6416-Updating Your Windows Server 2003 Technology Skills to Windows Server 2008
- Install and configure Windows Server 2008.
- Manage servers with Windows Server 2008.
- Configure networking and network services.
- Configure and manage network policy and access services.
- Configure and manage remote access.
- Configure and manage Active Directory Domain Services.
- Manage Group Policies in Active Directory Domain Services.
- Install and configure Active Directory Certificate Services.
- Configure Active Directory identity and access solutions.
- Install and configure Remote Desktop Services.
- Manage Remote Desktop Services.
- Install and configure web servers and applications with Internet Information Services.
- Maintain web servers and applications with Internet Information Services.
- Configure high availability and advanced storage.
- Overview of Windows Server
- Introduction to Windows Server 2008
- Preparing Servers for Installation
- Installing Windows Server 2008
- Windows Deployment Services
- Install Web Server Role by Using Server Manager Console
- Install DHCP Server Role by Using PowerShell
- Configure Server Core
- Use Sysprep to Prepare a System for Imaging
- Capture an Operating System Image by Using WDS
- Deploy an Operating System Image by Using WDS
- Provide an overview of the Windows Server operating system.
- Describe the operating system editions, versions, licensing options, and activation options, as well as upgrade and migration scenarios supported in Windows Server 2008.
- Prepare the installation media, network environment, and server hardware for the Windows Server 2008 installation.
- Install Windows Server 2008 and configure Windows activation.
- Deploy images by using Windows Deployment Services (WDS).
- Managing Server Storage Configuration
- Managing and Monitoring Service Processes
- Logging and Auditing in Windows Server 2008
- Performance Monitoring in Windows Server 2008
- Managing Server Security with BitLocker
- Manage Backup and Restore
- Managing Server Updates
- Use IPCONFIG as an example of the normal .EXE command
- Use Get-Process to list all processes
- Filter the result to display only five processes with the highest VM usage
- Use Restart-Service to restart the NetLogon service
- Use Get-WmiObject to get Win32_LogicalDisk from ADDS machine and remotely from WDS
- Change default boot options with MSCONFIG and restart the machine by using Restart-Computer
- Practice event filtering and create a custom view
- Configure event forwarding from ADDS into Storage Server
- Enable advanced auditing for File Share (Object Access) on FS and test the events being loggedLab : Managing Server Performance by Using Performance Monitor
- Practice with Performance Monitor
- Working with Data Collector Sets
- Enable no-TPM requirement + AD backup
- Encrypt the boot volume with BitLocker
- Check the status with MANAGE-BDE
- Test restart with the numerical password
- Recover the numerical password from AD
- Backup Doc folder on FS
- Restore some files from the backup into an alternate location
- Schedule regular backup to a remote folder by using WBADMIN and Task Scheduler GUI
- Configure servers to manage storage and disk volumes.
- Configure, manage, and troubleshoot service processes.
- Monitor servers by using event log management and advanced auditing.
- Configure performance monitoring.
- Manage server security by using BitLocker.
- Manage server backup and restore by using Windows Server Backup.
- Configure Windows Server Update Services for server updates.
- What’s New in Networking in Windows Server 2008
- Configuring IPv6 Addressing
- Configuring IPv6 Name Resolution
- Configuring DHCP Server Role
- IPv6 Transition
- Securing Windows Firewall with Advanced Security
- Planning for PKI Implementation
- Check IPCONFIG /ALL auto-configured IP address
- Ping FE80:: from FS to ADDS
- Ping -6 from FS
- Configure ADDS and FS with a static IPv6 Address
- Check the IPv6 addresses and AAAA DNS records appear in DNS
- Ping -6 from FS
- Disable LLMNR by using a GPO
- Test the IPv6 DNS AAAA name resolution is used primarily
- On FS remove the IPv4 DNS server address, configure IPv6 DNS server address manually and test PING -4 still works normally
- Install DHCP Server role in a statefull mode
- Configure best-practice DNS update settings
- Configure the DHCP Server with a valid IPv6 range to be issued to clients
- Test client lease
- Enable MAC filters and block all others than explicitly allowed
- Monitor blocked client request and enable Seven1 to receive IP address
- Investigate default Windows Firewall settings on the DefaultInst machine
- Confirm whether the machine is accessible from ADDS
- Enable PING, shared files, and WMI and test the connection
- Create WMI filters that filter for XP, Seven, and R2 machines
- Create a GPO with Firewall settings that would apply only to the Seven computers
- Describe networking, TCP/IP, and IPv6 and some of their central management aspects.
