Identity with Windows Server 2016 : Microsoft 70-742 MCSA Exam Guide

Title Page......Page 2
Copyright and Credits......Page 3
Identity with Windows Server 2016: Microsoft 70-742 MCSA Exam Guide......Page 4
About Packt......Page 5
Why subscribe?......Page 6
Packt.com......Page 7
Contributors......Page 8
About the authors......Page 9
About the reviewer......Page 10
Packt is searching for authors like you......Page 11
Preface......Page 17
Who this book is for......Page 18
What this book covers......Page 19
To get the most out of this book......Page 20
Conventions used......Page 21
Get in touch......Page 22
Reviews......Page 23
Installing and Configuring Active Directory......Page 24
Introduction to Active Directory......Page 25
Logical components......Page 26
Partitions......Page 27
Schemas......Page 28
Domains......Page 29
Domain trees......Page 31
Forests......Page 32
Sites......Page 34
Organizational Units......Page 35
Containers......Page 36
Physical components......Page 37
Domain controllers......Page 38
Read-only domain controllers......Page 39
Data stores......Page 40
Global catalogs......Page 41
What's new in AD DS in Windows Server 2016......Page 42
AD DS administration tools......Page 43
Installing and configuring the Active Directory......Page 45
Installing a new forest and domain controller......Page 46
Installing a new forest (GUI)......Page 47
Installing a new forest on a Server Core installation......Page 48
Installing a domain controller from Install from Media (IFM)......Page 49
Removing a domain controller from a domain......Page 53
Upgrading a domain controller......Page 63
In-place upgrade......Page 64
Domain-controller migration......Page 65
Configuring a global catalog server......Page 66
Transferring and seizing operation master roles......Page 69
Transferring FSMO roles......Page 70
Seizing FSMO roles......Page 72
Installing and configuring a read-only domain controller (RODC)......Page 73
Configuring domain controller cloning......Page 75
Active Directory users and computers......Page 77
Creating and managing users accounts......Page 78
Creating and managing computer accounts......Page 87
Configuring templates......Page 89
Performing bulk Active Directory operations......Page 90
Implementing offline domain joins......Page 92
Managing accounts......Page 93
Active Directory groups and organizational units......Page 94
Creating, configuring, and deleting groups......Page 95
Configuring group nesting......Page 99
Converting groups......Page 101
Managing group membership using Group Policy......Page 104
Enumerating group memberships......Page 106
Automating group-membership management using Windows PowerShell......Page 109
Delegating the creation and management of Active Directory groups......Page 110
Active Directory containers......Page 112
Creating, configuring, and deleting OUs......Page 113
Summary......Page 115
Questions......Page 116
Further reading......Page 118
Managing and Maintaining Active Directory......Page 119
Active directory authentication and account policies ......Page 120
Creating and configuring managed service accounts ......Page 121
Configuring Kerberos Constrained Delegation (KCD)......Page 125
Managing service principal names (SPNs) ......Page 127
Configuring domain and local user password policy settings ......Page 130
Configuring and applying Password Settings Objects (PSOs)......Page 133
Delegating password settings management......Page 138
Configuring account lockout policy settings......Page 143
Configuring the Kerberos policy settings within the group policy......Page 146
Configuring authentication policies......Page 148
Maintaining AD......Page 149
Backing up AD and SYSVOL......Page 150
Restoring AD......Page 151
Non-authoritative restoration......Page 152
Authoritative restoration......Page 153
Managing the AD offline......Page 154
Performing the offline defragmentation of an AD database......Page 155
Configuring AD snapshots......Page 157
Performing object-level and container-level recovery......Page 161
AD Recycle Bin (configuring and restoring objects)......Page 162
Configuring the Password Replication Policy (PRP) for RODC......Page 166
Monitoring and managing replication......Page 168
AD in enterprise scenarios......Page 170
Configuring a multi-domain and multi-forest AD infrastructure......Page 171
Upgrading existing domains and forests......Page 172
Configuring the domain and forest functional levels......Page 173
Configuring multiple user principal name (UPN) suffixes......Page 176
Configuring external, forest, shortcut, and realm trusts......Page 180
