The Complete Guide to Windows Server 2008
Published on 9. October 2008
Book
Hardback
1752 pages
978-0-321-50272-8 (ISBN)
Description
"This book is an invaluable one-stop reference for deploying, configuring, and managing Windows Server 2008. It's filled with John's unique and hard-earned nuggets of advice, helpful scripts, and shortcuts that will save you time and money."
--Mark Russinovich
The Start-to-Finish, Comprehensive Windows Server 2008 Book for Every Working Administrator and Architect
To make the most of Windows Server 2008 in production environments, you need a deep understanding of its technical details. However, accurate and reliable information is scarce, and even most skilled Windows professionals don't know Windows Server 2008 as well as they should. The Complete Guide to Windows Server 2008brings together more than 1,500 pages of practical Windows Server 2008 insight and in-depth knowledge that you can't find anywhere else, all based on final code. John Savill-one of the world's most visible and trusted experts on Windows Server technology-specializes in helping real companies use Windows Server 2008 to run their businesses. His access to Microsoft's product team as a Microsoft MVP and one of 50 elite "Windows Server 2008 Delta Force Rangers" benefited this book's accuracy and value.
Coverage includes
Deployment planning, implementing, and managing new features, including Windows Server Core and Hyper-V virtualization
Choosing the right installation and upgrade options for your environment
Securing Windows Server 2008: authentication, authorization, BitLocker, certification services, and more
Implementing TCP/IP, advanced network services, remote access, and thin-client Terminal Services
Active Directory in depth, including Federated Services, Lightweight Directory Services, and Rights Management
Providing high availability through Network Load Balancing and failover clustering
Using Windows Deployment Services to quickly deploy multiple servers
Supporting complex distributed environments with the Distributed File System
Automating server management with PowerShell and the command prompt
Integrating Windows Server 2008 with UNIX, Linux, and legacy NetWare servers
Troubleshooting Windows Server 2008 and Vista environments, including an intuitive "how to" index to quickly locate answers to commonly asked questions
www.savilltech.com/completeguidetowindows2008
--Mark Russinovich
The Start-to-Finish, Comprehensive Windows Server 2008 Book for Every Working Administrator and Architect
To make the most of Windows Server 2008 in production environments, you need a deep understanding of its technical details. However, accurate and reliable information is scarce, and even most skilled Windows professionals don't know Windows Server 2008 as well as they should. The Complete Guide to Windows Server 2008brings together more than 1,500 pages of practical Windows Server 2008 insight and in-depth knowledge that you can't find anywhere else, all based on final code. John Savill-one of the world's most visible and trusted experts on Windows Server technology-specializes in helping real companies use Windows Server 2008 to run their businesses. His access to Microsoft's product team as a Microsoft MVP and one of 50 elite "Windows Server 2008 Delta Force Rangers" benefited this book's accuracy and value.
Coverage includes
Deployment planning, implementing, and managing new features, including Windows Server Core and Hyper-V virtualization
Choosing the right installation and upgrade options for your environment
Securing Windows Server 2008: authentication, authorization, BitLocker, certification services, and more
Implementing TCP/IP, advanced network services, remote access, and thin-client Terminal Services
Active Directory in depth, including Federated Services, Lightweight Directory Services, and Rights Management
Providing high availability through Network Load Balancing and failover clustering
Using Windows Deployment Services to quickly deploy multiple servers
Supporting complex distributed environments with the Distributed File System
Automating server management with PowerShell and the command prompt
Integrating Windows Server 2008 with UNIX, Linux, and legacy NetWare servers
Troubleshooting Windows Server 2008 and Vista environments, including an intuitive "how to" index to quickly locate answers to commonly asked questions
www.savilltech.com/completeguidetowindows2008
More details
Language
English
Place of publication
New Jersey
United States
Publishing group
Pearson Education (US)
Target group
Professional and scholarly
Dimensions
Height: 239 mm
Width: 186 mm
Thickness: 66 mm
Weight
2530 gr
ISBN-13
978-0-321-50272-8 (9780321502728)
Copyright in bibliographic data and cover images is held by Nielsen Book Services Limited or by the publishers or by their respective licensors: all rights reserved.
