Introduction |
|
xix | |
|
|
xix | |
|
Book features & conventions |
|
|
xx | |
|
|
xx | |
|
|
xx | |
|
|
xxi | |
|
How to register your book |
|
|
xxi | |
|
|
xxi | |
|
|
xxii | |
|
|
xxii | |
|
|
xxii | |
|
|
xxiii | |
Chapter 1 Administration Tools |
|
1 | (18) |
|
|
1 | (1) |
|
Privileged Access Workstations |
|
|
2 | (1) |
|
Remote Server Administration Tools |
|
|
3 | (6) |
|
|
4 | (2) |
|
|
6 | (3) |
|
|
9 | (7) |
|
|
11 | (1) |
|
|
11 | (1) |
|
|
11 | (1) |
|
|
12 | (1) |
|
|
13 | (2) |
|
|
15 | (1) |
|
|
16 | (3) |
Chapter 2 Installation Options |
|
19 | (24) |
|
Windows Server 2016 editions |
|
|
19 | (2) |
|
Windows Server servicing branches |
|
|
21 | (1) |
|
|
21 | (1) |
|
|
21 | (1) |
|
|
22 | (7) |
|
|
23 | (1) |
|
|
24 | (5) |
|
When to deploy Server Core |
|
|
29 | (1) |
|
|
29 | (1) |
|
|
30 | (2) |
|
|
32 | (11) |
|
|
32 | (2) |
|
Supported Roles and Features |
|
|
34 | (1) |
|
|
35 | (1) |
|
Creating Nano Server Images |
|
|
36 | (7) |
Chapter 3 Deployment and configuration |
|
43 | (64) |
|
Bare metal versus virtualized |
|
|
43 | (1) |
|
|
44 | (10) |
|
|
45 | (1) |
|
|
46 | (1) |
|
|
46 | (3) |
|
Adding drivers and updates to images |
|
|
49 | (1) |
|
Adding roles and features |
|
|
50 | (2) |
|
|
52 | (1) |
|
|
53 | (1) |
|
|
54 | (2) |
|
Windows Deployment Services |
|
|
56 | (8) |
|
|
56 | (2) |
|
|
58 | (1) |
|
|
59 | (4) |
|
Configuring transmissions |
|
|
63 | (1) |
|
Driver groups and packages |
|
|
64 | (1) |
|
|
64 | (11) |
|
Virtual machine templates |
|
|
64 | (1) |
|
|
65 | (2) |
|
|
67 | (4) |
|
|
71 | (1) |
|
|
72 | (3) |
|
Infrastructure configuration as code |
|
|
75 | (1) |
|
Desired State Configuration |
|
|
76 | (4) |
|
|
77 | (1) |
|
Local Configuration Manager |
|
|
78 | (1) |
|
|
79 | (1) |
|
|
79 | (1) |
|
|
80 | (1) |
|
|
80 | (12) |
|
|
81 | (3) |
|
|
84 | (6) |
|
|
90 | (1) |
|
Deploying Chef cookbooks and recipes |
|
|
91 | (1) |
|
|
92 | (9) |
|
|
93 | (3) |
|
Deploying Puppet agent to Windows Server |
|
|
96 | (3) |
|
Managing Windows Server Configuration |
|
|
99 | (1) |
|
Puppet Windows module pack |
|
|
99 | (2) |
|
Package management utilities |
|
|
101 | (6) |
|
|
103 | (1) |
|
Nano Server package provider |
|
|
103 | (1) |
|
|
104 | (3) |
Chapter 4 Active Directory |
|
107 | (50) |
|
Managing Active Directory |
|
|
107 | (9) |
|
Remote rather than local administration |
|
|
108 | (1) |
|
Active Directory Administrative Center |
|
|
108 | (3) |
|
Active Directory Users and Computers |
|
|
111 | (1) |
|
Active Directory Sites and Services |
|
|
112 | (3) |
|
Active Directory Domains and Trusts |
|
|
115 | (1) |
|
|
116 | (8) |
|
|
116 | (3) |
|
|
119 | (1) |
|
|
120 | (1) |
|
Read Only Domain Controllers |
|
|
120 | (3) |
|
Virtual domain controller cloning |
