installing and configuring windows server 2016 hands-on guide: step by step lab guide
TRANSCRIPT
![Page 1: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/1.jpg)
![Page 2: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/2.jpg)
InstallingandConfiguringWindows
Server2016(Hands-onGuide)
Copyright©2016K.G.Mark
Allrightsreserved.
![Page 3: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/3.jpg)
ContentsCopyright
AboutThisBookAudienceandCandidatesPrerequisites
DisclaimerVirtualMachines
PreparingVirtualMachinesTask1:InstallingVMwareWorkstationontheHostMachineTask2:InstallingandConfiguringtheDC1VirtualMachine
Task2.1:ConfiguringtheDC1VirtualMachineTask2.2:PromotingtheDC1VirtualMachineasaDomainControllerTask3:InstallingandConfiguringtheSERVER1VirtualMachineTask4:InstallingandConfiguringtheCLIENT1VirtualMachineTask5:InstallingandConfiguringtheROUTERVirtualMachineTask6:CreatingandConfiguringtheSERVER2VirtualMachine
Task7:CreatingSnapshotsofVirtualMachinesTask8:WorkingwiththeWindowsServer2016DesktopExperienceExercise1:InstallingandConfiguringWindowsServer2012R2Core
MachineTask1:InstallingWindowsServer2012R2CoreMachine.
Task2:ConfiguringtheWindowsServer2016CoreMachine.Task3:AddingCORE1toDomain
Exercise2:ManagingServersRemotelyTask1:CreatingandManagingtheServerGroup
Task2:DeployingRolesandFeaturesonCORE1MachineTask3:ManagingServicesontheCORE1Machine
Exercise3:UsingWindowsPowerShelltoManageServersTask1:UsingtheWindowsPowerShelltoConnectRemotelytoServers
andViewInformation
![Page 4: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/4.jpg)
Task2:UsingWindowsPowerShelltoManageRolesandFeaturesRemotely
Exercise04:InstallingandConfiguringDomainControllersTask1:AddingtheADDSRoleonaMemberServer
Task2:ConfiguringSERVER1ServerasaDomainControllerTask3:ConfiguringSERVER1asaGlobalCatalogServerExercise5:InstallingaDomainControllerbyUsingIFM
Task1:GeneratingaIFMDataFileTask2:AddingtheADDSRoletotheMemberServer
Task3:ConfiguringSERVER1asaNewDomainControllerUsingtheIFMDataFile
Exercise6:ManagingOrganizationalUnitsandGroupsinADDSTask1:ManagingOrganizationalUnitsandGroups
Task2:DelegatingthePermissionsTask3:ConfiguringHomeFoldersforUserAccounts
Task4:TestingandVerifyingtheHomeFoldersandDelegatedPermissions
Task5:ResettingtheComputerAccountsTask6:ExaminingtheBehaviorwhenaUserLoginsonClient.
Task7:RejoiningtheDomaintoReconnecttheComputerAccountExercise7:UsingWindowsPowerShelltoCreateUserAccountsandGroups
Task1:CreatingaUserAccountUsingWindowsPowerShellTask2:CreatingGroupsUsingWindowsPowerShellTask3:ExportingUserAccountsUsingtheldifdeTool
Exercise8:InstallingandConfiguringtheDHCPServerRoleTask1:InstallingtheDHCPServerRoleTask2:ConfiguringtheDHCPScopeTask3:ConfiguringDHCPClient
Task4:ConfiguringDHCPReservationExercise9:InstallingandConfiguringDNS
![Page 5: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/5.jpg)
Task1:ConfiguringSERVER1asaDomainControllerwithoutInstallingtheDNSServerRole
Task2:CreatingandConfiguringtheMyzone.localZoneonDC1Task3:AddingtheDNSServerRoleontheSERVER1Task4:VerifyingReplicationofthemcsalab.localZone
Task5:ConfiguringDNSForwarderTask6:ManagingtheDNSCache10:ImplementingLANRouting
Task1:InstallingtheLANRoutingFeatureonROUTERTask2:ConfiguringtheLANRoutingServiceonROUTER
Task3:TestingtheConnectivitybetweenDC1andSERVER2ServersExercise11:ConfiguringIPv6AddressingTask1:DisablingIPv6AddressonDC1
Task2:DisablingIPv4AddressonSERVER2Task3:ConfiguringanIPv6NetworkonROUTERTask4:VerifyingIPv6AddressonSERVER2
Exercise12:InstallingandConfiguringDiskStorageTask1:AddingNewVirtualDiskstoDC1
Task2:InitializingtheAddedDisksTask3:CreatingandFormattingSimpleVolumes
Task4:ShrinkingtheVolumesTask5:ExtendingtheVolumes
Exercise13:ConfiguringaRedundantStorageSpaceTask1:CreatingaStoragePool
Task2:CreatingaMirroredVirtualDiskTask3:CreatingaFileintoMirroredVolume1
Task4:RemovingaPhysicalDriveTask5:VerifyingtheFileAvailability
Exercise14:ImplementingFileSharingTask1:CreatingtheFolderStructurefortheNewShare
![Page 6: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/6.jpg)
Task2:ConfiguringNTFSPermissionsontheFolderStructureTask3:SharingtheFolder
Task4:AccessingtheSharedFolderTask5:EnablingAccess-basedEnumeration
Task6:TestingtheAccess-basedEnumerationConfigurationExercise15:ImplementingShadowCopies
Task1:ConfiguringShadowCopiesTask2:RecoveringaDeletedFileUsingShadowCopy
Exercise16:ImplementingNetworkPrintingTask1:InstallingthePrintandDocumentServicesServerRole
Task2:InstallingaNewPrinterTask3:ConfiguringPrinterPooling
Task4:ConnectingaPrinteronaClientExercise17:ImplementingGroupPolicyObjects
Task1:CreatingaNewGPOTask2:ConfiguringtheInternetExplorerGPOTask3:CreatingaDomainUsertoTesttheGPO
Task4:TestingtheInternetExplorerGPOTask5:ConfiguringSecurityFilteringtoExemptaUserfromtheInternet
ExplorerGPOTask6:TestingtheInternetExplorerGPO
Exercise18:ImplementingAppLockerandFirewallUsingGroupPolicyTask1:RestrictinganApplicationUsingAppLocker
Task2:ConfiguringWindowsFirewallRulesUsingGroupPolicy
![Page 7: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/7.jpg)
CopyrightTheauthorholdsalltherightsofpublishingandreproducingtothisbook.Thecontentofthisbookcannotbereproducedorcopiedinanyformorbyanymeansorreproducedwithoutthepriorwrittenpermissionoftheauthor.
![Page 8: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/8.jpg)
AboutThisBookThisbookcontainsthevirtuallabsetupguideandthelabexercisesforinstalling
andconfiguringWindowsServer2016.Youcancreatethevirtuallabinfrastructureonyourownsystemandyoucaneasilyperformallthelabexercisesmentionedinthisbook.CandidatehavingthebasicknowledgeofWindowsoperatingsystemsandnetworkingfundamentalscanperformallthelabexerciseswithout(orleast)theneedofatrainerorfaculty.Thisbookmainlycoverstheinitialimplementationandconfigurationofcoreservices,suchasAD
DS,networkingservices.
![Page 9: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/9.jpg)
AudienceandCandidatesPrerequisitesThisbookisintendedforthecandidateswhohavebasicoperatingsystemknowledge,andwanttogainthehands-onpracticeskillsandknowledge
necessarytoimplementthecoreinfrastructureservices.Inaddition,thisbookisalsohelpfulforthecandidatewhoarelookingforcertificationintheWindows
Server2016platform.Thecandidatesshouldhavethebasicknowledgeofthenetworking
fundamentals,Windows-basedoperatingsystems,andvirtualizationplatformstoperformthehands-onpractices.
![Page 10: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/10.jpg)
DisclaimerWemadealmosteveryefforttoavoiderrorsoromissionsinthisguide.
However,errorsmayslinkin.Anymistake,errorordiscrepancynotedbythereadersarerequestedtosharewithus,whichwillbehighlyappreciable.Thecontentsandimagesinthisguidecouldincludetechnicalinaccuraciesor
typographicalerrors.Author(s)orpublishermakesnorepresentationsabouttheaccuracyoftheinformationcontainedintheguide.
![Page 11: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/11.jpg)
VirtualMachinesThevirtualmachinesthatwillbeusedthroughoutthisbookarelistedinthe
followingtable.
S.No. VMName OperatingSystem1 DC1 WindowsServer
20162 SERVER1 WindowsServer
20163 CLIENT1 Windows8.1/104 ROUTER WindowsServer
20165 SERVER2 WindowsServer
2016
Topreparethevirtualmachinesmentionedintheprecedingtable,youneedISOimages.YoucandownloadtheevaluationISOimages(WindowsServer2016(TechnicalPreview)andWindows8.1/10)fromtheMicrosoftdownloadcenter.
Toperformthestepbysteplabexercises,downloadtheISOimagesandplace
themundertheD:\ISOsfolderonthehostmachine.YoucansetupthevirtuallabinfrastructureontheVMwareorHyper-Vplatform.
EachvirtualmachinewillactasaseparatemachinewiththeuniqueGUID,SID,
andIPaddress.ThefollowingtableliststheIPaddressesandrolesoftherespectiveVMs.
S.No.
VMName
IPAddress Role
1 DC1 10.0.0.100 Domaincontrollerofthemcsalab.local
domain.2 SERVER1 10.0.0.101 Memberserverof
themcsalab.localdomain.
3 CLIENT1 10.0.0.102 Clientmachineof
![Page 12: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/12.jpg)
themcsalab.localdomain.
4 ROUTER InternalSubnet:10.0.0.1ExternalSubnet:
192.168.0.1
RouterservertoperformtheLAN
routing.
5 SERVER2 192.168.0.2 Workgroupserverintheexternalsubnet.
![Page 13: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/13.jpg)
PreparingVirtualMachinesTocreatethevirtualmachines,youneedtoperformthefollowingtasksonthe
hostmachine:
1. InstallVMwareWorkstationorPlayer.
2. InstallandconfiguretheDC1virtualmachine
3. InstallandconfiguretheSERVER1virtualmachine
4. InstallandconfiguretheCLIENT1virtualmachine
5. InstallandconfiguretheROUTERvirtualmachine
6. InstallandconfiguretheSERVER2virtualmachine
![Page 14: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/14.jpg)
Task1:InstallingVMwareWorkstationontheHostMachine
ToInstallVMwareWorkstationorVMwarePlayer,firstyouneedtodownloadit.Onceitisdownloaded,justdouble-clickthesetupfile,andfollowthesimple
stepstocompletetheinstallationprocess.
![Page 15: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/15.jpg)
Task2:InstallingandConfiguringtheDC1VirtualMachine
ToinstallandconfiguretheDC1virtualmachine,youneedtoperformthefollowingsteps:
1. MakesurethattheVMwareconsoleisactive.2. SelectFileandthenselectNewVirtualMachine.3. OntheNewVirtualMachineWizard,clickNext.
4. OntheGuestOperatingSystemInstallationpage,selectthe
Installerdiscimagefile(iso):radiobutton,browsethelocationoftheServer2016ISOimagefile,andthenclickNext.
![Page 16: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/16.jpg)
5.
Note:IfyouusetheVMwareplatformthatautomaticallydetectstheversionoftheWindowsserver,youmayaskedtosetthefollowing
settings:Productkey
OperatingsystemeditionAdministratorpassword
Otherwise,youmayskipit.
6. OntheSelectaGuestOperatingSystempage,selectthehighestsupportedversionofWindowsserver(inthiscaseWindowsServer2012butitwillstillsupportWindowsServer2016),andthenclick
Next.
![Page 17: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/17.jpg)
7. OntheNameandVirtualMachinepage,typeDC1intheVirtual
machinenamefield.8. IntheLocationfield,navigatethelocationwhereyouwanttosave
thevirtualmachine,suchasH:\VMs\2k16\DC1,andthenclickNext.
![Page 18: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/18.jpg)
9. OntheSpecifyDiskCapacitypage,selectStorevirtualdiskasa
singlefile,optionallyyoucanalsosetthedisksizeaswell,andthenclickNext.
10. OntheReadytoCreateVirtualMachinepage,clickCustomize
Hardware.11. OntheHardwarewindow,selectNetworkAdapterintheleft
![Page 19: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/19.jpg)
pane.SelecttheHostonlyradiobutton,andthenclickClose.
12. ClickFinish.13. OntheVMwareconsole,powerontheDC1virtualmachine.14. OntheWindowsSetuppage,clickNext,andthenclickInstall
Now.
15. OntheSelecttheoperatingsystemyouwanttoinstallpage,
selecttheWindowsServer2016DesktopExperience,andthenclickNext.
![Page 20: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/20.jpg)
16. OntheLicensetermspage,selecttheIacceptthelicenseterms
checkbox,andthenclickNext.17. OntheWhichtypeofinstallationdoyouwantpage,selectthe
Customoption,andthenclickNext.18. OntheWheredoyouwanttoinstallWindowspage,clickNext.
19. TheInstallationprocesswillbegin,after10-15minutesthe
Customizesettingsscreenwilldisplay.20. SetAdministratorpasswordasPassword@123.
Task2.1:ConfiguringtheDC1VirtualMachine
![Page 21: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/21.jpg)
1. SignintoDC1withtheAdministratoraccount.2. OpentheSystemProperties(sysdm.cpl)andsetthecomputer
nameasDC1.
3. RestartandsignintothesystemwiththeAdministratoraccount.
Aftersometime,theServerManagerconsolewilldisplay.4. OpentheRundialogbox,typencpa.cpl,andthenpressEnter.5. Selectandright-clicktheactivenetworkadapter,andthenselect
Properties.6. SetthefollowingTCP/IPsettings:
IPaddress:10.0.0.100.Subnetmask:255.0.0.0.Defaultgateway:10.0.0.1.
PreferredDNSserver:10.0.0.100.
![Page 22: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/22.jpg)
7. ClosetheNetworkConnectionsconsole.
Task2.2:PromotingtheDC1VirtualMachineasa
DomainControllerTopromotetheDC1virtualmachineasadomaincontroller,youneedto
performthefollowingsteps:1. OpentheServerManagerconsole.2. ClicktheAddrolesandfeatureslink.3. OntheBeforeyoubeginpage,clickNext.4. OntheSelectinstallationtypepage,clickNext.5. OntheSelectdestinationserverpage,clickNext.6. OntheSelectserverrolespage,selecttheActiveDirectory
DomainServicescheckbox,asshowninthefollowingfigure.
![Page 23: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/23.jpg)
7. Acceptthedefaultselectionsthroughrestofthewizardand
completetheinstallationprocess.8. ClickClose,oncetheinstallationsucceedsonDC1.9. OntheServerManagerconsole,clicktheNotificationsicon.10. ClickthePromotethisservertoadomaincontrollerlink,as
showninthefollowingfigure.
11. OntheDeploymentConfigurationpage,selecttheAddanew
forestradiobutton.12. IntheRootdomainnametextbox,typemcsalab.local,asshown
inthefollowingfigure,andthenclickNext.
![Page 24: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/24.jpg)
13. OntheDomainControllerOptionspage,makesurethatthe
DomainNameSystem(DNS)servercheckboxisselected,asshowninthefollowingfigure.
14. InthePasswordandConfirmpasswordtextboxes,typethe
Password@123,andthenclickNext.15. OntheDNSOptionspageandthenclickNext.16. OntheAdditionalOptionspage,clickNext.17. OnthePathspage,asshowninthefollowingfigure,reviewthe
defaultlocationfortheADDSdatabasefile,andthenclickNext.
![Page 25: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/25.jpg)
18. OntheReviewOptionspage,clickNext.19. OnthePrerequisitesCheckpage,asshowninthefollowing
figure,reviewtheprerequisites,andthenclickInstall.
20. Aftersometime,thesystemwillrestartautomatically,signinto
DC1withtheMCSALAB\Administratoraccount.21. DonotshutdowntheDC1virtualmachine.
![Page 26: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/26.jpg)
Task3:InstallingandConfiguringtheSERVER1VirtualMachine
ToinstallandconfiguretheSERVER1virtualmachine,youcanfollowthesimplestepsasyouusedtoinstallandconfiguretheDC1virtualmachine.
1. DuringtheinstallingSERVER1virtualmachine,makesurethatyouusethefollowingsettingsandoptions:
Virtualmachinename:SERVER1.
