. On the signing and polling parameters screen, click Next.

19. On the DNS Security Extensions (DNSSEC) screen, click Next, and then click Finish.

20. In Server Manager, click Tools, and then in the drop-down list click Group Policy Management.

21. Expand Forest: Adatum.com, expand Domains, expandAdatum.com,right-click the Default

Domain Policy, and then click Edit.
http://go.microsoft.com/fwlink/?LinkID=331423http://go.microsoft.com/fwlink/?LinkID=331423http://go.microsoft.com/fwlink/?LinkID=331424http://go.microsoft.com/fwlink/?LinkID=331424http://go.microsoft.com/fwlink/?LinkID=331424http://go.microsoft.com/fwlink/?LinkID=331423


52/169


22. In the Group Policy Management Editor, under Computer Configuration, expand Policies,expand

Windows Settings, and then click the Name Resolution Policy folder.

23. In the Create Rules section, in the Suffix field, type Adatum.com.

24. On the DNSSEC tab, select the Enable DNSSEC in this rulecheck box.

25.

Check Require DNS clients to check that name and address data has been validated by the DNSserver, and then click Create.


Demonstration: Configuring Failover for DHCP

Demonstration Steps

1. Sign in to LON-SVR1as Adatum\Administrator with a password Pa$$w0rd.

2. In Server Manager, click Tools, and then in the drop-down list, click DHCP.

Note: The server is authorized but no scopes are configured.

3. Switch to LON-DC1.

4. In Server Manager, click Tools,and then in the drop-down list, click DHCP.

5. In the DHCP Management console expand lon-dc1.adatum.com , select and then right-click the IPv4

node, and then click Configure Failover.

6. In the Configuration Failover Wizard, click Next.

7. On the Specify the partner server to use for failoverscreen, in the Partner Server field, enter

172.16.0.21, and then c lick Next.

8. On the Create a new failover relationshipscreen, in the Relationship Name field, enter Adatum.

9. In the Maximum Client Lead Timefield, set the hours to 0 and set the minutes to 15.

10. Ensure that the Mode field is set to Load balance.

11. Ensure the Load Balance Percentage is set to 50%.

12. Check State Switchover Interval.

13. In the Enable Message Authentication Shared Secretfield, type Pa$$w0rd, and then click Next.

14. In Configure Failover window, click Finish.

15. Ensure that all five actions have status Successful, and then clickClose.


53/169


Lesson 2

Implementing IP Address Management (IPAM)

Contents:

Demonstration: Implementing IPAM 6


54/169


Demonstration: Implementing IPAM

Demonstration Steps

1. Sign in to LON-SVR2 as Adatum\Administrator with the password Pa$$w0rd.

2. On the Server Manager Dashboard, click Add roles and features.

3.

In the Add Roles and Features Wizard, click Next.

4. On the Select installation typescreen, click Next.

5. On the Select destination serverscreen, click Next.

6. On the Select server rolesscreen, click Next.

7. On the Select featuresscreen, check IP Address Management (IPAM) Server.

8. In the Add features that are required for IP Address Management (IPAM) Serverpop-up

window, click Add Features,and then click Next.

9. In Confirm installation selections, click Install.

10.

Close the wizard when complete.11. In the Server Manager navigation pane, click IPAM.

12. In the IPAM Overview pane, click Provision the IPAM server.

13. In the Provision IPAM Wizard, click Next twice.

14. On the Select provisioning methodscreen, select Group Policy Basedand type IPAMin the GPO

name pr

20417c enu companion

Documents