|
|
123 | (1) |
|
|
124 | (5) |
|
|
124 | (1) |
|
|
124 | (2) |
|
|
126 | (1) |
|
Account and resource forests |
|
|
126 | (1) |
|
|
126 | (1) |
|
Flexible Single Master Operations (FSMO) roles |
|
|
127 | (2) |
|
|
129 | (7) |
|
|
130 | (1) |
|
|
131 | (1) |
|
|
132 | (1) |
|
|
133 | (2) |
|
|
135 | (1) |
|
|
136 | (8) |
|
|
137 | (2) |
|
|
139 | (2) |
|
|
141 | (2) |
|
|
143 | (1) |
|
|
144 | (6) |
|
Active Directory Recycle Bin |
|
|
146 | (1) |
|
|
147 | (2) |
|
Active Directory snapshots |
|
|
149 | (1) |
|
Managing AD DS with PowerShell |
|
|
150 | (7) |
|
|
151 | (3) |
|
|
154 | (1) |
|
|
155 | (2) |
Chapter 5 DNS, DNS and IPAM |
|
157 | (32) |
|
|
157 | (18) |
|
|
157 | (4) |
|
|
161 | (1) |
|
Forwarders and conditional forwarders |
|
|
161 | (1) |
|
|
162 | (1) |
|
|
163 | (1) |
|
Peer Name Resolution Protocol |
|
|
164 | (1) |
|
|
164 | (2) |
|
Zone aging and scavenging |
|
|
166 | (1) |
|
|
167 | (1) |
|
|
168 | (1) |
|
|
169 | (3) |
|
|
172 | (1) |
|
Managing DNS with PowerShell |
|
|
172 | (3) |
|
|
175 | (8) |
|
|
175 | (1) |
|
|
176 | (1) |
|
|
177 | (1) |
|
|
177 | (1) |
|
|
177 | (1) |
|
|
178 | (1) |
|
|
178 | (1) |
|
|
179 | (1) |
|
|
179 | (1) |
|
|
180 | (3) |
|
|
183 | (6) |
|
|
183 | (1) |
|
Configure server discovery |
|
|
183 | (1) |
|
|
184 | (2) |
|
Managing IPAM with PowerShell |
|
|
186 | (3) |
Chapter 6 Hyper-V |
|
189 | (36) |
|
|
189 | (1) |
|
|
190 | (1) |
|
|
191 | (1) |
|
Guest integration services |
|
|
191 | (1) |
|
|
192 | (1) |
|
|
193 | (1) |
|
|
193 | (1) |
|
|
193 | (1) |
|
Nested virtualization dynamic memory |
|
|
194 | (1) |
|
Nested virtualization networking |
|
|
194 | (1) |
|
|
194 | (1) |
|
|
195 | (4) |
|
|
195 | (1) |
|
Dynamically expanding disks |
|
|
196 | (1) |
|
|
196 | (1) |
|
|
196 | (1) |
|
Modifying virtual hard disks |
|
|
197 | (1) |
|
|
198 | (1) |
|
|
199 | (1) |
|
Virtual Fibre Channel adapters |
|
|
200 | (1) |
|
|
200 | (1) |
|
Hyper-V storage optimization |
|
|
201 | (1) |
|
|
201 | (1) |
|
|
201 | (1) |
|
|
202 | (1) |
|
|
202 | (1) |
|
|
202 | (1) |
|
|
202 | (1) |
|
Virtual machine network adapters |
|
|
203 | (1) |
|
Optimizing network performance |
|
|
203 | (2) |
|
|
203 | (1) |
|
|
204 | (1) |
|
Dynamic Virtual Machine Queue |
|
|
204 | (1) |
|
Virtual machine NIC teaming |
|
|
204 | (1) |
|
Virtual Machine MAC addresses |
|
|
205 | (1) |
|
|
205 | (1) |
|
|
206 | (3) |
|
Configuring Hyper-V replica servers |
|
|
207 | (1) |
|
|
207 | (1) |
|
|
208 | (1) |
|
|
209 | (1) |
|
Hyper-V failover clusters |
|
|
209 | (5) |
|
Hyper-V host cluster storage |
|
|
209 | (1) |
|
|
210 | (2) |
|
|
212 | (1) |
|
|
212 | (1) |
|
|
213 | (1) |
|
Active Directory detached clusters |
|
|
213 | (1) |
|
Preferred owner and failover settings |
|
|