Configuring trust filtering......Page 183
SID filtering......Page 184
Selective authentication......Page 185
Named suffix routing......Page 186
Configuring sites and subnets......Page 187
Creating and configuring site links......Page 189
Moving domain controllers between sites......Page 190
Summary......Page 191
Questions......Page 192
Further reading......Page 194
Creating and Managing Group Policy......Page 195
Creating and managing GPOs......Page 196
Introduction to Group Policy......Page 197
Managing starter GPOs......Page 198
Configuring GPO links......Page 199
Configuring multiple Local Group Policy......Page 201
Backing up, importing, copying, and restoring GPOs......Page 204
Resetting default GPOs......Page 205
Delegate Group Policy management......Page 206
Detecting health issues using Group Policy......Page 207
Understanding Group Policy processing......Page 213
Configuring the processing order and precedence......Page 214
Configuring inheritance blocking......Page 216
Configuring enforced policies......Page 219
Configuring security filtering and WMI filtering......Page 220
Configuring loopback processing......Page 223
Configuring Group Policy caching......Page 225
Forcing a Group Policy update......Page 226
Configuring Group Policy settings and preferences......Page 227
Defining network drive mappings......Page 228
Configuring custom registry settings......Page 232
Configuring the Control Panel settings......Page 234
Configuring folder redirections......Page 236
Configuring shortcut deployment......Page 240
Configuring item-level targeting......Page 243
Summary......Page 248
Questions......Page 249
Further reading......Page 251
Understanding and Implementing Active Directory Certificate Services......Page 252
Installing and configuring AD CS......Page 253
An overview of AD CS......Page 254
Installing Active Directory Integrated Enterprise Certificate Authority......Page 256
Installing offline roots and subordinate CAs......Page 260
Configuring Offline Root CA......Page 261
Configuring the subordinate CA......Page 270
Installing Standalone CAs......Page 272
Configuring Certificate Revocation List (CRL) distribution points......Page 273
Installing and configuring Online Responder......Page 274
Implementing administrative role separation......Page 277
Configuring CA backup and recovery......Page 278
Backing up CA......Page 279
Restoring CA......Page 280
Managing certificates and templates......Page 281
 Managing certificates......Page 282
Managing certificate templates......Page 283
Implementing and managing certificate deployment, validation, and revocation......Page 288
Managing certificate renewal......Page 295
Managing AD CS......Page 296
Configuring and managing key archival and recovery......Page 297
Summary......Page 305
Questions......Page 306
Further reading......Page 308
Understanding and Implementing Federation and Rights Management......Page 309
Installing and configuring Active Directory Federation Services (AD FS)......Page 310
AD FS overview......Page 311
Upgrading and migrating AD FS workloads to Windows Server 2016......Page 312
Installing AD FS......Page 314
Upgrading AD FS......Page 317
Implementing claim-based authentication and relying party trust......Page 318
Implementing and configuring device registration......Page 325
Configuring AD FS for use with Microsoft Azure and Office 365......Page 330
Installing and configuring Web Application Proxy......Page 332
Installing and configuring WAP......Page 333
Implementing WAP in pass-through mode and as AD FS proxy......Page 338
Pass-through pre-authentication......Page 339
AD FS pre-authentication......Page 342
Publishing Remote Desktop Gateway applications......Page 343
Installing and configuring the Active Directory Rights Management Services (AD RMS)......Page 344
AD RMS overview......Page 345
AD RMS certificates......Page 346
How AD RMS works......Page 347
Deploying the AD RMS Cluster......Page 349
Managing AD RMS Service Connection Point (SCP)......Page 351
Managing AD RMS templates......Page 353
Configuring Exclusion Policies......Page 356
Backing up and restoring AD RMS......Page 360
Summary......Page 361
Questions......Page 362
Further reading......Page 364
Assessements......Page 365
Chapter 1:  Installing and Configuring Active Directory......Page 366
Chapter 2: Managing and Maintaining Active Directory......Page 367
Chapter 3: Creating and Managing Group Policy......Page 368
Chapter 4: Understanding and Implementing Active Directory Certificate Services......Page 369
Chapter 5: Understanding and Implementing Federation and Rights Management......Page 370