Windows Server 2012 Inside Out

Description

Cover Copyright page Dedication Contents at a Glance Table of Contents Introduction Conventions How to reach the author Errata & book support We want to hear from you Stay in touch Part 1: Windows Server 2012 Overview Chapter 1: Introducing Windows Server 2012 Getting to know Windows Server 2012 Windows 8 and Windows Server 2012 Planning for Windows Server 2012 Your plan: The big picture Identifying your organizational teams Assessing project goals The business perspective Identifying IT goals Examining the interaction between IT and business units Predicting network change Analyzing the existing network Evaluating the network infrastructure Assessing systems Identify network services and applications Identifying security infrastructure Reviewing network administration Defining objectives and scope Specifying organizational objectives Setting the schedule Shaping the budget Allowing for contingencies Finalizing project scope Defining the new network environment Impact on network operations Identify security requirements Changing the administrative approach Select and implement standards Change management Final considerations for planning and deployment Thinking about server roles and Active Directory Planning for server usage Designing the Active Directory namespace Managing domain trusts Identifying the domain and forest functional level Defining Active Directory server roles Planning for availability, scalability, and manageability Planning for software needs Planning for hardware needs Planning for support structures and facilities Planning for day-to-day operations Planning for deploying highly available servers Chapter 2: Deploying Windows Server 2012 Getting a quick start Product licensing Preparing for a Windows Server 2012 installation Understanding installation options Determining which installation type to use Using Windows Update Preinstallation tasks Installing Windows Server 2012 Installation on BIOS-based systems Installation on EFI-based systems Planning partitions Naming computers Network and domain membership options Protocols Domain membership Networking components Performing a clean installation Performing an upgrade installation Activation sequence Activate Windows over the Internet Activate Windows by telephone Using Managed Activation Performing additional administration tasks during installations Accessing a command prompt during installation Forcing disk-partition removal during installation Loading mass storage drivers during installation Creating, deleting, and extending disk partitions during installation Troubleshooting installation Start with the potential points of failure Setup refuses to install or start Setup reports a media or DVD-ROM error Setup reports insufficient system resources Continue past lockups and freezes Postinstallation tasks Chapter 3: Boot configuration Boot from hardware and firmware Hardware and firmware power states Diagnosing hardware and firmware startup problems Resolving hardware and firmware startup problems Boot environment essentials Managing startup and boot configuration Managing startup and recovery options Managing System Boot Configuration Working with BCD Editor Managing the Boot Configuration Data store and its entries Viewing BCD entries Creating and identifying the BCD data store Importing and exporting the BCD data store Creating, copying, and deleting BCD entries Setting BCD entry values Changing Data Execution Prevention and physical address extension options Changing the operating system display order Changing the default operating system entry Changing the default timeout Changing the boot sequence temporarily Part 2: Managing Windows Server 2012 Systems Chapter 4: Managing Windows Server 2012 Working with the administration tools Using Control Panel utilities Using graphical administrative tools Using command-line utilities Utilities to know Using Net tools Using Windows PowerShell Working with Server Manager Getting to know Server Manager Adding servers for management Creating server groups Enabling remote management Working with Computer Management Computer Management system tools Computer Management storage tools Computer Management Services And Applications tools Using Control Panel Using the Folder Options utility Using the System console Customizing the desktop and the taskbar Configuring desktop items Configuring the taskbar Changing the taskbar size and position Using Auto Hide and locking Combining similar taskbar items Pinning shortcuts to the taskbar Controlling programs in the notification area Optimizing toolbars Displaying custom toolbars Creating personal toolbars Using Remote Desktop Remote Desktop essentials Configuring Remote Desktop Enabling Remote Desktop on servers Permitting and restricting remote logon Configuring Remote Desktop through Group Policy Supporting Remote Desktop Connection clients Remote Desktop Connection client Running the Remote Desktop Connection client Tracking who’s logged on Chapter 5: Windows Server 2012 MMC administration Using the MMC MMC snap-ins MMC modes MMC window and startup MMC tool availability MMC and remote computers Building custom MMCs Step 1: Creating the console Step 2: Adding snap-ins to the console Step 3: Saving the finished console Setting the initial console view before saving Setting the console mode before saving Setting the console icon before saving Saving the console