Operatingsystemversion:WindowsServer2016.
Memory:2048MB
Harddisksize:50GB
NetworkAdapter:Hostonly(clickCustomizeHardwarebeforeclickingtheFinishbutton.)
Password:Password@123
2. OnceyouinstalledtheSERVER1virtualmachinewiththeprecedingsettings,configurethefollowingTCP/IPsettings:
IPaddress:10.0.0.101
Subnetmask:255.0.0.0
Defaultgateway:10.0.0.1
PreferredDNSserver:10.0.0.100
3. OnceyouconfiguredtheprecedingTCP/IPsettings,opentheSystemPropertiesdialogboxandclickChange.
4. OntheComputerName/DomainChangesdialogbox,inthe
![Page 27: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/27.jpg)
Computernametextbox,typeSERVER1.
5. SelecttheDomainradiobutton,intheMemberofsection,andthentypemcsalab.local,andthenclickOK.
6. OntheWindowsSecuritydialogbox,providethecredentialsoftheDC1server,andrestarttheSERVER1virtualmachine.
7. SignintoSERVER1withtheAdministratoraccount.
8. ShutdowntheSERVER1virtualmachine.
![Page 28: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/28.jpg)
Task4:InstallingandConfiguringtheCLIENT1VirtualMachine
ToinstallandconfiguretheCLIENT1virtualmachine,youcanfollowthesimplestepsasyouusedtoinstallandconfiguretheDC1virtualmachine.
1. DuringtheinstallingCLIENT1virtualmachine,makesurethatyouusethefollowingsettingsandoptions:
Virtualmachinename:CLIENT1.
Operatingsystemversion:Windows8.1/10.
Memory:1024MB
Harddisksize:50GB
NetworkAdapter:Hostonly(clickCustomizeHardwarebeforeclickingtheFinishbutton.)
Password:Password@123
2. OnceyouinstalledtheCLIENT1virtualmachinewiththeprecedingsettings,configurethefollowingTCP/IPsettings:
IPaddress:10.0.0.102
Subnetmask:255.0.0.0
Defaultgateway:10.0.0.1
PreferredDNSserver:10.0.0.100
3. OnceyouconfiguredtheprecedingTCP/IPsettings,opentheSystemPropertiesdialogbox,andclickChange.
![Page 29: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/29.jpg)
4. OntheComputerName/DomainChangesdialogbox,intheComputernametextbox,typeCLIENT1.
5. SelecttheDomainradiobuttonintheMemberofsection,typemcsalab.local,andthenclickOK.
6. OntheWindowsSecuritydialogbox,providethecredentialsoftheDC1server,andrestarttheCLIENT1virtualmachine.
7. SignintoCLIENT1withtheAdministratoraccount.
8. ShutdowntheCLIENT1virtualmachine.
![Page 30: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/30.jpg)
Task5:InstallingandConfiguringtheROUTERVirtualMachine
ToinstallandconfiguretheROUTERvirtualmachine,youcanfollowthesimplestepsasyouusedtoinstallandconfiguretheDC1virtualmachine.
1. DuringthecreatingROUTERvirtualmachine,makesurethatyou
usethefollowingsettingsandoptions:Virtualmachinename:ROUTER.
Operatingsystemversion:WindowsServer2016.Memory:1024MBHarddisksize:50GB
NetworkAdapter:Hostonly2. OnceyoucreatedtheROUTERvirtualmachinewiththepreceding
settings,selecttheROUTERvirtualmachine,clickEditvirtualmachinesettings,asshowninthefollowingfigure.
3. OntheVirtualMachineSettingsdialogbox,clickAdd.4. OntheAddHardwareWizard,selectNetworkAdapter,andthen
clickNext.
![Page 31: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/31.jpg)
5. OntheNetworkAdapterTypepage,selectVMnet2underthe
Customoption.
6. ClickFinishandthenclickOKbutton.7. PowerontheROUTERvirtualmachine.8. FollowthesimplestepstoinstalltheROUTERvirtulmachine.Use
![Page 32: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/32.jpg)
[email protected]. OnceyouinstalledtheROUTERvirtualmachinewiththe
precedingsettings,configurethefollowingTCP/IPsettingsonthefirstnetworkadapter(connectedtotheHostonlynetwork):
IPaddress:10.0.0.1Subnetmask:255.0.0.0
PreferredDNSserver:10.0.0.100
10. ConfigurethefollowingTCP/IPsettingsonthesecondnetworkadapter(connectedtotheVMnet2network):
IPaddress:192.168.0.1Subnetmask:255.255.255.0
11. OnceyouconfiguredtheprecedingTCP/IPsettings,openthe
SystemPropertiesdialogbox,setthecomputernameasROUTER,andrestarttheROUTERvirtualmachine.
12. OpentheCommandPromptwindow,typeping10.0.0.100,andthenpressEnter.
13. Youshouldbeabletocommunicate(ping)withtheDC1server.
Note:IfyouareunabletocommunicatewiththeDC1server,youmayneedtointerchangetheTCP/IPsettingsofthenetworkadapters.
14. DonotshutdowntheROUTERvirtualmachine.
![Page 33: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/33.jpg)
Task6:CreatingandConfiguringtheSERVER2VirtualMachine
ToinstallandconfiguretheSERVER2virtualmachine,youcanfollowthesimplestepsasyouusedtoinstallandconfiguretheDC1virtualmachine.
1. DuringtheinstallingSERVER2virtualmachine,makesurethatyouusethefollowingsettingsandoptions:
Virtualmachinename:SERVER2.
Operatingsystemversion:WindowsServer2016.
Memory:1024MB
Harddisksize:50GB
NetworkAdapter:VMnet2
Password:Password@123
2. OnceyouinstalledtheSERVER2virtualmachinewiththeprecedingsettings,configurethefollowingTCP/IPsettings:
IPaddress:192.168.0.2
Subnetmask:255.255.255.0
Defaultgateway:192.168.0.1
PreferredDNSserver:10.0.0.100
3. OnceyouconfiguredtheprecedingTCP/IPsettings,opentheSystemPropertiesdialogbox,setthecomputernameasSERVER2,andrestarttheSERVER2virtualmachine.
4. SignintoSERVER2withtheAdministratoraccount.
![Page 34: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/34.jpg)
5. ShutdowntheSERVER2virtualmachine.
1. ShutdowntheDC1virtualmachine.
![Page 35: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/35.jpg)
Task7:CreatingSnapshotsofVirtualMachinesOnceyouinstalledandconfiguredallthevirtualmachines,youneedtocreatethesnapshots/checkpointsforeachvirtualmachine.Snapshotwillhelpyoutorevertavirtualmachinetoitspreviouslyusedstate(atthepointwhenyouhad
createdit).Tocreateasnapshot,youneedtoperformthefollowingtasks:1. Makesurethattheallvirtualmachinesareturnedoff.2. Selectandright-clickanyvirtualmachine,selectSnapshot,and
thenselectTakesnapshot.Afterfewseconds,thesnapshotwillbecreated.
3. Usingtheprecedingmethod,createsnapshotsofallthevirtualmachines.
![Page 36: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/36.jpg)
Task8:WorkingwithWindowsServer2016DesktopExperience
GUIinterfaceofWindowsServer2016isalmosthassimilarfunctionsasusedinwindowsServer2012R2.However,therearesomenewfeaturehavebeenaddedtomaketheuserexperiencemoreinteresting.SomeofthebasicGUIfeatures
are:StartbuttonTaskManagerTaskView
Startbutton1. SignintoDC1andclicktheStartbutton.Itwillshowyouthe
variousoptions,suchasServerManager,Settings,PowerShell,andCalculatorthatcanbeaccesseddirectly.
2. Ifyouright-clicktheStartbutton,itwillshowyoufewmore
options,asshowninthefollowingfigure.
![Page 37: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/37.jpg)
TaskManager
TheTaskManagerinWindowsServer2016ismuchsimilartotheTaskManagerthathasbeenusedinWindowsServer2012R2.
![Page 38: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/38.jpg)
TaskView
TaskViewallowsyoutoviewandswitchbetweendifferentactivewindows.ThisfeaturewasnotavailableinWindowsServer2012R2.
![Page 39: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/39.jpg)
![Page 40: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/40.jpg)
Task9:What’sNewinWindowsServer2016?InWindowsServer2016,therearemanynewrolesandfeatureshavebeen
added.Someofthemajornewrolesandfeaturesare:
HostGuardianServiceMultipointServices
WindowsServerEssentialsExperienceSetupandBootEventCollections
SMBBandwidthLimitWindowsBiometricFrameworkBitLockerNetworkUnlock
HostGuardianServiceTheHostGuardianService(HGS)isaserverroleintroducedinWindowsServer2016.ItprovidestheAttestationandKeyProtectionservicesthatallowGuardedHoststorunshieldedvirtualmachines.TheAttestationservicevalidatesguardedhostidentityandconfiguration.TheKeyProtectionserviceallowstransportkeys
toenableguardedhoststounlockandrunshieldedvirtualmachines.
MultipointServicesItallowsmultipleuserstosimultaneouslyshareonecomputerandeachuserhas
theirownindependentandfamiliarWindowsexperience.
WindowsServerEssentialsExperienceThisisaroleservicethatsetsuptheITinfrastructureandofferspowerful
functions,suchas“PCbackups”thathelpsorganizations’toprotectdata,and“RemoteWebAccess”thathelpsaccessbusinessinformationfromanywhere,
virtually.Italsohelpsyoutosimplyandrapidlyconnecttocloud-basedapplicationsandservicestoextendthefunctionalityoftheservers.
SetupandBootEventCollectionsItisafeaturethatenablesthecollectionandloggingofsetupandbootevents
fromothercomputersonthenetwork.
SMBBandwidthLimitThisfeatureprovidesamechanismtotrackSMBtrafficpercategoryandallows
![Page 41: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/41.jpg)
youtolimittheamountoftrafficallowedforagivencategory.ItiscommonlyusedtolimitthebandwidthusedbylivemigrationoverSMB.
WindowsBiometricFrameworkThisfeatureallowsfingerprintdevicestobeusedtoidentifyandverifyidentities
andtosignintoWindows.
BitLockerNetworkUnlockThisfeatureenablesanetwork-basedkeyprotectortobeusedtoautomatically
unlockBitLocker-protectedoperatingsystemdrivesindomain-joinedcomputers,whenthecomputerisrestarted.
![Page 42: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/42.jpg)
Exercise1:InstallingandConfiguringWindowsServer2012R2CoreMachine
Inthisexercise,youwillinstallandconfigureaWindowsServer2012R2coremachine.TheinstallationprocessfortheservercoreoptionandfullGUIoptionisalmostidentical.However,servercoreoptionrequireslesshardwareresourcesanditismoresecurethanthefullGUIoption.Inthisexercise,youwillusethe
followingvirtualmachines:DC1
CORE1
ToinstallandconfiguretheWindowsServer2012R2coremachine,youneedtoperformthefollowingtasks:
Task1:InstallingWindowsServer2012R2CoreMachine.
1. Createavirtualmachinewiththefollowingsettings:2. Duringthecreatingthevirtualmachine,makesurethatyouusethe
followingsettingsandoptions:Virtualmachinename:CORE1.
Operatingsystemversion:WindowsServer2016.Memory:512MB
Harddisksize:20GBNetworkAdapter:HostonlyPassword:Password@123
3. Oncethevirtualmachineiscreated,powerontheCORE1virtual
machine.4. Aftersometime,theWindowsSetupscreenwilldisplay.5. ClickNextandthenclickInstallnow.6. IftheActivateWindowsscreenisdisplayed,clickIdon’thavea
productkeylink.
![Page 43: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/43.jpg)
7. OntheSelecttheoperatingsystemyouwanttoinstallpage,
selectWindowsServer2016TechnicalPreview4,andthenclickNext.
8. OntheLicensetermspage,selecttheIacceptthelicenseterms
checkbox,andthenclickNext.9. OntheWhichtypeofinstallationdoyouwant?page,click
Custom:InstallWindowsonly(advanced),asshowninthefollowingfigure.
![Page 44: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/44.jpg)
10. OntheWheredoyouwanttoinstallWindows?page,clickNext.11. Theinstallationprocesswillstart.12. Aftersometime,thesigninscreenwilldisplay,andyouwillbe
askedtochangetheAdministratorpassword.
13. SettheAdministratorpasswordasPassword@123.
Task2:ConfiguringtheWindowsServer2016CoreMachine.
ToconfiguretheWindowsServer2016coremachine,youneedtoperformthefollowingsteps:
1. SignintoCORE1withtheAdministratoraccount.2. OntheCommandPromptwindow,typesconfig.cmd,andthen
pressEnter.TheServerConfigurationoptionswilldisplay,asshowninthefollowingfigure.
![Page 45: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/45.jpg)
3. TochangethesystemDateandTime,type9,andthenpress
Enter.4. OntheDateandTimedialogbox,asshowninthefollowing
figure,clickChangetimezone.
5. Selectthedesiredtimezone,andthenclickOK.6. IntheDateandTimedialogbox,clickChangeDateandTime,
andverifythedateandtime,andthenclickOK.7. OntheCommandPromptwindow,type8,andthenpressEnter
toconfigureNetworkSettings.8. Typetheindexnumber(inourexampleitis10)ofthenetwork
adapter,asshowninthefollowingfigure,andthenpressEnter.
![Page 46: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/46.jpg)
9. OntheNetworkAdapterSettingspage,type1,tosettheNetwork
AdapterAddress,asshowninthefollowingfigure,andthenpressEnter.
10. TosetstaticIPaddress,typeS,asshowninthefollowingfigure,
andthenpressEnter.
![Page 47: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/47.jpg)
11. AttheEnterstaticIPaddress:prompt,type10.0.0.103,andthenpressEnter.
12. AttheEntersubnetmask:prompt,acceptthedefaultvalue,andthenpressEnter.
13. AttheEnterdefaultgateway:prompt,type10.0.0.1,andthenpressEnter,asshowninthefollowingfigure.
14. OntheNetworkAdapterSettingsoption,type2,toconfigurethe
DNSserveraddress,andthenpressEnter.15. AttheEnternewpreferredDNSserverprompt,type10.0.0.100,
andthenpressEnter.16. OntheNetworkSettingsmessagebox,asshowninthefollowing
figure,clickOK.
17. PressEntertonotconfigureanalternateDNSserveraddress.18. AttheSelectoption:prompt,type4,andthenpressEntertoreturn
tothemainmenu.
![Page 48: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/48.jpg)
19. AttheEnternumbertoselectanoption:prompt,type15,andthenpressEntertoexitthesconfig.cmdutility.
20. OntheCommandPromptwindow,typepingdc1.mcsalab.localtoverifytheconnectivitybetweenDC1andCORE1.
Task3:AddingCORE1toDomain
1. OntheCommandPromptwindow,typesconfig.cmd,andthenpressEnter.
2. AttheEnternumbertoselectanoption:prompt,type2,andthenpressEnter.
3. AttheEnteranewcomputername:prompt,typeCORE1,andthenpressEnter.
4. OntheRestartdialogbox,clickYes.
5. ThesystemwillrestartandaftersometimetheSigninscreenwill
display.6. SignintoCORE1withtheAdministratoraccount.7. OntheCommandPromptwindow,typehostname,andthenpress
Entertoverifythecomputer’sname.8. OntheCommandPromptwindow,typesconfig.cmd,andthen
pressEnter.9. Type1tochangetheDomain/Workgroupsettings,andthenpress
Enter.10. TypeDtojoinadomain,andthenpressEnter.11. AttheNameofdomaintojoinprompt,typemcsalab.local,and
thenpressEnter.12. AttheSpecifyanauthorizeddomain\userprompt,type
Administrator,andthenpressEnter.
![Page 49: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/49.jpg)
13. AttheTypethepasswordassociatedwiththedomainuserprompt,typePassword@123,andthenpressEnter.
14. AttheChangeComputerNamemessagebox,asshowninthefollowingfigure,clickNo.
15. OntheRestartdialogbox,clickYes.Thesystemwillrestart.After
sometime,thesigninscreenwilldisplay.16. SignintoCORE1withtheMCSALAB\Administratoraccount.
Results:Aftercompletingthisexercise,youwillhaveconfiguredaWindows
Server2016servercoremachine.
DonotturnofforshutdowntheDC1and/orCORE1virtualmachine(s)asthesevirtualmachineswillberequiredtoperformthenextexercise.