Schweitzer Classification
Person
JOHN SAVILL, BS, MCSE, MS ITP Server Administrator, MS ITP Enterprise Administrator, Microsoft MVP, is Central US manager for EMC's Microsoft technical infrastructure practice and the firm's chief Microsoft architect. Savill's Windows NT site evolved into ntfaq.com, the Internet's most widely used independent NT resource. A frequent writer for Windows IT Pro and TechNetmagazines, Savill spoke at Microsoft Tech Ed 2006, 2007, and 2008. His books include The Windows XP/2000 Answer Book.
Content
Acknowledgments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .xvii
About the Author . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .xviii
Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .xix
Chapter 1: Windows 101: Its Origins, Present, and the Services It Provides . . .1
Origin of the Windows Operating System . . . . . . . . . . . . . . . . . . . . . .1
Features of the Windows Server 2008 Product Line . . . . . . . . . . . . . . .21
Licensing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .41
Chapter 2: Windows Server 2008 Fundamentals: Navigating and Getting Started . . .43
Windows Vista at 30,000 Feet . . . . . . . . . . . . . . . . . . . . . . . . . . . . .44
The Logon Experience . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .46
User Access Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .50
Windows Elements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .56
The Desktop Windows Manager (DWM) . . . . . . . . . . . . . . . . . . . . . .64
Windows Aero Effects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .67
Task Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .71
Fast User Switching . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .77
Windows Explorer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .78
The Microsoft Management Console . . . . . . . . . . . . . . . . . . . . . . . . .86
The Control Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .93
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .96
Chapter 3: Installing and Upgrading Windows Server 2008 . . .99
Installing Windows Server 2008 . . . . . . . . . . . . . . . . . . . . . . . . . . . .99
Upgrading to Windows Server 2008 . . . . . . . . . . . . . . . . . . . . . . .126
Advanced Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .130
Viewing Installation Log Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . .131
Automating Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .133
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .139
Chapter 4: Securing Your Windows Server 2008 Deployment . . .141
Authentication and Authorization . . . . . . . . . . . . . . . . . . . . . . . . . . .142
The Physical Environment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .143
BitLocker . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .145
Active Directory Certificate Services (ADCS) . . . . . . . . . . . . . . . . . . .156
Authentication Protocols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .171
Securing Windows Server 2008 . . . . . . . . . . . . . . . . . . . . . . . . . . .179
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .224
Chapter 5: File System and Print Management Features . . .225
File System Types and Management . . . . . . . . . . . . . . . . . . . . . . . .225
File Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .240
File Server Resource Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . .257
Print Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .290
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .333
Chapter 6: TCP/IP . . .335
Internet Protocol (IP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .335
Transmission Control Protocol (TCP) . . . . . . . . . . . . . . . . . . . . . . . . .355
User Datagram Protocol (UDP) . . . . . . . . . . . . . . . . . . . . . . . . . . . .356
Network Monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .357
IPv6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .362
Communication Testing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .368
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .376
Chapter 7: Advanced Networking Services . . .377
DHCP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .377
Domain Name System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .406
WINS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .447
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .450
Chapter 8: Remote Access and Securing and Optimizing the Network . . .451
Virtual Private Networks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .452
RADIUS and Policy Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .478
Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .486
Network Access Protection (NAP) . . . . . . . . . . . . . . . . . . . . . . . . . .488
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .519
Chapter 9: Terminal Services . . .521
Enabling Remote Desktop . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .526
Initiating a Remote Desktop Connection . . . . . . . . . . . . . . . . . . . . . .529
Terminal Server Licensing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .544
Installing Terminal Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .558
TS Easy Print . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .559
TS Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .566
Remote Applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .583
TS Web Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .594
TS Session Broker . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .604
Management and Maintenance . . . . . . . . . . . . . . . . . . . . . . . . . . . .612
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .621
Chapter 10: Active Directory Domain Services Introduction . . .623
Workgroups Versus Domains . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .623
Exclusive Membership . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .627
Trusts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .630
Active Directory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .632
Domain and Forest Modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .671
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .677
Chapter 11: Designing and Installing Active Directory . . .679
Adding a Replica Domain Controller . . . . . . . . . . . . . . . . . . . . . . . .679
Creating a New Domain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .698
Verifying Domain Controller Operation . . . . . . . . . . . . . . . . . . . . . .705