tool Designing custom taskpads for the MMC Getting started with taskpads Understanding taskpad view styles Creating and managing taskpads Creating and managing tasks Creating menu command tasks Creating shell command tasks Creating navigation tasks Arranging, editing, and removing tasks Publishing and distributing your custom tools Chapter 6: Configuring roles, role services, and features Using roles, role services, and features Making supplemental components available Installing components with Server Manager Viewing configured roles and role services Managing server roles and features Adding server roles and features Removing server roles and features Managing server binaries Installing components at the prompt Going to the prompt for Server Management Understanding component names Tracking installed roles, role services, and features Installing components at the prompt Removing components at the prompt Chapter 7: Managing and troubleshooting hardware Understanding hardware installation changes Choosing internal devices Choosing external devices Installing devices Understanding device installation Installing new devices Viewing device and driver details Working with device drivers Device driver essentials Understanding and troubleshooting driver signing Viewing driver Information Viewing Advanced, Resources, and other settings Installing and updating device drivers Restricting device installation using Group Policy Rolling back drivers Removing device drivers for removed devices Uninstalling, reinstalling, and disabling device drivers Managing hardware Adding non–Plug and Play, legacy hardware Enabling and disabling hardware Troubleshooting hardware Resolving resource conflicts Chapter 8: Managing the registry Introducing the registry Understanding the registry structure Registry root keys HKEY_LOCAL_MACHINE HKLM\BCD00000000 HKLM\HARDWARE HKLM\SAM HKLM\SECURITY HKLM\SOFTWARE HKLM\SYSTEM HKEY_USERS HKEY_CLASSES_ROOT HKEY_CURRENT_CONFIG HKEY_CURRENT_USER Registry data: How it is stored and used Where registry data comes from Types of registry data available Registry administration Searching the registry Modifying the registry Modifying values Adding keys and values Removing keys and values Modifying the registry of a remote machine Importing and exporting registry data Loading and unloading hive files Working with the registry from the command line Backing up and restoring the registry Maintaining the registry Using the Microsoft Fix It Utility Removing registry settings for active installations that have failed Removing partial or damaged settings for individual applications Securing the registry Preventing access to the registry utilities Applying permissions to registry keys Controlling remote registry access Auditing registry access Chapter 9: Software and User Account Control administration Software installation essentials Mastering User Account Control Elevation, prompts, and the secure desktop Configuring UAC and Admin Approval Mode Maintaining application integrity Application access tokens Application run levels Configuring run levels Controlling application installation and run behavior Chapter 10: Performance monitoring and tuning Tuning performance, memory usage, and data throughput Tuning Windows operating system performance Tuning processor scheduling Tuning virtual memory Other important tuning, memory, and data considerations Tracking a system’s general health Monitoring essentials Getting processor and memory usage for troubleshooting Getting information on running applications Monitoring and troubleshooting processes Monitoring and troubleshooting services Getting network usage information Getting information on user and remote user sessions Tracking events and troubleshooting by using Event Viewer Understanding the event logs Accessing the event logs and viewing events Viewing event logs on remote systems Sorting, finding, and filtering events Sorting the event logs Searching the event logs Filtering the event logs Archiving event logs Tracking events using Windows PowerShell Using subscriptions and forwarded events Chapter 11: Comprehensive performance analysis and logging Establishing performance baselines Tracking per-process resource usage Getting an overview of resource utilization Tracking per-process CPU utilization Tracking per-process memory utilization Tracking per-process disk utilization Tracking per-process network utilization Tracking the overall reliability of the server Comprehensive performance monitoring Using Performance Monitor Selecting performance objects and counters to monitor Choosing views and controlling the display Monitoring performance remotely Resolving performance bottlenecks Resolving memory bottlenecks Resolving processor bottlenecks Resolving disk I/O bottlenecks Resolving network bottlenecks Performance logging Creating and managing data collector sets Using data collector templates Collecting performance counter data Collecting performance trace data Collecting configuration data Viewing data collector reports Configuring performance counter alerts Monitoring performance from the command line Analyzing trace logs at the command line Part 3: Managing Windows Server 2012 Storage and File Systems Chapter 12: Storage management Essential storage technologies Using internal and external storage devices Storage-management features and tools Storage-management role services Booting from SANs, and using SANs