- Configure IPv6 addressing in Windows Server 2008.
- Configure IPv6 name resolution in Windows Server 2008.
- Configure the DHCP Server role.
- Configure IPv4 and IPv6 addressing with interoperability between the two formats.
- Configure Windows Firewall with advanced security features.
- Installing and Configuring Network Policy Services Server
- Managing Network Policy Services Server
- Deploying and Managing Network Access Protection
- Configuring NAP Enforcement Methods
- Install and configure the NPS role server
- Create a Connection Request Policy
- Configure NAP for VPN Clients
- Configure VPN Enforcement
- Test NAP for VPN Clients
- Install and configure the Network Policy Services server role
- Manage a Network Policy Services Server
- Configure Network Access Protection clients
- Configure NAP enforcement.
- Installing and Configuring Remote Access
- Managing New Tunneling Protocols in Windows Server 2008
- Managing DirectAccess in Windows Server 2008 R2 and Windows 7
- Install the RRAS service, create a VPN server, and change authentication and accounting to the NPS Server
- Configure certificates for VPN connections
- Establish an SSTP and IKEv2 VPN connection from a client computer into the corporate network
- Establish VPN Reconnect for the connection built in EX 2
- Configure a Windows Server 2008 R2 as a DirectAccess Server
- Configure Windows 7 as a DirectAccess client
- Ensure name resolution policy table is configured on the Name Location Server
- Install and configure Routing and Remote Access Services.
- Configure remote access by using the new tunneling protocols in Windows Server 2008
- Configure DirectAccess in Windows Server 2008 and Windows 7.
- What’s New in Active Directory Domain Services
- Installing and Configuring Active Directory Domain Services
- Configuring Security within Active Directory Domain Services
- Configuring and Managing Read-Only Domain Controllers
- Display Advanced Features in DSA console
- Enable AD DS Recycle Bin
- Delete some objects
- Restore the objects
- Create two password settings objects
- Assign the two policy objects to two separate user groups
- Enable AD Change auditing
- Test the protected objects feature
- Install RODC
- Configure Password Replication Policy
- Test remote site logon
- Monitor remote passwords
- Remove RODC forcibly
- Describe the new features of AD DS.
- Install and configure AD DS in Windows Server 2008.
- Configure security for Active Directory objects.
- Configure and manage Read-Only Domain Controllers.
- Install RSAT on Seven1, install GPMC
- Create and use a starter GPO
- Create a filter to display only printer-related settings
- Configure central storage for Policy Definitions
- Verify the central storage is being used by the consoles
- Manage clients with group policy preferences
- Install AD on ADDS2 as a replica DC
- Stop NTDS on ADDS2 and back up the database offline manually
- Use NTDSUTIL to perform offline defragmentation of the original database
- On ADDS, run a malicious script to modify some user objects in a destructive way
- Use NTDSUTIL on ADD2 to mount the previous manual snapshot and investigate its contents
- Use NTDSUTIL to restore authoritatively the modified OU contents
- Manage group policies in AD DS.
- Manage clients by using Group Policy Preferences in AD DS.
- Manage AD DS databases offline.