![Page 50: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/50.jpg)
Exercise2:ManagingServersRemotelyInthisexercise,youwillmanagetheservercoremachinefromtheremote
location.Inaddition,youwillalsodeployrolesandfeaturesontheservercoremachine.Further,youwillmanagetheservicesontheservercoremachine.
Beforestartingtoperformthisexercise,makesurethattheDC1andCORE1virtualmachinesarerunning,andyouhavenotrevertedthemintheprevious
exercise.
Task1:CreatingandManagingtheServerGroup1. SignintoDC1withtheMCSALAB\Administratoraccount.2. OntheServerManagerconsole,makesurethatDashboardis
selectedintheleftpane,andthenclickCreateaservergroup.3. OntheCreateServerGroupdialogbox,clicktheActive
Directorytab,andthenclickFindNow.4. IntheServergroupnametextbox,selecttheCORE1and
SERVER1servers,andthenaddCORE1andSERVER1totheservergroup.
5. IntheServergroupnametextbox,typeServerGroup1,asshowninthefollowingfigure.
![Page 51: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/51.jpg)
6. ClickOKtoclosetheCreateServerGroupdialogbox.7. OntheServerManagerconsole,selectServerGroup1intheleft
pane.VerifythatthebothserversarelistedintheServerspane,asshowninthefollowingfigure.
Task2:DeployingRolesandFeaturesonCORE1
Machine1. SignintoDC1withtheMCSALAB\Administratoraccount.2. OntheServerManagerconsole,clickServerGroup1intheleft
pane.3. Scrolltothetopofthepane,selectandright-clickCORE1,and
thenselectAddRolesandFeatures,asshowninthefollowingfigure.
![Page 52: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/52.jpg)
4. OntheAddRolesandFeaturesWizard,clickNext.5. OntheSelectinstallationtypepage,clickNext.6. OntheSelectdestinationserverpage,makesurethat
CORE1.mcsalab.localisselected,asshowninthefollowingfigure,andthenclickNext.
7. OntheSelectserverrolespage,selecttheDHCPServercheck
box,asshowninthefollowingfigure,andthenclickNext.
8. OntheAddRolesandFeaturesdialogbox,clickNext.9. ClickNext,untiltheConfirminstallselectionspageisdisplayed.
![Page 53: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/53.jpg)
10. OntheConfirminstallationselectionspage,selecttheRestartthedestinationserverautomaticallyifrequiredcheckbox,as
showninthefollowingfigure,andthenclickInstall.
11. ClickClosetoclosetheAddRolesandFeaturesWizard,once
theinstallationiscompleted.
Task3:ManagingServicesontheCORE1Machine1. SwitchtoasOtheruserandsignintoCORE1withthe
MCSALAB\Administratoraccount.2. OntheCommandPromptwindow,typethefollowingcommand,
andthenpressEnter,asshowninthefollowingfigure.netsh.exefirewallsetserviceremoteadminenableALL
3. SwitchbackandsignintoDC1withtheMCSALAB\Administrator
account.
![Page 54: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/54.jpg)
4. OntheServerManagerconsole,selectServerGroup1.5. Selectandright-clickCORE1,andthenclickComputer
Management.6. OntheComputerManagementconsole,expandtheServicesand
Applicationsnode,andthenselectServices.7. Selectandright-clicktheDHCPServerservice,andthenclick
Properties,asshowninthefollowingfigure.
8. OnthePropertiesdialogbox,ontheGeneraltab,makesurethat
theStartuptypeissettoAutomatic.9. SelecttheRecoverytab,configurethefollowingsettings,asshown
inthefollowingfigure.Firstfailure:RestarttheServiceSecondfailure:RestarttheService
Subsequentfailures:RestarttheComputerResetfailcountafter:1daysRestartserviceafter:1minute
![Page 55: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/55.jpg)
10. OnthePropertiesdialogbox,clickRestartComputerOptions.11. OntheRestartComputerOptionsdialogbox,intheRestart
computerafterbox,type2,andthenclickOK.12. ClickOKtoclosethePropertiesdialogbox.13. ClosetheComputerManagementconsole.
Results:Aftercompletingthisexercise,youhavecreatedaservergroup,
deployedrolesandfeatures,andmanagedaserviceremotely.
ShutdownandreverttheDC1andCORE1virtualmachinestoprepareforthenextexercise.
![Page 56: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/56.jpg)
Exercise3:UsingWindowsPowerShelltoManageServers
Inthisexercise,youwillusetheWindowsPowerShelltomanagetheWindowServer2016.WindowsPowerShellisacommand-lineinterfacethatissimilartocommandprompt.ItisdesignedtoexecutethescriptssimilartoUNIX/Linux
operatingsystems.
StarttheDC1virtualmachinetoperformthisexercise.
Task1:UsingtheWindowsPowerShelltoConnectRemotelytoServersandViewInformation1. SignintoDC1withtheMCSALAB\Administratoraccount.2. OntheServerManagerconsole,selectServerGroup1.3. Selectandright-clickCORE1,andthenselectWindows
PowerShell.4. AttheWindowsPowerShellprompt,typecd\andthenpress
Enter.5. TypeImport-ModuleServerManager,andthenpressEnter.6. TypeGet-WindowsFeatureandthenpressEntertoviewthe
installedrolesandfeaturesonCORE1,asshowninthefollowingfigure.
7. Typethefollowingcommandtoviewtherunningserviceson
CORE1andthenpressEnter,asshowninthefollowingfigure.Get-service|where-object{$_.status-eq“Running”}
![Page 57: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/57.jpg)
8. TypethefollowingcommandandthenpressEntertoviewalistof
processesonCORE1,asshowninthefollowingfigure.
Get-Process
9. TypethefollowingcommandtoviewtheIPaddressesoftheCORE1machine,andthenpressEnter,asshowninthefollowing
figure.Get-NetIPAddress|Format-table
10. Typethefollowingcommandtoviewthemostrecent5security
logs,andthenpressEnter,asshowninthefollowingfigure.Get-EventLogSecurity-Newest5
![Page 58: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/58.jpg)
11. CloseWindowsPowerShell.
Task2:UsingWindowsPowerShelltoManageRoles
andFeaturesRemotely1. OnDC1,onthetaskbar,clicktheWindowsPowerShell icon.2. AttheWindowsPowerShellprompt,typethefollowingcommand,
andthenpressEnter.3. Import-ModuleServerManager4. ToverifythattheWINSServerfeatureisnotinstalledonCORE1,
typethefollowingcommand,andthenpressEnter,asshowninthefollowingfigure.
Get-WindowsFeature-ComputerNameCORE1
5. ToinstalltheWINSServerfeatureonCORE1,typethefollowing
command,andthenpressEnter,asshowninthefollowingfigure.6. Install-WindowsFeatureWINS-ComputerNameCORE1
![Page 59: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/59.jpg)
7. VerifythattheExitCodestatusdisplaysasthesuccesstext.
Results:Aftercompletingthisexercise,youhavemanagedtheserversusing
WindowsPowerShell.
ShutdownandreverttheDC1andCORE1virtualmachines.
![Page 60: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/60.jpg)
Exercise04:InstallingandConfiguringDomainControllers
ThesystemthatholdstheActiveDirectoryDomainServicesroleactsasadomaincontroller.Adomaincontrollerisaserverthatisusedtomanageand
controltheclientsonanetwork.
Inthisexercise,youwilllearnhowtoconfigureadomaincontrolleronWindowsServe2016.Inaddition,youwillalsolearnhowtoconfigureaserver
asaGlobalCatalogserver.
StarttheDC1andSERVER1virtualmachinestoperformthisexercise.
Task1:AddingtheADDSRoleonaMemberServer1. SignintoDC1withtheMCSA\Administratoraccount.2. OntheServerManagerconsole,intheleftpane,selectandright-
clickAllServers,andthenselectAddServers.3. OntheAddServersdialogbox,intheName(CN)textbox,type
SERVER1,andthenclickFindNow.4. Inthenamelistarea,selectSERVER1,andthenclickthearrowto
addtheservertotheSelectedcolumn,asshowninthefollowingfigure.
![Page 61: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/61.jpg)
5. ClickOKtoclosetheAddServersdialogbox.6. OntheServerManagerconsole,intheServerspane,waituntilthe
ManageabilitystatusdisplaysasOnline–Performancecountersnotstarted,asshowninthefollowingfigure.
7. Selectandright-clickSERVER1,andthenselectAddRolesand
Features.8. OntheAddRolesandFeaturesWizard,clickNext.9. OntheSelectinstallationtypepage,clickNext.10. OntheSelectdestinationserverpage,makesurethattheSelecta
serverfromtheserverpoolradiobuttonisselected.11. IntheServerPoolarea,makesurethatSERVER1.mcsalab.local
isselected,asshowninthefollowingfigure,andthenclickNext.
![Page 62: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/62.jpg)
12. OntheSelectserverrolespage,selecttheActiveDirectoryDomainServicescheckbox.
13. OntheAddRolesandFeaturesdialogbox,clickAddFeatures,andthenclickNext.
14. TheSelectserverrolespageisreturned,makesurethattheActiveDirectoryDomainServicescheckboxisselected,asshowninthe
followingfigure,andthenclickNext.
15. ClickNext,untiltheConfirminstallationselectionspageis
displayed.16. OntheConfirminstallationselectionspage,selecttheRestart
thedestinationserverautomaticallyifrequiredcheckbox,andthenclickInstall.
17. Theinstallationprocesswillstart.ClickClosetoclosetheAddRolesandFeaturesWizard,oncetheinstallationiscompleted.
Task2:ConfiguringSERVER1ServerasaDomain
Controller1. OnDC1,ontheServerManagerconsole,clicktheNotifications
button.2. OnthePost-deploymentConfigurationbox,clickthePromote
thisservertoadomaincontrollerlink,asshowninthefollowingfigure.
![Page 63: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/63.jpg)
3. OntheDeploymentConfigurationpage,oftheActiveDirectory
DomainServicesConfigurationWizard,makesurethattheAddadomaincontrollertoanexistingdomainradiobuttonis
selected.4. IntheDomaintextbox,makesurethatthemcsalab.localtextis
written,asshowninthefollowingfigure.
5. IntheSupplythecredentialstoperformthisoperationsection,
clickChange.6. OntheWindowsSecuritydialogbox,intheUsernametextbox,
typeMCSALAB\Administrator,inthePasswordbox,typePassword@123,asshowninthefollowingfigure.
![Page 64: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/64.jpg)
7. ClickOKandthenclickNext.8. OntheDomainControllerOptionspage,makesurethatDomain
NameSystem(DNS)servercheckboxisselected,andthencleartheGlobalCatalog(GC)checkbox.
9. IntheTypetheDirectoryServicesRestoreMode(DSRM)passwordsection,typePassword@123,inthePasswordandConfirmpasswordtextboxes,asshowninthefollowingfigure,
andthenclickNext.
10. ClickNext,untilthePrerequisitesCheckpageisdisplayed.11. OnthePrerequisitesCheckpage,reviewthewarnings,andthen
clickInstall.
![Page 65: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/65.jpg)
12. Theinstallationprocesswillstart,clickClose,oncetheinstallationiscompleted.
13. Theserverwillrestart.Waitforservertorestart.
Task3:ConfiguringSERVER1asaGlobalCatalogServer
1. SwitchandsignintoSERVER1withtheMCSALAB\Administratoraccount
2. OntheServerManagerconsole,clickTools,andthenclickActiveDirectorySitesandServices.
3. OntheActiveDirectorySitesandServicesconsole,expandSites\Default-First-Site-Name\Servers,andthenclickSERVER1,
asshowninthefollowingfigure.
4. Intheleftpane,selectandright-clickNTDSSettings,andthen
selectProperties.5. OntheNTDSSettingsPropertiesdialogbox,selecttheGlobal
Catalogcheckbox,asshowninthefollowingfigure,andthenclickOK.
![Page 66: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/66.jpg)
6. ClosetheActiveDirectorySitesandServicesconsole.
Results:Aftercompletingthisexercise,youwillhaveexploredtheServerManagerconsoleandpromotedamemberservertobeadomaincontroller.ShutdownandreverttheDC1andSERVER1virtualmachinestopreparefor
thenextexercise.
![Page 67: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/67.jpg)
Exercise5:InstallingaDomainControllerbyUsingIFM
Inthisexercise,youwilllearnhowtoconfigureadomaincontrollerusingtheIFMdatafile.TheInstallFromMedia(IFM)isafeaturethatallowsyouto
configureaserverasadomaincontroller.Thisfeaturehelpsyoutoreducethenetworkbandwidthconsumptionusedduringtheadditionaldomaincontrollerconfiguration.IFMallowsyoutoexporttheActiveDirectorydatabasefile(NTDS)toanexternalmediawhichcanbeusedtoconfigureanadditional
domaincontroller.
StarttheDC1andSERVER1virtualmachinestoperformthisexercise.
Task1:GeneratingaIFMDataFile1. SignintoDC1withtheMCSA\Administratoraccount.2. OpentheRundialogbox,intheOpentextbox,typecmd,andthen
pressEnter.3. OntheCommandPromptwindow,typethefollowingcommands,
andthenpressEnteraftereachone,asshowninthefollowingfigure.
NtdsutilActivateinstancentdsIFMCreatesysvolfullC:\IFM
Task2:AddingtheADDSRoletotheMemberServer
1. SwitchandsignintoSERVER1withthe
![Page 68: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/68.jpg)
MCSALAB\Administratoraccount.2. OpentheCommandPromptwindow,typethefollowing
command,andthenpressEnter,asshowninthefollowingfigure.NetuseZ:\\DC1\c$\IFM
3. OpentheServerManagerconsole,ifrequired.4. Intheleftpane,selectLocalServer.5. Inthetoolbar,clickManage,andthenclickAddRolesand
Features,asshowninthefollowingfigure.
6. OntheBeforeyoubeginpageoftheAddRolesandFeatures
Wizard,clickNext.7. OntheSelectinstallationtypepage,makesurethattheRole-
basedorfeature-basedinstallationradiobuttonisselected,andthenclickNext.
8. OntheSelectdestinationserverpage,makesurethattheSERVER1serverisselected,andthenclickNext.
9. OntheSelectserverrolespage,selecttheActiveDirectory
![Page 69: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/69.jpg)
DomainServicescheckbox.10. OntheAddRolesandFeaturesWizarddialogbox,clickAdd
Features,andthenclickNext.11. OntheSelectFeaturespage,clickNext.12. OntheActiveDirectoryDomainServicespage,clickNext.13. OntheConfirminstallationselectionspage,selecttheRestart
thedestinationserverautomaticallyifrequiredcheckbox.14. OntheAddRolesandFeaturesWizardmessagebox,asshown
inthefollowingfigure,readthemessage,andthenclickYes.
15. OntheConfirminstallationselectionspage,clickInstall.16. Theinstallationprocesswillstart.ClickClose,oncetheinstallation
iscompleted.
Note:IfyouseeawarningregardingtheDNSserverdelegation,clickOK.
Task3:ConfiguringSERVER1asaNewDomainControllerUsingtheIFMDataFile
1. OnSERVER1,opentheCommandPromptwindow,ifrequired.2. OntheCommandPromptwindow,typethefollowingcommands,
andthenpressEnter,asshowninthefollowingfigure.RobocopyZ:C:\IFMcopyalls
![Page 70: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/70.jpg)
3. ClosetheCommandPromptwindow,oncethecopyingprocessis
completed.4. OntheServerManagerconsole,clicktheNotificationsbutton.5. InthePost-deploymentConfigurationbox,clickthePromote
thisservertoadomaincontrollerlink.6. OntheDeploymentConfigurationpage,makesurethattheAdda
domaincontrollertoanexistingdomainradiobuttonisselected.7. Makesurethatthemcsalab.localtextiswrittenintheDomaintext
box,asshowninthefollowingfigure.
8. IntheSupplythecredentialstoperformthisoperationsection,
clickChange.
Note:IfyouarealreadyloggedinasMCSA\Administratoraccount,youdon’t
![Page 71: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/71.jpg)
needtochangethecredentialsonthispage.Ifso,movedirectlytotheDomainControllerOptionspage.
9. OntheWindowsSecuritydialogbox,intheUsernametextbox,
typeMCSALAB\Administrator,inthePasswordtextbox,typePassword@123.
10. ClickOK,andthenclickNext.11. OntheDomainControllerOptionspage,makesurethatthe
DomainNameSystem(DNS)serverandGlobalCatalog(GC)checkboxesareselected.