213 | (1) |
|
|
214 | (2) |
|
Hyper-V guest cluster storage |
|
|
215 | (1) |
|
|
215 | (1) |
|
|
216 | (1) |
|
|
217 | (1) |
|
Exporting, importing and copying VMs |
|
|
218 | (1) |
|
VM Network Health Detection |
|
|
219 | (1) |
|
|
219 | (1) |
|
Domain controller cloning |
|
|
219 | (1) |
|
Shielded virtual machines |
|
|
220 | (1) |
|
Managing Hyper-V using PowerShell |
|
|
220 | (5) |
Chapter 7 Storage Services |
|
225 | (38) |
|
Storage spaces and storage pools |
|
|
225 | (12) |
|
|
225 | (5) |
|
|
230 | (1) |
|
|
231 | (1) |
|
Thin Provisioning and Trim |
|
|
232 | (2) |
|
|
234 | (2) |
|
|
236 | (1) |
|
|
237 | (6) |
|
|
239 | (1) |
|
|
239 | (4) |
|
|
243 | (1) |
|
|
244 | (3) |
|
|
247 | (2) |
|
|
249 | (1) |
|
|
250 | (1) |
|
|
251 | (3) |
|
Storage Quality of Service |
|
|
254 | (1) |
|
|
255 | (2) |
|
Storage related PowerShell cmdlets |
|
|
257 | (6) |
|
|
257 | (1) |
|
|
257 | (1) |
|
|
257 | (1) |
|
|
258 | (1) |
|
|
259 | (3) |
|
|
262 | (1) |
Chapter 8 File servers |
|
263 | (34) |
|
Shared folder permissions |
|
|
264 | (4) |
|
|
265 | (1) |
|
|
266 | (2) |
|
File Server Resource Manager |
|
|
268 | (12) |
|
|
268 | (2) |
|
|
270 | (4) |
|
|
274 | (2) |
|
|
276 | (3) |
|
|
279 | (1) |
|
|
280 | (7) |
|
|
281 | (2) |
|
|
283 | (4) |
|
|
287 | (3) |
|
|
290 | (7) |
|
|
290 | (1) |
|
File Server Resource Manager cmdlets |
|
|
291 | (1) |
|
|
292 | (2) |
|
|
294 | (1) |
|
Dynamic Access Control cmdlets |
|
|
295 | (2) |
Chapter 9 Internet Information Services |
|
297 | (28) |
|
|
297 | (17) |
|
|
298 | (3) |
|
|
301 | (1) |
|
|
302 | (1) |
|
Configuring TLS certificates |
|
|
303 | (2) |
|
|
305 | (2) |
|
Modifying custom error response |
|
|
307 | (1) |
|
Adding or disabling the default document |
|
|
308 | (1) |
|
|
309 | (1) |
|
IP address and domain name filtering |
|
|
309 | (2) |
|
|
311 | (1) |
|
|
312 | (2) |
|
|
314 | (3) |
|
Creating application pools |
|
|
314 | (1) |
|
Configuring application pool recycling settings |
|
|
315 | (2) |
|
|
317 | (3) |
|
|
318 | (1) |
|
Delegating administrative permissions |
|
|
319 | (1) |
|
|
320 | (2) |
|
Managing IIS using PowerShell |
|
|
322 | (3) |
Chapter 10 Containers |
|
325 | (32) |
|
|
325 | (2) |
|
|
327 | (1) |
|
Windows Server Containers |
|
|
327 | (1) |
|
|
327 | (1) |
|
Server Core and Nano images |
|
|
328 | (1) |
|
Managing Containers with Docker |
|
|
328 | (10) |
|
|
329 | (1) |
|
|
330 | (4) |
|
Retrieving Container OS image |
|
|
334 | (1) |
|
Container registries and images |
|
|
335 | (3) |
|
|
338 | (9) |
|
|
338 | (3) |
|
Modifying a running container |
|
|
341 | (1) |
|
Creating a new image from a container |
|
|
342 | (1) |
|
|
342 | (2) |
|
Managing container images |
|
|
344 | (2) |
|
Service accounts for Windows containers |