Creating a Domain Controller from Media . . . . . . . . . . . . . . . . . . . .715
Removing Domain Controllers and Domains . . . . . . . . . . . . . . . . . . .719
Read-Only Domain Controllers (RODCs) . . . . . . . . . . . . . . . . . . . . . .722
Trust Relationships . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .740
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .751
Chapter 12: Managing Active Directory and Advanced Concepts . . .753
Customizing Site Connectivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . .753
Forcing a Demotion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .767
Managing AD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .777
Backing Up and Restoring AD . . . . . . . . . . . . . . . . . . . . . . . . . . . . .811
Auditing AD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .829
Advanced Password Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .834
Prune and Graft . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .836
Upgrading AD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .836
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .849
Chapter 13: Active Directory Federated Services, Lightweight Directory Services, and Rights Management . . .851
Active Directory Lightweight Directory Services . . . . . . . . . . . . . . . . .852
Active Directory Rights Management Services . . . . . . . . . . . . . . . . . .865
Active Directory Federated Services . . . . . . . . . . . . . . . . . . . . . . . . .891
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .909
Chapter 14: Server Core . . .911
Overview of Windows Server Core . . . . . . . . . . . . . . . . . . . . . . . . .911
Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .915
Server Core Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .918
Performing Common Actions Using Server Core . . . . . . . . . . . . . . . .940
Remotely Managing Server Core . . . . . . . . . . . . . . . . . . . . . . . . . . .942
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .952
Chapter 15: Distributed File System . . .953
Distribution of Other Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . .954
Distributed File System Namespace . . . . . . . . . . . . . . . . . . . . . . . . .957
Distributed File System Replication . . . . . . . . . . . . . . . . . . . . . . . . . .964
Installing and Configuring DFS . . . . . . . . . . . . . . . . . . . . . . . . . . . .969
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1008
Chapter 16: Deploying Windows . . .1011
Image Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1011
Installing Windows Deployment Services . . . . . . . . . . . . . . . . . . . .1017
Customizing the Windows Vista Deployment Process . . . . . . . . . . . .1041
Automating the Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1049
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1083
Chapter 17: Managing and Maintaining Windows Server 2008 . .1085
Server Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1085
Computer Management Console . . . . . . . . . . . . . . . . . . . . . . . . . .1151
Windows Server Backup (WSB) . . . . . . . . . . . . . . . . . . . . . . . . . .1152
Patch Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1178
Registry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1185
Performance and Paging File Tuning . . . . . . . . . . . . . . . . . . . . . . .1192
Managing from a Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1202
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1203
Chapter 18: Highly Available Windows Server 2008 . . .1205
High-Level Overview of NLB and Failover Clustering . . . . . . . . . . . .1205
Network Load Balancing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1210
Failover Clustering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1229
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1269
Chapter 19: Virtualization and Resource Management . . .1271
Virtualization 360 Picture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1271
Virtual Applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1272
Virtual Machines and Hyper-V . . . . . . . . . . . . . . . . . . . . . . . . . . . .1283
Windows System Resource Manager (WSRM) . . . . . . . . . . . . . . . .1319
Advantages of Virtualization and Consolidation . . . . . . . . . . . . . . .1330
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1330
Chapter 20: Troubleshooting Windows Server 2008 and Vista Environments . . .1333
Boot Mode Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1334
Windows Recovery Environment . . . . . . . . . . . . . . . . . . . . . . . . . .1338
Reliability and Performance Monitoring . . . . . . . . . . . . . . . . . . . . .1355
Event Viewer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1381
MSConfig . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1400
Windows Error Reporting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1401
System Center . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1402
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1407
Chapter 21: Group Policy . . .1409
Group Policy Structure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1410
Group Policy Management Console (GPMC) . . . . . . . . . . . . . . . . .1427
Group Policy Preferences . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1491
Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1501
Microsoft Templates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1503
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1505
Chapter 22: The Command Prompt and PowerShell . . .1507
Command.com . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1508
CMD.EXE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1510
Windows Scripting Host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1528
PowerShell . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1536
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1563
Chapter 23: Connecting Windows Server 2008 to Other Environments . . .1565
UNIX Integration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1566
NetWare Integration and Migration . . . . . . . . . . . . . . . . . . . . . . . .1593
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1608
Chapter 24: Internet Information Services . . .1611
IIS 7.0 Architecture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1611
Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1625
IIS Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1628
Certificates and Encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1645
Server Core Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1648