12. UndertheDSRMpasswordsection,typePassword@123inthe
PasswordandConfirmpasswordtextboxesandthenclickNext.13. OntheDNSOptionspage,clickNext.14. OntheAdditionalOptionspage,selecttheInstallfrommedia
checkbox.15. InthePathtextbox,typeC:\IFM,asshowninthefollowing
figure.
![Page 72: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/72.jpg)
16. ClickVerify.Oncethepathhasbeenverified,clickNext.17. OnthePathspage,clickNext.18. OntheReviewOptionspage,clickNext.19. OnthePrerequisitesCheckpage,clickInstall.Theinstallation
processwillstartandtheserverwillrestart,oncetheconfigurationiscompleted.Waitfortheservertorestart.
Results:Aftercompletingthisexercise,youwillhaveinstalledanadditional
domaincontrollerforthebranchofficebyusingIFM.
ShutdownandreverttheDC1andSERVER1virtualmachinestoprepareforthenextexercise.
![Page 73: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/73.jpg)
Exercise6:ManagingOrganizationalUnitsandGroupsinADDS
ActiveDirectoryobjectsareusedtoaccessthevariousnetworkresourcesforthevariouspurposes.Onceyouconfiguredadomaincontroller,youneedtocreateandmanageActiveDirectoryobjects,suchasOUs,groups,andusers.Youcan
delegatetheadministrativepermissionstotheActiveDirectoryobjects.
Inthisexercise,youwilllearnhowtocreateActiveDirectoryobjects,howtodelegatethepermissions,andhowtoconfigurehomefolders.Inaddition,you
willalsolearnhowtoresetandrejointhecomputeraccounts.
StarttheDC1andCLIENT1virtualmachinestoperformthisexercise.
Task1:ManagingOrganizationalUnitsandGroups1. SignintoDC1withtheMCSALAB\Administratoraccount.2. OntheServerManagerconsole,clickTools,andthenclick
ActiveDirectoryUsersandComputers.3. OntheActiveDirectoryUsersandComputersconsole,selectand
right-clickmcsalab.local,andthenselectNew,andthenclickOrganizationalUnit,asshowninthefollowingfigure.
4. OntheNewObject–OrganizationalUnitdialogbox,inthe
![Page 74: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/74.jpg)
Nametextbox,typeTraining,asshowninthefollowingfigure,andthenclickOK.
5. Selectandright-clicktheTrainingOUintheleftpane,andthen
selectNew,andthenclickGroup.6. OntheNewObject–Groupdialogbox,intheGroupnametext
box,typeStudents,asshowninthefollowingfigure,andthenclickOK.
![Page 75: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/75.jpg)
7. Selectandright-clickmcsalab.local,intheleftpane,andthen
selectNew,andthenclickOrganizationalUnit.8. OntheNewObject–OrganizationalUnitdialogbox,inthe
Nametextbox,typeDevelopment,andthenclickOK.9. Selectandright-clicktheDevelopmentOU,andthenselectNew,
andthenclickGroup.10. OntheNewObject–Groupdialogbox,intheGroupnametext
box,typeTrainers,andthenclickOK.11. Selectandright-clicktheDevelopmentOU,andthenselectNew,
andthenclickGroup.12. OntheNewObject–Groupdialogbox,intheGroupnametext
box,typeManagers,andthenclickOK.13. Intherightpane,selectandright-clicktheTrainersgroup,and
thenselectMove,asshowninthefollowingfigure.
![Page 76: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/76.jpg)
14. OntheMovedialogbox,selecttheTrainingOU,asshowninthe
followingfigure,andthenclickOK.
15. Intheleftpane,selecttheTrainingOU.16. Intherightpane,selectandright-clickTrainers,andthenselect
Delete.17. OntheActiveDirectoryDomainServicesmessagebox,click
Yes.MakesurethattheTrainersgroupisdeleted.
Task2:DelegatingthePermissions1. MakesurethattheActiveDirectoryUsersandComputers
consoleisactiveonDC1.2. Intheleftpane,selectandright-clicktheTrainingOU,andthen
![Page 77: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/77.jpg)
selectDelegateControl,asshowninthefollowingfigure.
3. OnthewelcomepageoftheDelegationofControlWizard,and
clickNext.4. OntheUsersorGroupspage,clickAdd.5. OntheSelectUsers,Computers,orGroupsdialogbox,inthe
Entertheobjectnamestoselect(examples)textbox,typeStudents,asshowninthefollowingfigure,andthenclickOK.
6. OntheUsersorGroupspage,clickNext.7. OntheTaskstoDelegatepage,makesurethattheDelegatethe
followingcommontasksradiobuttonisselected.8. SelecttheCreate,delete,andmanageuseraccountscheckbox,
asshowninthefollowingfigure,andthenclickNext.
![Page 78: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/78.jpg)
9. OntheCompletingtheDelegationofControlWizardpage,click
Finish.10. Selectandright-clicktheTrainingOU,andthenselectNew,and
thenclickUser.11. OntheNewObject-Userdialogbox,typeMarsh,intheFirst
nameandUserlogonnametextboxes,asshowninthefollowingfigure,andthenclickNext.
![Page 79: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/79.jpg)
12. InthePasswordandConfirmpasswordtextboxes,type
[email protected]. CleartheUsermustchangepasswordatnextlogoncheckbox,
selectthePasswordneverexpirescheckbox,asshowninthefollowingfigure.
14. ClickNext,andthenclickFinish.15. MinimizetheActiveDirectoryUsersandComputersconsole.
Task3:ConfiguringHomeFoldersforUserAccounts
1. OnDC1,createafoldernamedMarshData,undertheC:\Users\Publicfolder,asshowninthefollowingfigure.
![Page 80: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/80.jpg)
2. Selectandright-clicktheMarshDatafolder,andthenselect
Properties.3. OntheMarshDataPropertiesdialogbox,selecttheSharingtab,
asshowninthefollowingfigure.
![Page 81: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/81.jpg)
4. ClickAdvancedSharing.5. OntheAdvancedSharingdialogbox,selecttheSharethisfolder
checkbox,asshowninthefollowingfigure.
![Page 82: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/82.jpg)
6. ClickPermissions.7. OnthePermissionsforMarshDatadialogbox,inthe
PermissionsforEveryonesection,selecttheFullControlcheckbox,asshowninthefollowingfigure.
![Page 83: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/83.jpg)
8. ClickApply,andthenclickOK.9. ClickOKtocloseAdvancedSharingdialogbox,andthenclick
Close.10. ClosetheWindowsExplorerwindow.11. SwitchtotheActiveDirectoryUsersandComputersconsole.12. Selectandright-clicktheMarshuser,andthenselectProperties.13. OntheMarshPropertiesdialogbox,selecttheProfiletab.14. UndertheHomefoldersection,selecttheConnectradiobutton.15. IntheTotextbox,type\\DC1\MarshData\Marsh,asshownin
thefollowingfigure,andthenclickApply.
![Page 84: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/84.jpg)
Note:BydefaultallthedomainusersaredeniedtosignintotheDomain
Controllerserver.Inthenextsteps,wearegoingtomakeMarshasthememberofPrintOperatorsgrouptosignintoDomainControllertotesttheexercise.Youwilllearnmoreabouttheuserrightsandpermissionsintheupcoming
exercises.
16. SelecttheMemberOftab,andthenclickAdd.17. OntheSelectGroupsdialogbox,intheEntertheobjectnames
toselect(example)textbox,typePrintOperators,asshowninthefollowingfigure.
![Page 85: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/85.jpg)
18. ClickCheckNames,andthenclickOK.19. OntheMemberOftab,andclickagainAdd.20. OntheSelectGroupsdialogbox,intheEntertheobjectnames
toselect(example)textbox,typeStudents.21. ClickCheckNames,andthenclickOK.
Note:YouhaveaddedtheMarshusertoStudentsgrouptotestthedelegated
permissions.
22. ClickOKtoclosetheMarshPropertiesdialogbox.23. ClosetheActiveDirectoryUsersandComputersconsole.
Task4:TestingandVerifyingtheHomeFoldersand
DelegatedPermissions1. OnDC1,opentheRundialogbox,typelogoffandthenclickOK
tosignoutfromtheMCSALAB\Administratoraccount,asshowninthefollowingfigure.
![Page 86: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/86.jpg)
2. SwitchtoOtheruserandSigninasMarshwiththepasswordasPassword@123,asshowninthefollowingfigure.
3. PresstheWindows+EkeystoopentheWindowsExplorer
window.4. VerifythatdriveZismappedto(\\DC1\MarshData),asshownin
thefollowingfigure.
5. Double-clickMarsh(\\DC1\MarshData)(Z:).
Note:Youshouldbeabletoaccessthisdrivewithoutanyerrors.Ifyoureceive
noerrors,youhavebeensuccessful.
6. ClosetheWindowsExplorerwindow.7. OpentheRundialogbox,typedsa.msc,intheOpentextbox,and
thenpressEnter.
![Page 87: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/87.jpg)
8. OntheUserAccountControldialogbox,intheUsernametextbox,typeMarsh.
9. InthePasswordtextbox,typePassword@123,asshowninthefollowingfigure,andthenclickYes.
10. OntheActiveDirectoryUsersandComputersconsole,expand
mcsalab.local.11. Selectandright-clickTraining,andthenclickNew,andthen
clickUser.12. OntheNewObject–Userdialogbox,intheFirstnameandUser
logonnametextboxes,typeTestUser2,andthenclickNext.13. InthePasswordandConfirmpasswordtextboxes,type
[email protected]. ClickNext,andthenclickFinish.15. MakesurethattheTestUser1accountiscreated,underthe
TrainingOU.16. Selectandright-clickDevelopment,andthenclickNew,andthen
clickUser.17. OntheNewObject–Userdialogbox,intheFirstnameandUser
logonnametextboxes,typeTestUser2,andthenclickNext.18. InthePasswordandConfirmpasswordtextboxes,type
Password@123,clickNext,andthenclickFinish.19. Makesurethatyougetthefollowingerrormessage.
![Page 88: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/88.jpg)
20. ClickOK,andthenclickCancel.21. ClosetheActiveDirectoryUsersandComputersconsole.22. SignoutfromtheMarshuser.
Task5:ResettingtheComputerAccounts1. SignintoDC1withtheMCSALAB\Marshaccount.2. OntheServerManagerconsole,clickTools,andthenclick
ActiveDirectoryUsersandComputers.3. OntheActiveDirectoryUsersandComputersconsole,expand
mcsalab.local.4. Intheleftpane,selectComputers.5. Intherightpane,selectandright-clickCLIENT1,andthenclick
ResetAccount,asshowninthefollowingfigure.
6. OntheActiveDirectoryDomainServicesmessagebox,clickYes,
andtheclickOK.
![Page 89: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/89.jpg)
Task6:ExaminingtheBehaviorwhenaUserLoginsonClient.
1. TrytoSignintoCLIENT1withtheMCSALAB\Marshaccount.2. AmessagedisplaysstatingthatThetrustrelationshipbetween
thisworkstationandtheprimarydomainfailed,asshowninthefollowingfigure.
Task7:RejoiningtheDomaintoReconnectthe
ComputerAccount1. SignintoCLIENTasCLIENT1\Administratorwiththepassword
[email protected]. OpentheSystemPropertiesdialogbox,clickNetworkID.3. OntheSelecttheoptionthatdescribesyournetworkpage,as
showninthefollowingfigure,clickNext.
![Page 90: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/90.jpg)
4. OntheIsyourcompanynetworkonadomain?page,clickNext.5. OntheYouwillneedthefollowinginformationpage,clickNext.6. OntheTypeyourusername,password,anddomainnamefor
yourdomainaccountpage,intheUsernametextbox,typeAdministrator.
7. InthePasswordtextbox,[email protected]. IntheDomainnametextbox,typeMCSALAB.LOCAL,as
showninthefollowingfigure,andthenclickNext.
![Page 91: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/91.jpg)
9. OntheUserAccountandDomainInformationdialogbox,clickYes.
10. OntheDoyouwanttoenableadomainuseraccountonthiscomputer?page,selecttheDonotaddadomainuseraccount
radiobutton,andthenclickNext.11. ClickFinish,andthenclickOK.12. OntheMicrosoftWindowsdialogbox,clickRestartNow.Wait
forsystemtorestart.13. SigninasMCSALAB\Marshwiththepasswordas
[email protected]. Makesurethatyouareabletosignin.
Results:Afterthisexercise,youhavesuccessfullycreatedandtested
OrganizationalUnits,Groups,Users,HomeFolders,andtheDelegationofControlWizard.Inaddition,youshouldalsohavesuccessfullyresetatrustrelationshipShutdownandreverttheDC1andCLIENT1virtualmachinesto
prepareforthenextexercise.
![Page 92: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/92.jpg)
Exercise7:UsingWindowsPowerShelltoCreateUserAccountsandGroups
Asdiscussedearlier,WindowPowerShellisacommand-lineinterfaceusedtomanageWindowsserversandclients.YoucanalsouseWindowsPowerShellto
managetheActiveDirectoryobjects.
Inthisexercise,youwilllearnhowtomanageActiveDirectoryobjectsusingWindowPowerShell.Inaddition,youwillalsolearnhowtoexportandimport
theActiveDirectoryobjectsusingWindowPowerShell.
StarttheDC1andCLIENT1virtualmachinestoperformthisexercise.
Task1:CreatingaUserAccountUsingWindowsPowerShell
1. SignintoDC1withtheMCSALAB\Administratoraccount.2. Onthetaskbar,clicktheWindowsPowerShellicon.3. AttheWindowsPowerShellprompt,typecd\andthenpressEnter.4. TocreateanOrganizationalUnitnamedBranchOffice,typethe
followingcommand,andthenpressEnter:New-ADOrganizationalUnitBranchOffice
5. TocreateausernamedPeterundertheBranchOfficeOU,typethefollowingcommand,andthenpressEnter:
New-ADUser-NamePeter-DisplayName"PeterMark"-Path"ou=BranchOffice,dc=mcsalab,dc=local"
6. TosetthepasswordforPeteruser,typethefollowingcommand,andthenpressEnter:
Set-ADAccountPasswordPeterWhenpromptedforthecurrentpassword,pressEnter.
Whenpromptedforthedesiredpassword,typePassword@123,andthenpressEnter.
Whenpromptedtorepeatthepassword,typePassword@123,andthenpressEnter.
7. ToenablethePeteruser,typethefollowingcommand,andthenpressEnter.
Enable-ADAccountPeter
![Page 93: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/93.jpg)
8. SwitchtotheCLIENT1virtualmachine.9. OnCLIENT1,signinasPeterwiththepasswordas
[email protected]. Verifythatsigninissuccessful,andthensignoutofCLIENT1.
Task2:CreatingGroupsUsingWindowsPowerShell
1. SwitchbacktoDC1.2. AttheWindowsPowerShellprompt,typethefollowingcommand
tocreateanewsecurity(global)groupnamedBranchUsers,andthenpressEnter.
New-ADGroupBranchUsers-Path"ou=BranchOffice,dc=mcsalab,dc=local"
3. AttheGroupScopeprompt:typeGlobalandthenpressEnter,asshowninthefollowingfigure.
4. ToaddthePeteruserasmemberoftheBranchUsersgroup,type
thefollowingcommand,andthenpressEnter.Add-ADGroupMemberBranchUsers-MembersPeter
5. ToviewthemembersoftheBranchUsersgroup,typethefollowingcommand,andthenpressEnter.Get-ADGroupMemberBranchUsers
Task3:ExportingUserAccountsUsingtheldifdeTool
1. AttheWindowsPowerShellprompt,typethefollowingcommand,andthenpressEnter,asshowninthefollowingfigure.
![Page 94: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/94.jpg)
ldifde-fMyUsers
2. AttheWindowsPowerShellprompt,typenotepadMyUsersandthenpressEnter.
3. ReviewtheMyUsersfileandclosetheNotepad.
Results:Aftercompletingthisexercise,youhavemanagedADDSobjectsusingWindowsPowerShell.
ShutdownandreverttheDC1andCLIENT1virtualmachinestoprepareforthe
nextexercise.