|
|
346 | (1) |
|
|
347 | (1) |
|
|
348 | (5) |
|
|
349 | (2) |
|
|
351 | (2) |
|
|
353 | (1) |
|
|
353 | (1) |
|
|
353 | (4) |
|
|
354 | (1) |
|
Creating overlay networks |
|
|
355 | (1) |
|
Deploying and scaling swarm services |
|
|
355 | (2) |
Chapter 11 Clustering and High Availability |
|
357 | (20) |
|
|
357 | (13) |
|
|
358 | (1) |
|
Cluster Storage and Cluster Shared Volumes |
|
|
359 | (1) |
|
|
360 | (1) |
|
|
361 | (1) |
|
Failover and Preference Settings |
|
|
362 | (1) |
|
Multi-site clusters and Cloud Witness |
|
|
362 | (2) |
|
Virtual Machine Failover Clustering |
|
|
364 | (2) |
|
|
366 | (1) |
|
Managing Failover clustering with PowerShell |
|
|
367 | (3) |
|
|
370 | (7) |
|
Network Load Balancing prerequisites |
|
|
371 | (1) |
|
NLB cluster operation modes |
|
|
372 | (1) |
|
|
373 | (1) |
|
|
373 | (1) |
|
|
374 | (1) |
|
Managing NLB with PowerShell |
|
|
374 | (3) |
Chapter 12 Active Directory Certificate Services |
|
377 | (46) |
|
|
377 | (15) |
|
|
379 | (9) |
|
|
388 | (4) |
|
Certificate revocation lists |
|
|
392 | (5) |
|
|
392 | (1) |
|
Authority Information Access |
|
|
393 | (1) |
|
|
393 | (2) |
|
Publishing CRLs and delta-CRLs |
|
|
395 | (2) |
|
Certificate services role services |
|
|
397 | (1) |
|
|
398 | (8) |
|
|
399 | (7) |
|
Adding and editing templates |
|
|
406 | (1) |
|
Certificate autoenrollment and renewal |
|
|
406 | (2) |
|
|
408 | (15) |
|
Handling certificate requests |
|
|
410 | (1) |
|
|
411 | (2) |
|
Key archiving and recovery |
|
|
413 | (4) |
|
|
417 | (1) |
|
Managing Certificate Services using PowerShell |
|
|
418 | (1) |
|
Managing certificate services using Certutil.exe and Certreq.exe |
|
|
419 | (4) |
Chapter 13 Active Directory Federation Services |
|
423 | (18) |
|
|
423 | (1) |
|
Claims, claim rules, and attribute stores |
|
|
424 | (1) |
|
|
425 | (1) |
|
|
425 | (1) |
|
|
425 | (1) |
|
|
426 | (1) |
|
Configuring certificate relationship |
|
|
427 | (1) |
|
|
428 | (1) |
|
|
429 | (1) |
|
Relying party trust claim rules |
|
|
429 | (1) |
|
Claims provider trust claim rules |
|
|
430 | (1) |
|
Configure web application proxy |
|
|
430 | (3) |
|
|
433 | (2) |
|
Multi-factor authentication |
|
|
435 | (1) |
|
Managing AD FS with PowerShell |
|
|
436 | (3) |
|
Managing Web Application Proxy with PowerShell |
|
|
439 | (2) |
Chapter 14 Dynamic Access Control and Active Directory Rights Management Services |
|
441 | (20) |
|
|
441 | (1) |
|
Configuring Group Policy to support DAC |
|
|
442 | (1) |
|
Configuring User and Device Claims |
|
|
442 | (1) |
|
Configuring Resource Properties |
|
|
443 | (2) |
|
|
445 | (2) |
|
|
447 | (1) |
|
|
448 | (1) |
|
|
448 | (1) |
|
|
449 | (1) |
|
AD RMS certificates and licenses |
|
|
450 | (1) |
|
|