- What’s New in Cryptography in Windows 2008
- What’s New in Active Directory Certificate Services
- Installing Active Directory Certificate Services
- Configuring AD CS
- Managing Certificate Templates
- Configuring Online Certificate Status Protocol
- Remove all certificate templates
- Add only Kerberos Authentication template
- Enable CA Auditing in CA console and with AUDITPOL
- Create a public DNS name for CRL HTTP access
- Configure CRL and AIA paths to use only the newly created HTTP paths
- Enable content expiration in IIS properties
- CertEnroll virtual directory
- Configure basic GPO settings with Autoenrollment and CRL validity extension
- Create AD DS groups
- Create two web server certificate templates
- Create two user certificate logon templates
- On WEB computer, enroll for a web server certificate
- On Seven1 computer, use an Enrollment Agent account to enroll for a user logon certificate on behalf of another user
- Reconfigure web server’s default website to require a client SSL certificate for logon
- Configure and enable OCSP Response signing certificate template
- Configure OCSP Responder Revocation Configuration
- Verify the OCSP revocation check works from the client
- Describe the new cryptographic algorithms supported by Windows Server 2008.
- Describe the new features of AD CS in Windows Server 2008 R2.
- Install AD CS roles and services.
- Configure AD CS.
- Manage certificate templates by using Certificate Managers and Enrollment Agents features.
- Configure Online Certificate Status Protocol and Online Responders.
- Installing and Configuring AD LDS
- Overview of AD FS
- Configuring AD FS
- Configuring AD RMS
- Configuring AD RMS Templates and Trust Policies
- Install an instance of AD LDS for a new application
- Review the new schema objects
- Create the application users and group
- Install an AD RMS Cluster
- Configure a AD RMS Trust Policy
- Provide an overview of AD FS.
- Configure AD FS.
- Configure AD RMS.
- Configure AD RMS templates and trust policies.
- Overview of Remote Desktop Services
- Installing and Configuring Remote Desktop Services Session Host
- Installing and Configuring Remote Desktop Services Connection Broker
- Install and configure the RDS Session Host
- Install and configure the Remote Desktop Services connection broker
- Describe the new features of Remote Desktop Services.
- Install and configure the Remote Desktop Services Session Host server role.
- Install and configure the Remote Desktop Services Connection Broker service.
- Configuring Remote Desktop Licensing
- Managing Remote Desktop Client Processing with Windows System Resource Manager
- Configuring Single Sign-On for Remote Desktop Clients
- Installing and Configuring a Remote Desktop Gateway
- Install the RDL role service and review the RDL manager tool
- Use WSRM to apply an equal per user resource management policy
- Use Remote Desktop Session Host Configuration in the RD Services admin tool to set up single sign-on authentication for a user’s client computer
- Install the RDG role, map a certificate to it, and create an RD RAP and RD CAP, making the CAP in the NPS server
- Configure Remote Desktop Services Licensing.
- Manage resources by using Windows System Resource Manager.
- Configure single sign-on for remote desktop clients and manage RDS.
- Install and configure a Remote Desktop Gateway.
- Managing websites
- Configuring web applications
- Configuring a File Transfer Protocol Server and Simple Mail Transfer Protocol Server
- Install IIS 7.0 on a Windows 2008 Server
- Create a simple website on a virtual directory
- Add the new FTP 7.5 service on a Windows Server 2008
- Add the SMTP Service on a Windows Server 2008 and allow email on the website created
- Manage websites by using the web server role.
- Configure web applications.
- Configure FTP servers and SMTP server services.
- Managing the Web Server Role
- Configuring Website Authentication and Permissions
- Configuring and Managing Secure Websites by Using SSL
- Configure the IIS 7.0 Web Server Role
- Troubleshooting Request Processing
- Configure the IIS 7.0 SSL site
- Manage the IIS 7.0 SSL site
- Describe how to manage the web server role by using GUI and command-line tools.
- Describe how to configure website authentication and permissions for website security.
- Configure and manage secured websites by using SSL encryption.
- What’s New in Windows Server 2008 Network Load Balancing
- Overview of Failover Clustering
- Planning for Failover Clustering
- Configuring Failover Clustering
- Managing Advanced Storage Options
- Creating and Validating a Cluster
- Clustering the Print Services Role by Using Failover Cluster Management
- Configuring Cluster Resources
- Mount a VHD as a partition
- Configure system to boot to mounted VHD
- Boot system to a newly mounted and configured VHD
- Describe the new features of NLB in Windows Server 2008.
- Describe failover clustering.
- Configure failover cluster clustering.
- Install failover clustering.
- Manage advanced storage options.