![Page 95: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/95.jpg)
Exercise8:InstallingandConfiguringtheDHCPServerRole
DynamicHostConfigurationProtocol(DHCP)isasservicethatisusedtoprovideTCP/IPsettings,suchasIPaddress,subnetmask,defaultgateway,andDNSservertotheclients,automatically.Inalargeenterprisenetwork,itis
difficulttomanageIPaddressesmanually.Hence,DHCPcanbeausefulfeaturetomanagetheIPaddressesinalargeenterprisenetwork.
Inthisexercise,youwilllearnhowtoinstalltheDHCPserverroleandhowtoconfiguretheDHCPscope.Inaddition,youwillalsolearnhowtousetheDHCP
reservationfeaturetoreserveaspecificIPaddressforaspecificclient.
StarttheDC1andCLIENT1virtualmachinestoperformthisexercise.
Task1:InstallingtheDHCPServerRole1. SignintoDC1withMCSALAB\Administratoraccount.2. OpentheServerManagerconsole,ifrequired.3. OntheServerManagerconsole,clicktheAddrolesandfeatures
link.4. OntheAddRolesandFeaturesWizard,clickNext.5. OntheSelectinstallationtypepage,makesurethattheRole-
basedorfeature-basedinstallationradiobuttonisselected,andthenclickNext.
6. OntheSelectdestinationserverpage,clickNext.7. OntheSelectserverrolespage,selecttheDHCPServercheck
box.8. OntheAddRolesandFeaturesWizarddialogbox,clickAdd
Features.9. TheSelectserverrolespageisreturned,asshowninthefollowing
figure,clickNext.
![Page 96: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/96.jpg)
10. Completetheinstallationprocess.
Task2:ConfiguringtheDHCPScope
1. OntheServerManagerconsole,clickTools,andthenclickDHCP.
2. OntheDHCPconsole,intheleftpane,expanddc1.mcsalab.local.3. Selectandright-clickdc1.mcsalab.local,andthenselect
Authorize.
![Page 97: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/97.jpg)
4. Selectandright-clickdc1.mcsalab.local,andthenclickRefresh.
NoticethattheiconsnexttoIPv4IPv6changescolorfromredtogreen,asshowninthefollowingfigure.
5. OntheDHCPconsole,selectandright-clickIPv4,andthenselect
NewScope.6. OnthewelcomepageoftheNewScopeWizard,clickNext.7. OntheScopeNamepage,intheNametextbox,type
DHCPScope1,asshowninthefollowingfigure,andthenclickNext.
![Page 98: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/98.jpg)
8. OntheIPAddressRangepage,providethefollowinginformation,
asshowninthefollowingfigure,andthenclickNext.StartIPaddress:10.0.0.225EndIPaddress:10.0.0.250
Length:8Subnetmask:255.0.0.0
![Page 99: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/99.jpg)
9. OntheAddExclusionsandDelaypage,excludethefollowingIPaddressrange,asshowninthefollowingfigure.
StartIPaddress:10.0.0.225EndIPaddress:10.0.0.230
10. ClickAdd,andthenclickNext.11. OntheLeaseDurationpage,reviewthedefaultleaseduration
limit,andthenclickNext.12. OntheConfigureDHCPOptionspage,makesurethattheYes,I
wanttoconfiguretheseoptionnowradiobuttonisselected,asshowninthefollowingfigure,andthenclickNext.
![Page 100: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/100.jpg)
13. OntheRouter(DefaultGateway)page,intheIPaddresstext
box,type10.0.0.0.1,asshowninthefollowingfigure.
14. ClickAdd,andthenclickNext.15. OntheDomainNameandDNSServerspage,makesurethat
10.0.0.100iswrittenundertheIPaddresscolumn,asshowninthefollowingfigure,andthenclickNext.
![Page 101: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/101.jpg)
16. OntheWINSServerspage,clickNext.17. OntheActivateScopepage,makesurethattheYes,Iwantto
activatethisscopenowradiobuttonisselected,asshowninthefollowingfigure,andthenclickNext.
18. OntheCompletingtheNewScopeWizardpage,clickFinish.19. Selectandright-clickIPv4,andthenselectRefresh.20. MakesurethattheIPv4nodeismarkedwiththegreencolor,as
![Page 102: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/102.jpg)
showninthefollowingfigure.
Task3:ConfiguringDHCPClient
1. OpentheNetworkConnectionswindow,selectandright-clicktheactivenetworkadapterandthenselectProperties.
2. OnthePropertiesdialogbox,scrolldown,selectInternetProtocolVersion4(TCP/IPv4),andthenclickProperties.
3. OntheInternetProtocolVersion4(TCP/IPv4)Propertiesdialogbox,selecttheObtainanIPaddressautomaticallyradiobutton,selecttheObtainDNSserveraddressautomaticallyradiobutton,
asshowninthefollowingfigure.
![Page 103: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/103.jpg)
4. ClickOK,andthenclickClose.5. OpentheRundialogbox,typecmd,andthenpressEnter.6. OntheCommandPromptwindow,typeipconfig/renew,as
showninthefollowingfigure,andthenpressEnter.
7. Typetheipconfig/allcommandandverifythatCLIENT1has
receivedTCP/IPsettings,suchasIPaddress,subnetmask,defaultgateway,andDNSserver’sIPaddress,asshowninthefollowing
figure.
Task4:ConfiguringDHCPReservation
1. OnCLIENT1,ontheCommandPromptwindow,typeipconfig/all,andthenpressEnter.
2. FindandwritedownthePhysicalAddressoftheCLIENT1networkadapter,inthiscaseitis00-15-5D-77-D6-0B,asshownin
thefollowingfigure.
![Page 104: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/104.jpg)
Note:Thephysicaladdressisaunique48bitaddress,whichisassignedby
IEEEandnetworkadapter’svendor.
3. Switchandsignin(ifrequired)toDC1withtheMCSALAB\Administratoraccount.
4. MakesurethattheDHCPconsoleisactive.Ifnot,opentheDHCPconsole.
5. OntheDHCPconsole,expanddc1.mcsalab.local,andthenclickIPv4.
6. Selectandright-clickReservations,andthenselectNewReservation,asshowninthefollowingfigure.
7. OntheNewReservationdialogbox,intheReservationNametext
![Page 105: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/105.jpg)
box,typeCLIENT1.8. IntheIPaddresstextbox,type10.0.0.240.9. IntheMACaddresstextbox,typethephysicaladdressofthe
CLIENT1machine(00-15-5D-77-D6-0B),asshowninthefollowingfigure.
Note:Replacethephysicaladdresstextwiththeactualphysicaladdressofyour
CLIENT1machine.
10. ClickAdd,andthenclickClose.11. SwitchbackandsignintoCLIENT1.12. OntheCommandPromptwindow,typeipconfig/release,and
thenpressEntertoreleasetheexistingIPaddress.13. OntheCommandPromptwindow,typeipconfig/renew,and
thenpressEntertoobtainanewIPaddress.14. OntheCommandPromptwindow,verifythatIPaddressof
CLIENT1isnow10.0.0.240,asshowninthefollowingfigure.
![Page 106: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/106.jpg)
15. ClosetheCommandPromptwindow.
Results:Aftercompletingthisexercise,youshouldhaveconfiguredDHCP
scope,DHCPoptions,andDHCPreservation.
ShutdownandreverttheDC1andCLIENT1virtualmachinestoprepareforthenextexercise.
![Page 107: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/107.jpg)
Exercise9:InstallingandConfiguringDNSDomainNameSystem(DNS)isaservicethatisusedtoperformthename
resolution.NameresolutionisaprocesstomapdomainnamesintoIPaddressesandviceversa.ThesystemscommunicatetoeachotherusingtheIPaddresses,howeveritisdifficulttoremembertheIPaddressesofeachclientinalargeenterprisenetwork.DNSserviceallowsyoutocommunicatewiththesystems
usingthedomainnames,whichiseasiertorememberthanIPaddresses.
Inthisexercise,youwilllearnhowtoinstallandconfiguretheDNSserverrole.Inaddition,youwillalsolearnhowconfigureDNSforwarderandhowto
manageDNScache.
StarttheDC1,SERVER1,andCLIENT1virtualmachinestoperformthisexercise.
Task1:ConfiguringSERVER1asaDomainControllerwithoutInstallingtheDNSServerRole
1. SignintoSERVER1withtheAdministratoraccount.2. OntheServerManagerconsole,clicktheAddrolesandfeatures
link.3. OntheBeforeyoubeginpageoftheAddRolesandFeatures
Wizard,clickNext.4. OntheSelectinstallationtypepage,clickNext.5. OntheSelectdestinationserverpage,makesurethat
SERVER1.mcsalab.localisselected,andthenclickNext.6. OntheSelectserverrolespage,selecttheActiveDirectory
DomainServicescheckbox.7. OntheAddRolesandFeaturesWizarddialogbox,clickAdd
Features,andthenclickNext.8. OntheSelectfeaturespage,clickNext.9. OntheActiveDirectoryDomainServicespage,clickNext.10. OntheConfirminstallationselectionspage,clickInstall.11. Theinstallationprocesswillstart.ClickClose,oncetheinstallation
succeeded.12. OntheServerManagerconsole,clicktheNotificationsicon,and
thenclickthePromotethisservertoadomaincontrollerlink,as
![Page 108: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/108.jpg)
showninthefollowingfigure.
13. OntheDeploymentConfigurationpageoftheActiveDirectory
DomainServicesConfigurationWizard,makesurethattheAddadomaincontrollertoanexistingdomainradiobuttonis
selected.14. UndertheSupplythecredentialstoperformthisoperation
section,clickChange.15. OntheWindowsSecuritydialogbox,intheUsernametextbox,
typeMCSALAB\Administrator.InthePasswordtextbox,typePassword@123.
16. TheDeploymentConfigurationpageisreturned,asshowninthefollowingfigure.Reviewtheselectedoptions,andthenclickNext.
![Page 109: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/109.jpg)
17. OntheDomainControllerOptionspage,cleartheDomainName
System(DNS)servercheckbox.18. UndertheDSRMpasswordsection,typePassword@123inthe
PasswordandConfirmpasswordtextboxes,asshowninthefollowingfigure,andthenclickNext.
19. ClickNext,untilthePrerequisitesCheckpageisdisplayed.20. OnthePrerequisitesCheckpage,clickInstall.21. Theinstallationprocesswillstartandtheserverwillrestart
automatically.AfterSERVER1restarts,signintoSERVER1withtheMCSALAB\Administratoraccount.
![Page 110: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/110.jpg)
Task2:CreatingandConfiguringtheMyzone.local
ZoneonDC11. SignintoDC1withtheMCSALAB\Administratoraccount.2. OntheServerManagerconsole,clickTools,andthenclickDNS.3. OntheDNSManagerconsole,expandDC1,selectandright-click
ForwardLookupZones,andthenselectNewZone,asshowninthefollowingfigure.
4. OnthewelcomepageoftheNewZoneWizard,clickNext.5. OntheZoneTypepage,makesurethatthePrimaryzoneradio
buttonisselected.6. CleartheStorethezoneinActiveDirectorycheckbox,asshown
inthefollowingfigure,andthenclickNext.
![Page 111: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/111.jpg)
7. OntheZoneNamepage,intheZonenametextbox,type
Myzone.local,asshowninthefollowingfigure,andthenclickNext.
8. OntheZoneFilepage,clickNext.9. OntheDynamicUpdatepage,makesurethattheDonotallow
dynamicupdatesradiobuttonisselected,asshowninthefollowingfigure,andthenclickNext.
![Page 112: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/112.jpg)
10. OntheCompletingtheNewZoneWizardpage,asshowninthe
followingfigure,reviewthezoneconfigurationoptions,andthenclickFinish.
11. OntheDNSManagerconsole,expandForwardLookupZones.12. Selectandright-clicktheMyzone.localzone,andthenselectNew
Host(AorAAAA),asshowninthefollowingfigure.
![Page 113: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/113.jpg)
13. OntheNewHostdialogbox,intheNametextbox,typewww.In
theIPaddresstextbox,type10.0.0.101,asshowninthefollowingfigure,andthenclickAddHost.
14. OntheDNSmessagebox,clickOK.15. OntheNewHostdialogbox,clickDone.16. LeavetheDNSManagerconsoleactive.
Task3:AddingtheDNSServerRoleonthe
![Page 114: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/114.jpg)
SERVER11. SwitchandSignintoSERVER1withthe
MCSALAB\Administratoraccount.2. OntheServerManagerconsole,clicktheAddrolesandfeatures
link.3. OntheBeforeyoubeginpageoftheAddRolesandFeatures
Wizard,clickNext.4. OntheSelectinstallationtypepage,clickNext.5. OntheSelectdestinationserverpage,makesurethat
SERVER1.mcsalab.localisselected,andthenclickNext.6. OntheSelectserverrolespage,selecttheDNSServercheckbox.7. OntheAddRolesandFeaturesWizarddialogbox,clickAdd
Features.8. TheSelectServerrolespageisreturned,asshowninthe
following,clickNext.
9. OntheSelectFeaturespage,clickNext.10. OntheDNSServerpage,clickNext.11. OntheConfirminstallationselectionspage,clickInstall.12. Theinstallationprocesswillstart.ClickClose,oncetheinstallation
succeeded.
Task4:VerifyingReplicationofthemcsalab.localZone
![Page 115: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/115.jpg)
1. OnSERVER1,ontheServerManagerconsole,clickTools,andthenclickDNS.
2. OntheDNSManagerconsole,expandSERVER1,andthenexpandForwardLookupZones.
3. Right-clickForwardLookupZoneandthenselectRefresh.4. Makesurethatthe_msdcs.mcsalab.localandmcsalab.localzones
aredisplayed.
Note:Ifthezonelistisempty,proceedtothenextstep,otherwiseclosetheDNS
Managerconsole.
5. OnSERVER1,switchbacktotheServerManagerconsole,clickTools,andthenclickActiveDirectorySitesandServices.
6. OntheActiveDirectorySitesandServicesconsole,expandSites,andthenclickDefault-First-Site-Name,andthenclickServers,
andthenclickDC1.7. SelectNTDSSettings,intherightpane,selectandright-clickthe
SERVER1replicationconnection,andselectReplicateNow,asshowninthefollowingfigure.
![Page 116: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/116.jpg)
Note:Ifyoureceiveanerrormessage,proceedtothenextstep,andthenretry
thisstepafter5minutes.
8. Intheleftpane,expandSERVER1,andthenselectNTDSSettings.
9. Intherightpane,selectandright-clicktheDC1replicationconnection,selectReplicateNow,andthenclickOK.
10. SwitchbacktotheDNSManagerconsole,selectandright-clickForwardLookupZones,andthenclickRefresh.
11. Makesurethatthe_msdcs.mcsalab.localandmcsalab.localzonesaredisplayed.
12. ClosetheDNSManagerconsole.
Task5:ConfiguringDNSForwarder1. SwitchandsignintoDC1.2. OpentheDNSManagerconsole.3. OntheDNSManagerconsole,selectandright-clickDC1,and
thenselectProperties,asshowninthefollowingfigure.
![Page 117: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/117.jpg)
4. OntheDC1Propertiesdialogbox,selecttheForwarderstab,as
showninthefollowingfigure.
5. OntheForwarderstab,clickEdit.6. OntheEditForwardersdialogbox,type10.0.0.101,asshownin
![Page 118: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/118.jpg)
thefollowingfigure,andthenclickOK.
7. OntheDC1dialogbox,clickOK.8. OntheDNSManagerconsole,selectandright-clickDC1,and
thenclickAllTasks,andthenclickRestart.9. SwitchandsignintoCLIENT1.10. OpentheCommandPromptwindow.11. OntheCommandPromptwindow,typeping
www.myzone.local,andthepressEnter.12. Makesurethatyouareabletoresolvethewww.myzone.local
FQDNsuccessfully,asshowninthefollowingfigure.
13. OntheCommandPromptwindow,typenslookup,andthenpress
Enter.
![Page 119: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/119.jpg)
14. Atthenslookupprompt,typewww.myzone.local,andthenpressEnter.
15. MakesurethatyoureceiveanIPaddressforthishost,asshowninthefollowingfigure.
16. LeavetheCommandPromptwindowactive.
Task6:ManagingtheDNSCache
1. OnCLIENT1,ontheCommandPromptwindow,typethefollowingcommandandthenpressEnter,asshowninthe
followingfigure.
ipconfig/displaydns
2. ExaminetheoutputandclosetheCommandPromptwindow.3. PresstheWindowskey,andthentypecmd.4. Selectandright-clickCommandPrompt,andthenselectRunas
administratorasshowninthefollowingfigure.