451 | (4) |
|
AD RMS administrators and super users |
|
|
455 | (1) |
|
Trusted User and Publishing Domains |
|
|
456 | (1) |
|
|
456 | (2) |
|
Apply AD RMS templates automatically |
|
|
457 | (1) |
|
Managing AD RMS with Windows PowerShell |
|
|
458 | (3) |
Chapter 15 Network Policy and Access Services |
|
461 | (26) |
|
|
461 | (4) |
|
RD Gateway connection and resource policies |
|
|
462 | (1) |
|
Configuring server settings |
|
|
463 | (1) |
|
Configuring clients to use RD Gateway |
|
|
463 | (2) |
|
|
465 | (8) |
|
|
465 | (1) |
|
|
466 | (1) |
|
|
467 | (1) |
|
|
467 | (1) |
|
|
468 | (1) |
|
|
468 | (1) |
|
|
469 | (1) |
|
Granting Access to a VPN server |
|
|
469 | (4) |
|
|
473 | (1) |
|
Network Address Translation (NAT) |
|
|
474 | (1) |
|
|
475 | (8) |
|
|
476 | (1) |
|
|
477 | (2) |
|
|
479 | (1) |
|
|
480 | (3) |
|
Managing Remote Access using PowerShell |
|
|
483 | (4) |
Chapter 16 Remote Desktop Services |
|
487 | (20) |
|
|
487 | (2) |
|
Remote Desktop Connection Broker |
|
|
489 | (1) |
|
|
490 | (1) |
|
Remote Desktop Session Host |
|
|
491 | (6) |
|
Session collection settings |
|
|
492 | (2) |
|
Personal session desktops |
|
|
494 | (1) |
|
|
494 | (1) |
|
Group Policy configuration |
|
|
495 | (2) |
|
Remote Desktop Virtualization Host |
|
|
497 | (4) |
|
Virtual machine preparation |
|
|
499 | (1) |
|
Virtual desktop collections |
|
|
499 | (1) |
|
|
500 | (1) |
|
Personal virtual desktops |
|
|
501 | (1) |
|
|
501 | (1) |
|
Remote Desktop Web Access |
|
|
501 | (1) |
|
|
501 | (3) |
|
|
502 | (1) |
|
Activating a license server |
|
|
503 | (1) |
|
Managing Remote Desktop Services Using PowerShell |
|
|
504 | (3) |
Chapter 17 Windows Server 2016 and Azure IaaS |
|
507 | (22) |
|
|
507 | (7) |
|
|
508 | (1) |
|
|
509 | (2) |
|
|
511 | (2) |
|
|
513 | (1) |
|
|
514 | (7) |
|
|
518 | (1) |
|
|
519 | (2) |
|
|
521 | (1) |
|
|
522 | (1) |
|
|
523 | (2) |
|
|
523 | (1) |
|
Monitoring and diagnostics |
|
|
524 | (1) |
|
|
525 | (1) |
|
|
525 | (1) |
|
|
525 | (1) |
|
|
526 | (1) |
|
Importing virtual machine images |
|
|
526 | (1) |
|
|
527 | (2) |
Chapter 18 Security |
|
529 | (60) |
|
|
530 | (1) |
|
Role Based Access Control |
|
|
531 | (1) |
|
|
531 | (1) |
|
|
532 | (6) |
|
|
538 | (2) |
|
|
540 | (2) |
|
Authentication policies and silos |
|
|
542 | (1) |
|
|
543 | (2) |
|
Just Enough Administration |
|
|
545 | (7) |
|
|
546 | (3) |
|
Session-configuration files |
|
|
549 | (1) |
|
|
550 | (2) |
|
Enhanced Security Administrative Environment forest |
|
|
552 | (2) |
|
Privileged Access Management |
|
|
554 | (4) |
|
|
555 | (1) |
|
|
555 | (1) |
|
|
556 | (1) |
|
|
556 | (2) |
|
Local Administrator Password Solution |
|
|
558 | (2) |
|
|
560 | (8) |
|
Products, security classifications, and languages |