IIS and Windows Vista . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1648
Windows Web Server 2008 . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1649
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1650
How To Quick Reference . . . 1651
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1657
About the Author . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .xviii
Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .xix
Chapter 1: Windows 101: Its Origins, Present, and the Services It Provides . . .1
Origin of the Windows Operating System . . . . . . . . . . . . . . . . . . . . . .1
Features of the Windows Server 2008 Product Line . . . . . . . . . . . . . . .21
Licensing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .41
Chapter 2: Windows Server 2008 Fundamentals: Navigating and Getting Started . . .43
Windows Vista at 30,000 Feet . . . . . . . . . . . . . . . . . . . . . . . . . . . . .44
The Logon Experience . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .46
User Access Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .50
Windows Elements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .56
The Desktop Windows Manager (DWM) . . . . . . . . . . . . . . . . . . . . . .64
Windows Aero Effects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .67
Task Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .71
Fast User Switching . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .77
Windows Explorer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .78
The Microsoft Management Console . . . . . . . . . . . . . . . . . . . . . . . . .86
The Control Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .93
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .96
Chapter 3: Installing and Upgrading Windows Server 2008 . . .99
Installing Windows Server 2008 . . . . . . . . . . . . . . . . . . . . . . . . . . . .99
Upgrading to Windows Server 2008 . . . . . . . . . . . . . . . . . . . . . . .126
Advanced Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .130
Viewing Installation Log Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . .131
Automating Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .133
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .139
Chapter 4: Securing Your Windows Server 2008 Deployment . . .141
Authentication and Authorization . . . . . . . . . . . . . . . . . . . . . . . . . . .142
The Physical Environment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .143
BitLocker . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .145
Active Directory Certificate Services (ADCS) . . . . . . . . . . . . . . . . . . .156
Authentication Protocols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .171
Securing Windows Server 2008 . . . . . . . . . . . . . . . . . . . . . . . . . . .179
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .224
Chapter 5: File System and Print Management Features . . .225
File System Types and Management . . . . . . . . . . . . . . . . . . . . . . . .225
File Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .240
File Server Resource Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . .257
Print Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .290
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .333
Chapter 6: TCP/IP . . .335
Internet Protocol (IP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .335
Transmission Control Protocol (TCP) . . . . . . . . . . . . . . . . . . . . . . . . .355
User Datagram Protocol (UDP) . . . . . . . . . . . . . . . . . . . . . . . . . . . .356
Network Monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .357
IPv6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .362
Communication Testing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .368
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .376
Chapter 7: Advanced Networking Services . . .377
DHCP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .377
Domain Name System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .406
WINS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .447
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .450
Chapter 8: Remote Access and Securing and Optimizing the Network . . .451
Virtual Private Networks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .452
RADIUS and Policy Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .478
Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .486
Network Access Protection (NAP) . . . . . . . . . . . . . . . . . . . . . . . . . .488
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .519
Chapter 9: Terminal Services . . .521
Enabling Remote Desktop . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .526
Initiating a Remote Desktop Connection . . . . . . . . . . . . . . . . . . . . . .529
Terminal Server Licensing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .544
Installing Terminal Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .558
TS Easy Print . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .559
TS Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .566
Remote Applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .583
TS Web Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .594
TS Session Broker . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .604
Management and Maintenance . . . . . . . . . . . . . . . . . . . . . . . . . . . .612
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .621
Chapter 10: Active Directory Domain Services Introduction . . .623
Workgroups Versus Domains . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .623
Exclusive Membership . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .627
Trusts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .630
Active Directory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .632
Domain and Forest Modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .671
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .677
Chapter 11: Designing and Installing Active Directory . . .679
Adding a Replica Domain Controller . . . . . . . . . . . . . . . . . . . . . . . .679
Creating a New Domain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .698
Verifying Domain Controller Operation . . . . . . . . . . . . . . . . . . . . . .705
Creating a Domain Controller from Media . . . . . . . . . . . . . . . . . . . .715
Removing Domain Controllers and Domains . . . . . . . . . . . . . . . . . . .719
Read-Only Domain Controllers (RODCs) . . . . . . . . . . . . . . . . . . . . . .722
Trust Relationships . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .740