![Page 120: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/120.jpg)
5. OntheUserAccountControldialogbox,clickYes.6. OntheCommandPromptwindow,typethefollowingcommand
tocleartheDNScache,andthenpressEnter.ipconfig/flushdns
7. OntheCommandPromptwindow,typethefollowingcommandandverifythattheDNScachehasbeencleared,andthenpress
Enter.ipconfig/displaydns
8. ClosetheCommandPromptwindow.
Results:Aftercompletingthisexercise,youshouldhavedeployedDNSserver,DNSzone,DNSforwarder,andDNScache.
ShutdownandreverttheDC1,SERVER1,andCLIENT1virtualmachinesto
prepareforthenextexercise.
![Page 121: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/121.jpg)
10:ImplementingLANRoutingLANroutingisaWindowfeaturethatenablesyoutocommunicatebetween
differentsubnets.Tocommunicatebetweendifferentsubnets,typicallyadevicecalledrouterisused,butyoucanalsouseaWindowsserver,suchasWindowsServer2016servertoperformtheLANrouting.However,WindowsServer2016doesnotsupportallthefeaturessupportedbyarouter.Itistypically
helpfulforasmallnetworkwiththelimitednumberofsubnets.
Inthisexercise,youwilllearnhowtouseaWindowsServer2016serverasasoftwareroutertoenableLANroutingbetweentwoormoresubnets.
StarttheDC1,ROUTER,andSERVER2virtualmachinestoperformthis
exercise.
Task1:InstallingtheLANRoutingFeatureonROUTER
1. SignintoROUTERwiththeAdministratoraccount.2. OntheServerManagerconsole,clicktheAddrolesandfeatures
link.3. OntheBeforeyoubeganpageoftheAddRolesandFeatures
Wizard,clickNext.4. OntheSelectinstallationtypepage,clickNext.5. OntheSelectdestinationserverpage,clickNext.6. OntheSelectServerrolespage,selecttheRemoteAccesscheck
box,asshowninthefollowingfigure,andthenclickNext.
![Page 122: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/122.jpg)
7. OntheSelectfeaturespage,clickNext.8. OntheRemoteAccesspage,clickNext.9. OntheSelectrolesservicespage,selecttheRoutingcheckbox.10. OntheAddRolesandFeaturesWizarddialogbox,clickAdd
Features.11. TheSelectroleservicespageisreturned,asshowninthe
followingfigure,clickNext.
Note:TheDirectAccessandVPN(RAS)checkboxwillbeselected
automatically.
12. OntheWebServerRole(IIS)page,clickNext.13. OntheSelectroleservicespage,clickNext.
![Page 123: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/123.jpg)
14. OntheConfirminstallationselectionpage,clickInstall.15. ClickClose,oncetheinstallationsucceeded.
Task2:ConfiguringtheLANRoutingServiceon
ROUTER1. OntheServerManagerconsole,clickTools,andthenclick
RemoteandRoutingAccess.2. OntheRoutingandRemoteAccessconsole,selectandright-click
ROUTER(local),andthenselectConfigureandEnableRoutingandRemoteAccess,asshowninthefollowingfigure.
3. OnthewelcomepageoftheRoutingandRemoteAccessServer
SetupWizard,clickNext.4. OntheConfigurationpage,selecttheCustomconfigurationradio
button,asshowninthefollowingfigure,andthenclickNext.
![Page 124: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/124.jpg)
5. OntheCustomConfigurationpage,selecttheLANroutingcheck
box,asshowninthefollowingfigure.
6. ClickNext,andthenclickFinish.7. Ontheservicemessagebox,clickStartService.8. MakesurethattheROUTER(local)node’scolorchangesredto
green,asshowninthefollowingfigure.
![Page 125: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/125.jpg)
9. ClosetheRoutingandRemoteAccessconsole.10. OntheROUTERvirtualmachine,opentheRundialogbox,type
firewall.cplintheOpentextbox,andthenpressEnter.11. OntheWindowsFirewallwindow,intheleftpane,clicktheTurn
WindowsFirewallonorofflink.12. OntheCustomizeSettingswindow,selecttheTurnoffWindows
Firewall(notrecommended)radiobuttonforeachprofile,asshowninthefollowingfigure.
13. ClosetheCustomizeSettingswindow.
![Page 126: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/126.jpg)
Task3:TestingtheConnectivitybetweenDC1andSERVER2Servers
1. SwitchandsignintoSERVER2withtheAdministratoraccount.2. OpentheRundialogbox,typefirewall.cpl,intheOpentextbox,
andthenpressEnter.3. OntheWindowsFirewallwindow,intheleftpane,clicktheTurn
WindowsFirewallonorofflink.4. OntheCustomizeSettingswindow,selecttheTurnoffWindows
Firewall(notrecommended)radiobuttonforeachfirewallprofiles
5. ClosetheCustomizeSettingswindow.6. SwitchandsignintoDC1withMCSALAB\Administratoraccount.7. OpentheCommandPromptwindow,ontheCommandPrompt
window,typethefollowingcommandsandthenpressEnteraftereachone.
Ping10.0.0.1Ping192.168.0.1Ping192.168.0.2
8. Youshouldbeabletocommunicatetoallsystemssuccessfully,asshowninthefollowingfigure.
![Page 127: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/127.jpg)
9. ClosetheCommandPromptwindow.
Results:Aftercompletingthisexercise,youwillhaveconfiguredLANrouting
betweenDC1andSERVER2servers.
Donotshutdownorrevertanyvirtualmachine,asthesewillbeusedinthenextexercise.
![Page 128: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/128.jpg)
Exercise11:ConfiguringIPv6AddressingIPv6addressingschemeprovidesmoreuniqueaddressesandismoresecurethantraditionalIPv4addressingscheme.AnIPv6addresscomprisesofeightblocks
andeachblockcancontain16(bit)hexadecimaldigits.YoucanenablecommunicationbetweenIPv4andIPv6nodesusingthevarioustechniques,such
asTeredo,ISATAP,and6to4tunneling.
Inthisexercise,youwilllearnhowtoconfigureIPv6addressesonWindow-basedsystems.
MakesurethattheDC1,ROUTER,andSERVER2virtualmachinesarerunning
beforestartthisexercise.
Task1:DisablingIPv6AddressonDC11. SwitchandSignintoSERVER2withtheAdministratoraccount.2. Onthetaskbar,clicktheWindowsPowerShellicon.3. AttheWindowsPowerShellprompt,typeping10.0.0.100,and
thenpressEnter.4. VerifythatyouareablecommunicatewiththeDC1(10.0.0.100)
server,asshowninthefollowingfigure.
5. SwitchandSignintoDC1withtheMCSALAB\Administrator
account.6. OntheServerManagerconsole,intheleftpane,clickLocal
Server.7. InthePropertiespane,clickthe10.0.0.100,IPv6enabledlink,as
![Page 129: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/129.jpg)
showninthefollowingfigure.
8. OntheNetworkConnectionswindow,selectandright-clickyour
networkadapter,andthenselectProperties,asshowninthefollowingfigure.
9. Onthenetworkadapter’spropertiesdialogbox,cleartheInternet
ProtocolVersion6(TCP/IPv6)checkbox,asshowninthefollowingfigure,andthenclickOK.
![Page 130: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/130.jpg)
10. ClosetheNetworkConnectionswindow.11. OntheServerManagerconsole,verifythatyournetworkadapter
listsonly10.0.0.100,asshowninthefollowingfigure.YoumayneedtorefreshtheServerManagerconsole.NoticethatDC1is
nowanIPv4-onlyhost.
![Page 131: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/131.jpg)
Task2:DisablingIPv4AddressonSERVER21. SwitchandSignintoSERVER2withtheAdministratoraccount.2. OntheServerManagerconsole,intheleftpane,clickLocal
Server.3. InthePropertiespane,clickthe192.168.0.2,IPv6enabledlink.4. OntheNetworkConnectionswindow,selectandright-clickactive
networkadapter,andthenselectProperties.5. Onthenetworkadapter’spropertiesdialogbox,cleartheInternet
ProtocolVersion4(TCP/IPv4)checkbox,asshowninthefollowingfigure,andthenclickOK.
6. ClosetheNetworkConnectionswindow.7. OntheServerManagerconsole,verifythatnetworkadapternow
listsonlyIPv6enabled,asshowninthefollowingfigure.YoumayneedtorefreshtheServerManagerconsole.Noticethat
SERVER2isnowanIPv6-onlyhost.
![Page 132: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/132.jpg)
Task3:ConfiguringanIPv6NetworkonROUTER
1. SwitchandSignintoROUTERwiththeAdministratoraccount.2. Onthetaskbar,clicktheWindowsPowerShellicon.3. ToconfigureanetworkaddressthatwillbeusedontheIPv6
network,attheWindowsPowerShellprompt,typethefollowingcmdlet,andthenpressEnter,asshowninthefollowingfigure.
New-NetRoute-InterfaceAlias"Ethernet1"-DestinationPrefix2001:AABB:0:1::/64-PublishYes
Note:Ethernet1isthenameofthenetworkadapterconnectedtotheexternal
subnet.
4. ToallowclientstoobtaintheIPv6networkaddressautomaticallyfromROUTER,attheWindowsPowerShellprompt,typethe
followingcmdlet,andthenpressEnter,asshowninthefollowingfigure.
Set-NetIPInterface-InterfaceAlias"Ethernet1"-AddressFamilyIPv6-AdvertisingEnabled
5. AttheWindowsPowerShellprompt,typeipconfig.exe,andthen
pressEnter.NoticethatEthernet1nowhasanIPv6addressonthe
![Page 133: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/133.jpg)
2001:AABB:0:1::/64network,asshowninthefollowingfigure.ThisaddresswillbeusedforcommunicationontheIPv6-only
network.
Task4:VerifyingIPv6AddressonSERVER21. SwitchandSignintoSERVER2withtheAdministratoraccount.2. Onthetaskbar,clicktheWindowsPowerShellicon.3. AttheWindowsPowerShellprompt,typeipconfig.exe,andthen
pressEnter.NoticethatyournetworkadapternowhasanIPv6addressontheonthe2001:AABB:0:1::/64network,asshownin
thefollowingfigure.
4. Thenetworkaddresswasobtainedfromtherouterthroughthe
statelessconfiguration.
Results:Aftercompletingtheexercise,youwillhaveconfiguredanIPv6-basednetwork.
![Page 134: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/134.jpg)
ShutdownandreverttheDC1,SERVER2andROUTERvirtualmachinesto
prepareforthenextexercise.
![Page 135: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/135.jpg)
Exercise12:InstallingandConfiguringDiskStorageDisksareusedtostorethesystemdataaswellaspersonneldata.Thereare
variousstoragetechnologies,suchasSATA,IDE,iSCSI,andFibreChannelthatcanbeusedtostorethedata.Inavirtualizedenvironment,youcanadd
additionalvirtualharddiskstothevirtualmachines,andthenyoucancreateadditionalvolumesonthesedisks.
Inthisexercise,youwilllearnhowtomanagedisksonaWindowserver.
Further,youwilllearnhowtoshrinkandextendvolumes.
Task1:AddingNewVirtualDiskstoDC11. MakesurethattheDC1virtualmachineispoweredoff.2. Onyourhostmachine,ontheVMwareconsole,selectandright-
clicktheDC1virtualmachine,andthenselectSettings.3. Onthevirtualmachine’ssettingdialogbox,ensurethatHardDisk
isselected,andthenclickNext.
4. OntheSelectaDiskTypepage,acceptthedefaultselection
(SCSI),andthenclickNext.5. OntheSelectaDiskpage,makesurethattheCreateanewvirtual
diskradiobuttonisselected,andthenclickNext.
![Page 136: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/136.jpg)
.
6. OntheSpecifyDiskCapacitypage,setthedisksizeas10GB,selecttheStorevirtualdiskasasinglefileradiobutton,andthen
clickNext.
7. OntheSpecifyDiskFilepage,acceptthedefaultfilename,and
thenclickFinish.
![Page 137: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/137.jpg)
8. Addonemorenewvirtualdiskwithfollowingsettings:
Storevirtualdiskasasinglefile.Size:10GB.
Filename:Acceptdefault.
Task2:InitializingtheAddedDisks
1. PowerontheDC1virtualmachine.
![Page 138: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/138.jpg)
2. OpentheServerManagerconsole.3. OntheServerManagerconsole,clickTools,andthenclick
ComputerManagement.4. OntheComputerManagementconsole,undertheStoragenode,
selectDiskManagement.5. IntheDiskspane,selectandright-clickDisk1,andthenselect
Online,asshowninthefollowingfigure.
6. Selectandright-clickDisk1,andthenselectInitializeDisk.7. OntheInitializeDiskdialogbox,makesurethattheDisk1check
boxisselected,selecttheGPT(GUIDPartitionTable)radiobutton,andthenclickOK.
![Page 139: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/139.jpg)
Note:TheGPTpartitiontablesupportsmorefeaturesthanthetraditionalMBR
partitiontable.
8. IntheDiskspane,selectandright-clickDisk2,andthenselectOnline.
9. Selectandright-clickDisk2,andthenselectInitializeDisk.10. OntheInitializeDiskdialogbox,makesurethattheDisk2check
boxisselected,selecttheGPT(GUIDPartitionTable)radiobutton,andthenclickOK.
Task3:CreatingandFormattingSimpleVolumes
1. OntheComputerManagementconsole,undertheDiskManagementnode,selectandright-clicktheUnallocatedspaceof
Disk1,andthenselectNewSimpleVolume,asshowninthefollowingfigure.
![Page 140: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/140.jpg)
2. OntheWelcometotheNewSimpleVolumeWizardpage,click
Next.3. OntheSpecifyVolumeSizepage,intheSimplevolumesizeMB
valuebox,type5000,asshowninthefollowingfigure,andthenclickNext.
4. OntheAssignDriveLetterorPathpage,makesurethatthe
Assignthefollowingdrivelettercheckboxisselected,acceptthedefaultdriveletter,asshowninthefollowingfigure,andthenclick
Next.
![Page 141: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/141.jpg)
5. OntheFormatPartitionpage,intheVolumelabeltextbox,type
Volume1,asshowninthefollowingfigure,andthenclickNext.
6. OntheCompletingtheNewSimpleVolumeWizardpage,click
Finish.7. OntheDiskManagementconsole,selectandright-clickthe
UnallocatedspaceofDisk2,andthenselectNewSimpleVolume.8. OntheWelcometotheNewSimpleVolumeWizardpage,click
Next.9. OntheSpecifyVolumeSizepage,intheSimplevolumesizein
![Page 142: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/142.jpg)
MBvaluebox,type5000,andthenclickNext.10. OntheAssignDriveLetterorPathpage,makesurethatthe
Assignthefollowingdrivelettercheckboxisselected,acceptthedefaultdriveletter,andthenclickNext.
11. OntheFormatPartitionpage,intheVolumelabeltextbox,typeVolume2,andthenclickNext.
12. OntheCompletingtheNewSimpleVolumeWizardpage,clickFinish.
13. LeavetheComputerManagementconsoleactive.14. PresstheWindows+EkeystoopentheWindowsExplorer
window.15. VerifythattheVolume1andVolume2arecreated,asshowninthe
followingfigure.
16. ClosetheWindowsExplorerwindow.
Task4:ShrinkingtheVolumes
1. OnDC1,switchtotheComputerManagementconsole.2. OntheComputerManagementconsole,undertheDisk
Managementnode,selectandright-clickVolume1,andthenselectShrinkVolume,asshowninthefollowingfigure.
![Page 143: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/143.jpg)
3. Ontheshrinkdialogbox,intheEntertheamountofspaceto
shrinkinMBvaluebox,type1000,asshowninthefollowingfigure,andthenclickShrink.
Task5:ExtendingtheVolumes
1. OntheComputerManagementconsole,undertheDiskManagementnode,selectandright-clickVolume2,andthenselect
ExtendVolume.2. OntheWelcometotheExtendedVolumeWizardpage,click
Next.3. OntheSelectDiskspage,intheSelecttheamountofspacein
![Page 144: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/144.jpg)
MBvaluebox,type3000,asshowninthefollowingfigure,andthenclickNext.
4. OntheCompletingtheExtendedVolumeWizardpage,click
Finish.5. PresstheWindows+EkeystoopentheWindowsExplorer
window,verifythatthevolumes’sizesarereflected.