|
|
560 | (1) |
|
Autonomous and replica modes |
|
|
561 | (1) |
|
|
562 | (1) |
|
|
563 | (1) |
|
|
564 | (1) |
|
|
564 | (2) |
|
|
566 | (1) |
|
|
566 | (2) |
|
|
568 | (3) |
|
|
571 | (5) |
|
|
573 | (3) |
|
|
576 | (1) |
|
Windows Firewall with Advanced Security |
|
|
577 | (12) |
|
|
578 | (1) |
|
|
579 | (1) |
|
|
580 | (1) |
|
|
580 | (3) |
|
Connection security rules |
|
|
583 | (6) |
Chapter 19 Monitoring and maintenance |
|
589 | (22) |
|
|
589 | (2) |
|
|
591 | (1) |
|
|
591 | (5) |
|
|
591 | (1) |
|
|
592 | (1) |
|
|
593 | (2) |
|
|
595 | (1) |
|
|
596 | (1) |
|
|
596 | (1) |
|
|
596 | (1) |
|
|
597 | (2) |
|
Expression-based audit policies |
|
|
598 | (1) |
|
|
598 | (1) |
|
Using auditpol with auditing |
|
|
599 | (1) |
|
|
599 | (5) |
|
|
601 | (1) |
|
|
602 | (1) |
|
Role- and application-specific backups |
|
|
602 | (1) |
|
|
603 | (1) |
|
Restore to an alternative location |
|
|
603 | (1) |
|
|
604 | (2) |
|
Preparing for Azure Backup Agent |
|
|
604 | (1) |
|
Backing up data to Azure Backup Agent |
|
|
605 | (1) |
|
Restore from Azure Backup |
|
|
605 | (1) |
|
|
606 | (1) |
|
Safe Mode and Last Known Good Configuration |
|
|
607 | (1) |
|
Configure the Boot Configuration Data store |
|
|
608 | (1) |
|
Monitoring and maintenance related PowerShell cmdlets |
|
|
608 | (3) |
Chapter 20 Upgrade and Migration |
|
611 | (32) |
|
Supported Upgrade and Migration paths |
|
|
611 | (9) |
|
Upgrading Roles and Features |
|
|
613 | (1) |
|
Converting evaluation version to licensed version |
|
|
614 | (1) |
|
|
615 | (1) |
|
Windows Server Migration Tools |
|
|
616 | (4) |
|
|
620 | (5) |
|
|
622 | (1) |
|
Migrating to a new forest |
|
|
623 | (2) |
|
Active Directory Certificate Services |
|
|
625 | (5) |
|
|
627 | (2) |
|
|
629 | (1) |
|
Verification and post migration tasks |
|
|
630 | (1) |
|
|
630 | (2) |
|
|
632 | (4) |
|
Preparing to migrate DHCP |
|
|
632 | (3) |
|
|
635 | (1) |
|
Verification and Post Migration Tasks |
|
|
636 | (1) |
|
|
636 | (4) |
|
|
637 | (1) |
|
|
637 | (2) |
|
Migrating File and Storage Services |
|
|
639 | (1) |
|
Microsoft Server application compatibility |
|
|
640 | (3) |
Chapter 21 Troubleshooting |
|
643 | (26) |
|
Troubleshooting methodology |
|
|
643 | (5) |
|
|
644 | (1) |
|
|
645 | (1) |
|
Ranking hypothetical solutions |
|
|
646 | (1) |
|
|
647 | (1) |
|
Operations Management Suite Log Analytics |
|
|
648 | (1) |
|
|
649 | (20) |
|
|
649 | (2) |
|
|
651 | (1) |
|
|
652 | (1) |
|
|
652 | (1) |
|
|
653 | (1) |
|
|
654 | (1) |
|
|
655 | (2) |
|
|
657 | (3) |
|
|
660 | (1) |
|
|
661 | (1) |
|
|
661 | (1) |
|
Active Directory Explorer |
|
|
662 | (3) |
|
Insight for Active Directory |
|
|
665 | (1) |
|
|
665 | (1) |
|
|
666 | (3) |
Index |
|
669 | |