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .751
Chapter 12: Managing Active Directory and Advanced Concepts . . .753
Customizing Site Connectivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . .753
Forcing a Demotion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .767
Managing AD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .777
Backing Up and Restoring AD . . . . . . . . . . . . . . . . . . . . . . . . . . . . .811
Auditing AD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .829
Advanced Password Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .834
Prune and Graft . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .836
Upgrading AD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .836
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .849
Chapter 13: Active Directory Federated Services, Lightweight Directory Services, and Rights Management . . .851
Active Directory Lightweight Directory Services . . . . . . . . . . . . . . . . .852
Active Directory Rights Management Services . . . . . . . . . . . . . . . . . .865
Active Directory Federated Services . . . . . . . . . . . . . . . . . . . . . . . . .891
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .909
Chapter 14: Server Core . . .911
Overview of Windows Server Core . . . . . . . . . . . . . . . . . . . . . . . . .911
Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .915
Server Core Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .918
Performing Common Actions Using Server Core . . . . . . . . . . . . . . . .940
Remotely Managing Server Core . . . . . . . . . . . . . . . . . . . . . . . . . . .942
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .952
Chapter 15: Distributed File System . . .953
Distribution of Other Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . .954
Distributed File System Namespace . . . . . . . . . . . . . . . . . . . . . . . . .957
Distributed File System Replication . . . . . . . . . . . . . . . . . . . . . . . . . .964
Installing and Configuring DFS . . . . . . . . . . . . . . . . . . . . . . . . . . . .969
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1008
Chapter 16: Deploying Windows . . .1011
Image Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1011
Installing Windows Deployment Services . . . . . . . . . . . . . . . . . . . .1017
Customizing the Windows Vista Deployment Process . . . . . . . . . . . .1041
Automating the Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1049
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1083
Chapter 17: Managing and Maintaining Windows Server 2008 . .1085
Server Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1085
Computer Management Console . . . . . . . . . . . . . . . . . . . . . . . . . .1151
Windows Server Backup (WSB) . . . . . . . . . . . . . . . . . . . . . . . . . .1152
Patch Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1178
Registry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1185
Performance and Paging File Tuning . . . . . . . . . . . . . . . . . . . . . . .1192
Managing from a Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1202
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1203
Chapter 18: Highly Available Windows Server 2008 . . .1205
High-Level Overview of NLB and Failover Clustering . . . . . . . . . . . .1205
Network Load Balancing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1210
Failover Clustering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1229
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1269
Chapter 19: Virtualization and Resource Management . . .1271
Virtualization 360 Picture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1271
Virtual Applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1272
Virtual Machines and Hyper-V . . . . . . . . . . . . . . . . . . . . . . . . . . . .1283
Windows System Resource Manager (WSRM) . . . . . . . . . . . . . . . .1319
Advantages of Virtualization and Consolidation . . . . . . . . . . . . . . .1330
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1330
Chapter 20: Troubleshooting Windows Server 2008 and Vista Environments . . .1333
Boot Mode Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1334
Windows Recovery Environment . . . . . . . . . . . . . . . . . . . . . . . . . .1338
Reliability and Performance Monitoring . . . . . . . . . . . . . . . . . . . . .1355
Event Viewer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1381
MSConfig . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1400
Windows Error Reporting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1401
System Center . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1402
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1407
Chapter 21: Group Policy . . .1409
Group Policy Structure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1410
Group Policy Management Console (GPMC) . . . . . . . . . . . . . . . . .1427
Group Policy Preferences . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1491
Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1501
Microsoft Templates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1503
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1505
Chapter 22: The Command Prompt and PowerShell . . .1507
Command.com . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1508
CMD.EXE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1510
Windows Scripting Host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1528
PowerShell . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1536
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1563
Chapter 23: Connecting Windows Server 2008 to Other Environments . . .1565
UNIX Integration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1566
NetWare Integration and Migration . . . . . . . . . . . . . . . . . . . . . . . .1593
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1608
Chapter 24: Internet Information Services . . .1611
IIS 7.0 Architecture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1611
Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1625
IIS Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1628
Certificates and Encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1645
Server Core Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1648
IIS and Windows Vista . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1648
Windows Web Server 2008 . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1649
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1650
How To Quick Reference . . . 1651
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1657