Results:Aftercompletingthisexercise,youshouldhaveinitializednewdisks,andcreatedandformattedsimplevolumes.Inaddition,youshouldalsohave
shrinkandextendedthevolumes.
DonotshutdownorreverttheDC1virtualmachine,asitwillbeusedinthenextexercise.
![Page 145: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/145.jpg)
Exercise13:ConfiguringaRedundantStorageSpaceRedundantArrayofInexpensiveDisk(RAID)isastoragetechnologythatallowsyoutocombinemultipleharddisksinasinglelargeharddisk.Italso
providesredundancyandfaulttoleranceintheeventofadiskfailure.RAIDcanbeconfiguredeitherasahardwareRAID(whichrequiresahardwarecontrollerdevice)orasasoftwareRAID(whichdoesnotrequireanyspecifichardwaredevice).RAIDcanbedividedintovariousRAIDlevelsandeachRAIDlevel
supportsvariousfeaturesandlimitations.
Inthisexercise,youwilllearnhowtocreatestoragepools,howtocreateandtestamirroredvolume.
EnsurethattheDC1virtualmachineisrunningandyouhavenotreverteditin
thepreviousstate.
Task1:CreatingaStoragePool1. SignintoDC1andopentheServerManagerconsole.2. OpentheDiskManagementconsole,selectandright-clickDisk1,
andthendeletethecreatedvolume.AlsodeletethevolumeforDisk2,asshowninthefollowingfigure.
![Page 146: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/146.jpg)
3. OntheServerManagerconsole,intheleftpane,selectFileand
StorageServices,andthenselectStoragePools.4. IntheSTORAGEPOOLSpane,clickTASKS,andthenclick
RescanStorage.5. ClickagainTASKS,andthenclickNewStoragePool,asshownin
thefollowingfigure.
6. OntheBeforeyoubeginpage,clickNext.7. OntheSpecifyastoragepoolnameandsubsystempage,inthe
Nametextbox,typeMyStoragePool1,asshowninthefollowingfigure,andthenclickNext.
![Page 147: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/147.jpg)
8. OntheSelectphysicaldisksforthestoragepoolpage,selecttheallavailablediskcheckboxes,asshowninthefollowingfigure,and
thenclickNext.
9. OntheConfirmselectionspage,clickCreate.10. OntheViewresultspage,clickClose,oncethetaskiscompeted.
Task2:CreatingaMirroredVirtualDisk1. OnDC1,ontheServerManagerconsole,intheStorageSpaces
pane,selectMyStoragePool1.2. OntheVIRTUALDISKSpane,clickTASKS,andthenclickNew
VirtualDisk,asshowninthefollowingfigure.
![Page 148: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/148.jpg)
3. OntheBeforeyoubeginpage,clickNext.4. OntheSelectthestoragepoolpage,makesurethat
MyStoragePool1isselected,andthenclickNext.5. OntheSpecifythevirtualdisknamepage,intheNametextbox,
typeMirroredDisk1,asshowninthefollowingfigure,andthenclickNext.
6. OntheSelectthestoragelayoutpage,intheLayoutsection,select
Mirror,asshowninthefollowingfigure,andthenclickNext.
![Page 149: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/149.jpg)
7. OntheSpecifytheprovisioningtypepage,selecttheThinradiobutton,asshowninthefollowingfigure,andthenclickNext.
8. OntheSpecifythesizeofthevirtualdiskpage,intheVirtual
disksizebox,type5,asshowninthefollowingfigure,andthenclickNext.
9. OntheConfirmselectionspage,clickCreate.10. OntheViewresultspage,waituntilthetaskcompletes.11. MakesurethattheCreateavolumewhenthiswizardcloses
checkboxisselected,andthenclickClose.12. OntheBeforeyoubeginpageoftheNewVolumeWizard,click
![Page 150: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/150.jpg)
Next.13. OntheSelecttheserveranddiskpage,intheDisksection,select
theMirroredDisk1virtualdisk,asshowninthefollowingfigure,andthenclickNext.
14. OntheSpecifythesizeofthevolumepage,clickNext.15. OntheAssigntoadriveletterorfolderpage,noticetheDrive
letter,asshowninthefollowingfigure,andthenclickNext.
16. OntheSelectfilesystemsettingspage,intheFilesystemdrop-
downmenu,ensurethatReFSisselected.
![Page 151: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/151.jpg)
17. IntheVolumelabeltextbox,typeMirroredVolume1,asshowninthefollowingfigure,andthenclickNext.
Note:ReFSisanewfilesystemthatsupportsmorefeaturesthanNTFSfile
system.
18. OntheConfirmselectionspage,clickCreate.19. OntheCompletionpage,clickClose,oncethetaskcompletes.
Task3:CreatingaFileintoMirroredVolume1
1. OpentheWindowsExplorerwindow,double-clickMirroredVolume1.
2. CreatetheMyTextFile1fileunderMirroredVolume1,asshowninthefollowingfigure.
![Page 152: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/152.jpg)
3. ClosetheWindowsExplorerwindow.
Task4:RemovingaPhysicalDrive
1. Onyourhostmachine,ontheVMwareconsole,selectandright-clickDC1,andthenselectSettings.
2. OntheVirtualMachineSettingsdialogbox,selectHardDisk2harddrive,asshowninthefollowingfigure.
![Page 153: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/153.jpg)
3. Intherightpane,clickRemove,andthenclickOK.
Task5:VerifyingtheFileAvailability
1. OnDC1,switchtotheComputerManagementconsoleoropenitifrequired.
2. MakesurethattheDiskManagementnodeisselected,verifythattheDisk2isdisappearedfromthedisklist,asshowninthe
followingfigure.
3. OpentheWindowsExplorerwindow.4. OntheWindowsExplorerwindow,double-clickMirrored
Volume1.5. VerifythattheMyTextFile1fileisstillavailable.6. ClosetheWindowsExplorerwindow.
Results:Aftercompletingthisexercise,youshouldhavecreatedastoragepoolandaddedsomediskstoit.Thenyoushouldhavecreatedamirroredvirtualdiskfromthestoragepool.Inaddition,afterremovingaphysicaldrive,youshould
haveverifiedthatthevirtualdiskwasstillavailableandaccessible.
ShutdownandreverttheDC1virtualmachinetoprepareforthenetexercise.
![Page 154: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/154.jpg)
Exercise14:ImplementingFileSharingFilesharingallowsyoutoshareandaccessthefilesonanetwork.Youcanalsosetthedesiredpermissions(NTFSandsharedpermissions)onafileshareforthevarioususers.Inaddition,youcanenabletheaccess-basedenumerationfeatureonafileshare,whichallowsuserstoaccessonlythosesharedfilesforwhich
theyhavetheaccesspermission.
StarttheDC1,SERVER1,andCLIENT1virtualmachinestoperformthisexercise.
Task1:CreatingtheFolderStructurefortheNewShare
Beforestarttothisexercise,youneedtocreatePeterandShawnuseraccountsontheDC1virtualmachine.Todothis,youneedtoperformthefollowingsteps:
1.SignintoDC1withtheMCSALAB\Administratoraccount.2.OpentheActiveDirectoryUsersandComputersconsole,and
thenexpandthemcsalab.localnode.3.Selectandright-clickUsersintheleftpane,selectNew,andthen
clickUser.4.FollowthesimplestepstocreatethePeterandShawnuser
accounts.5.ThefollowingfiguredisplaystheActiveDirectoryUsersandComputersconsole.PeterandShawnuseraccountsarelistedunder
theUsersnode.
![Page 155: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/155.jpg)
Note:Ifyoufaceproblemstocreateuseraccounts,youmayrefertheexercise6
and7.
6.SwitchandSignintoSERVER1withtheMCSALAB\Administratoraccount.
7.OpentheWindowsExplorerwindow,inthenavigationpane,double-clickLocalDisk(C:).
8.CreateafoldernamedMyData.9.Double-clicktheMyDatafolder.
10.CreatetheMarketingandSalesfoldersunderit,asshowninthefollowingfigure.
![Page 156: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/156.jpg)
Task2:ConfiguringNTFSPermissionsontheFolderStructure
1. OnSERVER1,ontheWindowsExplorerwindow,navigatetodriveLocalDrive(C:).
2. Selectandright-clicktheMyDatafolder,andthenselectProperties.
3. OntheMyDataPropertiesdialogbox,selectSecurity,andthenclickAdvanced,asshowninthefollowingfigure.
4. OntheAdvancedSecuritySettingsforMyDatadialogbox,click
DisableInheritance.5. OntheBlockInheritancedialogbox,asshowninthefollowing
figure,selecttheConvertinheritedpermissionsintoexplicitpermissionsonthisobjectoption,andthenclickOK.
![Page 157: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/157.jpg)
6. ClickOKtwicetoclosetheMyDataPropertiesdialogbox.7. OntheWindowsExplorerwindow,double-clicktheMyData
folder.8. Selectandright-clicktheMarketingfolder,andthenselect
Properties.9. OntheMarketingPropertiesdialogbox,clickSecurity,andthen
clickAdvanced.10. OntheAdvancedSecuritySettingsforMarketingdialogbox,
clickDisableInheritance.11. OntheBlockInheritancedialogbox,selecttheConvertinherited
permissionsintoexplicitpermissionsonthisobjectoption.12. RemovetheRead&ExecuteandSpecialpermissionsforUsers
(SERVER1\Users),asshowninthefollowingfigure,andthenclickOK.
![Page 158: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/158.jpg)
13. OntheSecuritytab,clickEdit.14. OnthePermissionsforMarketingdialogbox,clickAdd.15. OntheSelectUsers,Computers,ServiceAccounts,andGroups
dialogbox,typePeter,clickCheckNames,asshowninthefollowingfigure,andthenclickOK.
Note:YoumayaskedtoprovideDomainadministratorcredentials.
16. OnthePermissionsforMarketingdialogbox,selecttheModify
checkboxundertheAllowsection,asshowninthefollowingfigure.
![Page 159: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/159.jpg)
17. ClickOKtoclosethePermissionsforMarketingdialogbox.18. ClickOKtoclosetheMarketingPropertiesdialogbox.
Task3:SharingtheFolder
1. OnSERVER1,selectandright-clicktheMyDatafolder,andthenselectProperties.
2. OntheMyDataPropertiesdialogbox,selecttheSharingtab,andthenclickAdvancedSharing.
3. OntheAdvancedSharingdialogbox,selecttheSharethisfoldercheckbox,asshowninthefollowingfigure,andthenclick
Permissions.
![Page 160: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/160.jpg)
4. OnthePermissionsforMyDatadialogbox,asshowninthe
followingfigure,andthenclickAdd.
![Page 161: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/161.jpg)
5. OntheSelectUsers,Computers,ServiceAccounts,orGroups
dialogbox,intheEntertheobjectnamestoselect(examples):textarea,typeAuthenticatedUsers.
6. ClickCheckNames,andthenclickOK.7. OnthePermissionsforMyDatadialogbox,makesurethatthe
AuthenticatedUsersisselectedintheSharePermissionssection,andthenselecttheChangecheckboxundertheAllowsection,as
showninthefollowingfigure.
![Page 162: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/162.jpg)
8. ClickOKtoclosethePermissionsforMyDatadialogbox.9. ClickOKtoclosetheAdvancedSharingwindow.10. ClickClosetoclosetheMyDataPropertiesdialogbox.
Task4:AccessingtheSharedFolder
1. SwitchandSignintoCLIENT1withtheMCSALAB\Peteraccount.
2. OpentheRundialogbox,type\\SERVER1\MyData,andthenpressEnter.
3. Double-clicktheMarketingfolder.
Note:PetershouldbeabletoaccesstotheMarketingfolder.
4. SignoutofCLIENT1.
Task5:EnablingAccess-basedEnumeration1. SwitchbackandSignintoSERVER1withthe
MCSALAB\Administratoraccount.
![Page 163: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/163.jpg)
2. OpentheServerManagerconsole,ontheServerManagerconsole,intheleftpane,selectFileandStorageServices.
3. OntheFileandStorageServicespage,clickShares.4. IntheSharespane,selectandright-clickMyData,andthenclick
Properties,asshowninthefollowingfigure.
5. OntheMyDataPropertiesdialogbox,intheleftpane,select
Settings,andthenselecttheEnableaccess-basedenumerationcheckbox,asshowninthefollowingfigure.
![Page 164: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/164.jpg)
6. ClickOKtoclosetheMyDataPropertiesdialogbox.7. ClosetheServerManagerconsole.
Task6:TestingtheAccess-basedEnumerationConfiguration
1. SwitchbackandsignintoCLIENT1withtheMCSALAB\Shawnaccount.
2. ClicktheDesktoptile.3. OpentheRundialogbox,intheOpentextbox,type
\\SERVER1\MyData,andthenpressEnter.
Note:ShawnshouldonlybeabletoviewtheSalesfolder,thefolderforwhichhehasbeenassignedpermissions.
4. SignoutofCLINET1.
Results:Aftercompletingthisexercise,youshouldhavecreatedandtestedafileshare.Inaddition,youshouldalsohavetestedtheaccess-basedenumeration
featureforthesharedfolder.
ShutdownandreverttheDC1,SERVER1,andCLIENT1virtualmachinestoprepareforthenextexercise.
![Page 165: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/165.jpg)
Exercise15:ImplementingShadowCopiesShadowcopyisafeaturethatallowsyoutorecoverthefiles(includingthesharedfiles)whichareaccidentlyoverwrittenordeleted.First,youneedto
enablethisfeature(onadesireddisk)thenyoucancreatemultipleshadowcopyversionsonadisk.However,shadowcopycannotbeconsideredasanalternateoftheWindowbackupfeature,becauseitonlyworksuntilthesystemisworkingonwhichyouhaveenabledit.Ifthesystemgoesdownorcrashedaccidently,
shadowcopycannotbeusedtorecoverthesystemorsystem’sdata.
Inthisexercise,youwilllearnhowtousetheshadowcopyfeaturetorecovertheaccidentlydeletedfiles.
StarttheDC1andSERVER1virtualmachinestoperformthisexercise.
Task1:ConfiguringShadowCopies1. SignintoSERVER1withtheMCSALAB\Administratoraccount.2. OpentheWindowsExplorerwindow.3. Selectandright-clickLocalDisk(C:),andthenclickConfigure
ShadowCopies.4. OntheShadowCopiesdialogbox,makesurethatC:\volumeis
selected,andthenclickEnable.5. OntheEnableShadowCopiesmessagebox,clickYes.6. OntheShadowCopiesdialogbox,clickSettings.7. OntheSettingsdialogbox,asshowninthefollowingfigure,click
Schedule.
![Page 166: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/166.jpg)
8. OntheC:\scheduledialogbox,reviewthevariousschedule
options,andthenclickOK.9. OntheSettingsdialogbox,clickOK.10. ClickOKtoclosetheSettingsdialogbox.11. OntheShadowCopiesdialogbox,clickOK.
Task2:RecoveringaDeletedFileUsingShadowCopy
1. OnSERVER1,switchtotheWindowsExplorerwindow.2. NavigatetoLocalDisk(C:),andthenclickUsers.3. Selectandright-clickPublic,andthenclickDelete.4. AlsodeletethePublicfolderfromRecycleBin.5. OntheWindowsExplorerwindow,selectandright-clickthe
Usersfolder,andthenclickProperties.6. OntheUsersPropertiesdialogbox,clickthePreviousVersions
tab,asshowninthefollowingfigure.
![Page 167: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/167.jpg)
7. SelectthefolderversionfortheUsersfolder,andthenclickOpen.8. VerifythatthePublicislistedinthefolder,selectandright-click
Public,andthenclickCopy.9. OntheotherWindowsExplorerwindow,navigatetotheLocal
Disk(C:)\Usersfolder,andthenclickPaste.10. ClosetheWindowsExplorerwindow.11. ClickOKandcloseallopenwindows.
Results:Aftercompletingthisexercise,youshouldhaveconfiguredtheShadow
Copiesfeaturetorecovertheaccidentlydeletedfile.
12. ShutdownandreverttheDC1andSERVER1virtualmachinestoprepareforthenextexercise.
![Page 168: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/168.jpg)
Exercise16:ImplementingNetworkPrintingAprinterisahardwaredevicewhichtranslatethesoftcopiesintohardcopies.Asingleprintercanbesharedonanetworkandthenitcanbeaccessedby
multipleclientstosendtheprintjobs.Onceyousharedaprinteronanetwork,youneedtoconnectitoneachclientsinordertosendtheprintjobs.However,inalargeenterprisenetwork,wheremultipleprintersareusedtohandleanumberofthousandprintjobs,youmayneedtoconfiguretheprinterpoolforeaseprint
management.
Inthisexercise,youwilllearnhowtoinstall,share,andmanageanetworkprinteronaWindows-basednetwork.
StarttheDC1,SERVER1,andCLIENT1virtualmachinestoperformthis
exercise.
Task1:InstallingthePrintandDocumentServicesServerRole
1. SignintoSERVER1asMCSALAB\Administrator.2. OntheServerManagerconsole,clickManage,andthenclick
AddRolesandFeatures.3. OntheBeforeyoubeginpageoftheAddRolesandFeatures
Wizard,clickNext.4. OntheSelectinstallationtypepage,makesurethattheRole-
basedorfeature-basedinstallationradiobuttonisselected,andthenclickNext.
5. OntheSelectdestinationserverpage,clickNext.6. OntheSelectServerRolespage,asshowninthefollowingfigure,
selectthePrintandDocumentServicescheckbox.IftheAddRolesandFeaturesWizarddialogboxdisplays,clickAdd
Features,andthenclickNext.
![Page 169: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/169.jpg)
7. Ontherestofthepages,clickNextuntiltheConfirmInstallation
Selectionspagedisplays.8. ClickInstalltoinstalltherequiredroleservices,andthenclick
Closeoncetheinstallationsucceeded.
Task2:InstallingaNewPrinter1. OntheServerManagerconsole,clickTools,andthenclickPrint
Management.2. OnthePrintManagementconsole,expandPrinterServers,and
thenclickSERVER1(Local).3. Selectandright-clickPrinters,andthenclickAddPrinter,as
showninthefollowingfigure.
![Page 170: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/170.jpg)
4. OntheNetworkPrinterInstallationWizardpage,selecttheAddanewprinterusinganexistingportradiobutton,asshowninthe
followingfigure,andthenclickNext.
5. OnthePrinterDriverpage,makesurethattheInstallanew
printerradiobuttonisselected,andthenclickNext.6. OnthePrinterInstallationpage,selectCanoninthe
Manufacturelist.7. SelectanyoftheprintermodelinthePrinterslistintherightpane,
asshowninthefollowingfigure,andthenclickNext.
![Page 171: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/171.jpg)
8. OnthePrinterNameandSharingSettingspage,clickNext.9. OnthePrinterFoundpage,clickNext,andthenclickFinish.
Task3:ConfiguringPrinterPooling
1. OnthePrintManagementconsole,selectandright-clicktherecentlyaddedprinter,andthenclickProperties.
2. Ontheprinterpropertiesdialogbox,clicktheSharingtab,selecttheListinthedirectorycheckbox,asshowninthefollowing
figure,andthenclickApply.
3. Ontheprinterpropertiesdialogbox,clickthePortstab,selectthe
Enableprinterpoolingcheckbox,andthenselecttheLPT2:checkboxtoselectitasanadditionalport,asshowninthe
followingfigure.
![Page 172: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/172.jpg)
4. ClickOKtoclosetheprinterpropertiesdialogbox.5. ClosethePrintManagementconsole.
Task4:ConnectingaPrinteronaClient
1. SwitchandSignintoCLIENT1asMCSALAB\AdministratorwiththepasswordasPassword@123.
2. OpenControlPanel,ontheControlPanelwindow,clicktheAddadevicelinkunderHardwareandSound.
3. OntheAddadevicewindow,selectthediscoveredprinter,asshowninthefollowingfigure,andthenclickNext.
![Page 173: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/173.jpg)
4. OntheControlPanelwindow,clicktheViewdevicesand
printerslink,underHardwareandSound.5. Makesurethattherecentlyaddedprinterislisted.
Results:Aftercompletingthisexercise,youshouldhaveinstalledand
configuredanetworkprinter.Inaddition,youshouldalsohaveconfiguredtheprinterpooling.
ShutdownandreverttheDC1,SERVER1,andCLIENT1virtualmachinesto
prepareforthenextexercise.
![Page 174: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/174.jpg)
Exercise17:ImplementingGroupPolicyObjectsAGroupPolicyObject(GPO)isacollectionofsecuritypoliciesandsettingsthatareusedtocontroltheusers’andcomputers’behavioronanetwork.YoucanusevarioussecuritypoliciestorestricttheActiveDirectoryobjectsfrom
accessingtheunwantedresources,suchasfeatures,services,files,ortools.Onceyoupromoteaserverasadomaincontroller,theDefaultDomainPolicyandDefaultDomainControllerPolicyGPOsarecreatedbydefaultonthedomaincontroller.TheseGPOscontainvariouspreconfiguredpoliciesthatareappliedonthedomaincontrollersandcomputers.However,youcancreateanewGPO
withthecustomsecuritypoliciesandsettingsusingtheGroupPolicyManagementconsole.
Inthisexercise,youwilllearnhowtocreateaGPOandhowtoconfigureaGPOtopreventActiveDirectoryobjectsfromaccessingtheresourcesonaWindows-
baseddomainnetwork.
StarttheDC1andCLIENT1virtualmachinestoperformthisexercise.
Task1:CreatingaNewGPO1. SignintoDC1withtheMCSALAB\Administrator.2. OpentheServerManagerconsole,ifrequired.3. OntheServerManagerconsole,clickTools,andthenclick
GroupPolicyManagement.4. OntheGroupPolicyManagementconsole,expandForest:
mcsalab.local,andthenclickDomains.5. Selectandright-clickmcsalab.local,andthenselectCreateaGPO
inthisdomain,asshowninthefollowingfigure.
![Page 175: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/175.jpg)
6. OntheNewGPOdialogbox,intheNametextbox,typeInternet
ExplorerGPO,andthenclickOK.
Task2:ConfiguringtheInternetExplorerGPO1. OnDC1,ontheGroupPolicyManagementconsole,selectand
right-clickInternetExplorerGPO,andthenclickEdit.2. OntheGroupPolicyManagementEditorconsole,navigateto
UserConfiguration\Policies\AdministrativeTemplates.3. Selectandright-clickAllSettings,andthenselectFilterOptions,
asshowninthefollowingfigure.
![Page 176: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/176.jpg)
4. OntheFilterOptionsdialogbox,selecttheEnableKeyword
Filterscheckbox.5. IntheFilterforword(s):textbox,typeGeneral,asshowninthe
followingfigure,andthenclickOK.
![Page 177: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/177.jpg)
6. IntheSettingspaneintherighthand,selectandright-clickDisable
theGeneralpage,andthenselectEdit,asshowninthefollowingfigure.
7. OntheDisabletheGeneralpagedialogbox,selecttheEnabled
![Page 178: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/178.jpg)
radiobutton,andthenclickOK.8. ClosetheGroupPolicyManagementEditorconsole.
Task3:CreatingaDomainUsertoTesttheGPO
1. OnDC1,opentheCommandPromptwindow.2. Executethefollowingcommand,asshowninthefollowingfigure
(typePassword@123whenyouarepromptedforpassword).dsaddusercn=User1,”cn=users,dc=mcsalab,dc=local”–disabledno
–pwd*
3. ClosetheCommandPromptwindow.
Task4:TestingtheInternetExplorerGPO1. SwitchandSignintoCLIENT1asMCSALAB\User1withthe
[email protected]. OpentheRundialogbox,typecontrolintheOpentextbox,and
thenpressEnter.3. OntheControlPanelwindow,clickNetworkandInternet.4. OntheNetworkandInternetwindow,asshowninthefollowing
figure,clickChangeyourhomepage.
![Page 179: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/179.jpg)
5. WhenyouclicktheChangeyourhomepagelink,youwillgeta
message,asshowninthefollowingfigure.
6. ClickOKtoclosetheInternetControlPanelmessagebox.7. OntheControlPanelwindow,clickInternetOptions.Notice
that,intheInternetPropertiesdialogbox,theGeneraltabisnotavailable,asshowninthefollowingfigure.
![Page 180: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/180.jpg)
8. Closeallopenwindowsandsignout.
Task5:ConfiguringSecurityFilteringtoExempta
UserfromtheInternetExplorerGPO1. SwitchandsigntoDC1.2. OpentheGroupPolicyManagementconsole,ifrequired.3. OntheGroupPolicyManagementconsole,selectandright-click
InternetExplorerGPO.4. Intherightpane,clicktheDelegationtab.5. OntheDelegationtab,clicktheAdvancedbutton.6. OntheInternetExplorerGPOSecuritySettingsdialogbox,click
Add.7. OntheSelectUsers,Computers,ServiceAccounts,orGroups
textbox,typeUser1,asshowninthefollowingfigure,andthenclickOK.
8. OntheInternetExplorerGPOSecuritySettingsdialogbox,in
theSecuritysection,selectUser1.9. InthePermissionsforUser1section,selecttheDenycheckbox,
asshowninthefollowingfigure,andthenclickOK.
![Page 181: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/181.jpg)
10. OntheWindowsSecuritydialogbox,clickYes.11. ClosetheGroupPolicyManagementconsole.
Task6:TestingtheInternetExplorerGPO1. SwitchandSignintoCLIENT1asMCSALAB\User1withthe
[email protected]. OpentheRundialogbox,typecontrolintheOpentextbox,and
thenpressEnter.3. OntheControlPanelwindow,clickNetworkandInternet.4. OntheNetworkandInternetdialogbox,clickChangeyour
homepage.NoticethattheGeneraltabisavailableontheInternetPropertiesdialogbox.
5. Closeallopenwindows,andsignout.
Results:Aftercompletingthisexercise,youshouldhaveconfiguredandtestedaGPO.
ShutdownandreverttheDC1andCLIENT1virtualmachines.
![Page 182: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/182.jpg)
Exercise18:ImplementingAppLockerandFirewallUsingGroupPolicy
AppLockerisasecurityfeaturethatallowsyoutorestrictspecificapplicationsforspecificgroupsorusers.
Intheexercise,youwilllearnhowtocontrolanapplicationusingthe
AppLockerfeature.Further,youwillalsolearnhowtomanageWindowsFirewallusingtheGroupPolicyManagementconsole.
StarttheDC1virtualmachinetoperformthisexercise.
Task1:RestrictinganApplicationUsingAppLocker1. SignintoDC1asMCSALAB\Administratorwiththepasswordas
[email protected]. OpentheGroupPolicyManagementconsole.3. NavigatetoForest:mcsalab.local\Domains\mcsalab.local.4. Selectandright-clickGroupPolicyObjects,andthenselectNew.5. OntheNewGPOdialogbox,intheNametextbox,typeSoftware
Policy,andthenclickOK.6. Right-clickSoftwarePolicy,andthenselectEdit.7. OntheGroupPolicyManagementEditorconsole,navigateto
ComputerConfiguration\Policies\WindowsSettings\SecuritySettings\ApplicationControlPolicies\AppLocker,asshownin
thefollowingfigure.
![Page 183: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/183.jpg)
8. ExpandAppLocker,right-clickExecutableRules,andthenselect
CreateNewRule.9. OntheBeforeYouBeginpage,selectNext.10. OnthePermissionspage,undertheUsersorGroupsbox,select
Deny,andthenselectNext.11. OntheConditionspage,selectthePathradiobutton,asshownin
thefollowingfigure,andthenclickNext.
![Page 184: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/184.jpg)
12. OnthePathpage,clickBrowseFiles,browseto
C:\Windows\System32\calc.exe,clickOpen,asshowninthefollowingfigure,andthenselectNext.
13. OntheExceptionspage,selectNext.14. OntheNameandDescriptionpage,intheNametextbox,type
BlockCalculator,andthenclickCreate.15. IftheAppLockerdialogboxappearsandpromptstocreatedefault
![Page 185: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/185.jpg)
rules,clickYes.16. OntheGroupPolicyManagementEditorconsole,asshownin
thefollowingfigure,noticethedefaultexecutablesrules.
17. SelecttheAppLockernodeintheleftpane,andthenclickthe
Configureruleenforcementlink,asshowninthefollowingfigure.
![Page 186: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/186.jpg)
18. OntheEnforcementtaboftheAppLockerPropertiesdialogbox,
underExecutablerules,selecttheConfiguredcheckbox.19. MakesurethattheEnforcerulesoptionisselectedinthedrop-
downlist,asshowninthefollowingfigure,andthenclickOK.
![Page 187: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/187.jpg)
20. ClosetheGroupPolicyManagementEditorconsole.21. OntheGroupPolicyManagementconsole,selectandright-click
DomainControllers,andthenselectLinkanExistingGPO.22. OntheSelectGPOdialogbox,selectSoftwarePolicy,andthen
clickOK.
![Page 188: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/188.jpg)
23. UndertheLinkGroupPolicyObjectstab,selectSoftwarePolicy,
andthenclickLinkOrdertomovethispolicytotop.
24. OpentheRundialogbox,typeservices.msc,andthenpressEnter.25. OntheServicesconsole,selectandright-clickApplication
Identity,andthenselectProperties.26. OntheApplicationIdentityProperties(LocalComputer)dialog
box,settheStartuptypeasAutomatic,clickStart,asshowninthefollowingfigure,andthenclickOK.
![Page 189: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/189.jpg)
Note:Ifyougetanerror,justclosetheServiceManagerwindow.
27. OpentheCommandPromptwindow,typegpupdate/force,and
thenpressEnter.28. SignoutfromtoDC1andSigninbacktoDC1as
MCSALAB\Administrator.29. OpentheRundialogbox,typecalc.exeintheOpentextbox,and
thenpressEnter.30. Youshouldgetanerrorasshowninthefollowingfigure.
Note:IfyouarestillabletoopentheCalculatorapplication,restarttheDC1
server,andthentryagain.
![Page 190: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/190.jpg)
Task2:ConfiguringWindowsFirewallRulesUsingGroupPolicy
1. SignintoDC1andopentheGroupPolicyManagementconsole,ifrequired.
2. NavigatetoForest:mcsalab.local\Domains\mcsalab.local\GroupPolicyObjects.
3. Right-clicktheGroupPolicyObjectsnode,andthenselectNew,asshowninthefollowingfigure.
4. IntheNametextboxtypeFirewallGPO,andthenclickOK.
5. ExpandGroupPolicyObjects,right-clickFirewallGPO,andthen
selectEdit.6. OntheGroupPolicyManagementEditorconsole,navigateto
ComputerConfiguration\Policies\WindowsSettings\SecuritySettings.
7. UndertheSecuritySettingsnode,expandWindowsFirewallwithAdvancedSecurity,andthenexpandtheWindowsFirewallwithAdvancedSecurity–LDAPnode,asshowninthefollowing
figure.
![Page 191: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/191.jpg)
8. Selectandright-clickInboundRules,andthenselectNewRule,as
showninthefollowingfigure.
9. OntheNewInboundRuleWizard,ontheRuleTypepage,the
selectPredefinedradiobutton.
![Page 192: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/192.jpg)
10. Inthedrop-downlist,selectRemoteDesktop,asshowninthefollowingfigure,andthenclickNext.
11. OnthePredefinedRulespage,clickNext.12. OntheActionpage,selecttheBlocktheconnectionradiobutton,
asshowninthefollowingfigure,andthenclickFinishtocloseNewInboundRuleWizard.
13. ClosetheGroupPolicyManagementEditorconsole.14. OpentheCommandPromptwindowandtypegpupdate/force,
![Page 193: Installing and Configuring Windows Server 2016 Hands-on Guide: Step By Step Lab Guide](https://reader035.vdocuments.site/reader035/viewer/2022071519/613c5aa1d5ddbd1b6607c1a3/html5/thumbnails/193.jpg)
andthenpressEnter.15. ClosetheCommandPromptwindow.16. OntheGroupPolicyManagementconsole,selectFirewallGPO
intheleftpane.17. Ifdisplayed,ontheInternetExplorerdialogboxclickClose18. Intherightpane,selecttheSettingstabandverifythatthe
InboundRulesareconfigured,asshowninthefollowingfigure.
19. ClosetheGroupPolicyManagementconsole.
Results:Aftercompletingthisexercise,youshouldhaveconfiguredAppLockerandWindowsFirewallrulesusingtheGroupPolicyManagementconsole.
ShutdownandreverttheDC1virtualmachine.
Hope,youhaveenjoyedagreatlearningexperiencewiththislearningguideandhopeyouwillprovidegreatratingtothislabguide.