with clusters Working with SMB 3.0 Installing and configuring file services Configuring the File And Storage Services role Configuring multipath I/O Adding and removing multipath hardware devices Managing and maintaining MPIO Meeting performance, capacity, and availability requirements Configuring Hyper-V Understanding Hyper-V Installing Hyper-V Creating virtual machines Configuring storage Using the Disk Management tools Adding new disks Using the MBR and GPT partition styles Working with MBR disks Working with GPT disks Using and converting MBR and GPT disks Using the disk storage types Working with basic and dynamic disks Using and converting basic and dynamic disks Creating and managing virtual hard disks for Hyper-V Converting FAT or FAT32 to NTFS Working with removable disks Managing MBR disk partitions on basic disks Creating partitions and simple volumes Formatting a partition, logical drive, or volume Configuring drive letters Configuring mount points Extending partitions Shrinking partitions Deleting a partition, logical drive, or volume Managing GPT disk partitions on basic disks ESP MSR partitions Primary partitions LDM Metadata and LDM Data partitions OEM or unknown partitions Managing volumes on dynamic disks Creating a simple or spanned volume Configuring RAID 0: Striping Recovering a failed simple, spanned, or striped disk Moving dynamic disks Configuring RAID 1: Disk mirroring Creating a mirrored set using two new disks Adding a mirror to an existing volume Mirroring boot and system volumes Mirroring boot and system volumes on MBR disks Mirroring boot and system volumes on GPT disks Configuring RAID 5: Disk striping with parity Breaking or removing a mirrored set Resolving problems with mirrored sets Repairing a mirrored system volume Rebuilding mirrored system volumes on MBR disks Rebuilding mirrored system volumes on GPT disks Resolving problems with RAID-5 sets Chapter 13: TPM and BitLocker Drive Encryption Working with trusted platforms Managing TPM Understanding TPM states and tools Managing TPM owner authorization information Preparing and initializing a TPM for first use Turning an initialized TPM on or off Clearing the TPM Changing the TPM owner password Introducing BitLocker Drive Encryption BitLocker essentials BitLocker modes BitLocker changes Using hardware encryption, secure boot, and Network Unlock Hardware encrypted drives Optimizing encryption Setting permitted encryption types Preparing BitLocker for startup authentication and secure boot Using Network Unlock Provisioning BitLocker prior to deployment Deploying BitLocker Drive Encryption Setting up and managing BitLocker Drive Encryption Configuring and enabling BitLocker Drive Encryption Determining whether a computer has BitLocker-encrypted volumes Enabling BitLocker on fixed data drives Enabling BitLocker on removable data drives Enabling BitLocker on operating-system volumes Managing and troubleshooting BitLocker Recovering data protected by BitLocker Drive Encryption Disabling or turning off BitLocker Drive Encryption Chapter 14: Managing file systems and storage Understanding the disk and file-system structure Using FAT File allocation table structure FAT features Using NTFS NTFS structure NTFS features Analyzing the NTFS structure Advanced NTFS features Hard links Data streams Change journals Object identifiers Reparse points Sparse files Transactional NTFS Using ReFS ReFS features ReFS structures ReFS advantages ReFS integrity streams, data scrubbing, and salvage Using file-based compression NTFS compression Compressed (zipped) folders Managing disk quotas How quota management works Configuring disk quotas Customizing quota entries for individual users Managing disk quotas after configuration Exporting and importing quota entries Automated disk maintenance Preventing disk-integrity problems Running Check Disk interactively Analyzing FAT volumes by using ChkDsk Analyzing NTFS volumes by using ChkDsk Repairing volumes and marking bad sectors by using ChkDsk Automated optimization of disks Preventing fragmentation of disks Fixing fragmentation by using Optimize Drives Understanding the fragmentation analysis Managing storage spaces Using and configuring offloaded transfers Working with available storage Creating storage pools and allocating space Creating storage spaces Creating a virtual disk in a storage space Creating a standard volume Configuring data deduplication Understanding data deduplication Selecting data for deduplication Interoperability with data deduplication Deduplicating volumes Monitoring deduplication Chapter 15: File sharing and security File-sharing essentials Understanding file-sharing models Enabling file sharing Using and finding shares Hiding and controlling share access Special and administrative shares C$, D$, E$, and other drive shares ADMIN$ FAX$ IPC$ NETLOGON PRINT$ SYSVOL Accessing shares for administration Creating and publishing shared folders Creating shares by using File Explorer Creating shares by using Computer Management Creating shared folders in Server Manager Changing shared folder settings Publishing shares in Active Directory Managing share permissions Understanding share permissions Configuring share permissions Managing access permissions File and folder ownership Permission inheritance for files and folders Changing shaded permissions and stopping inheritance Resetting and replacing permissions Configuring access permissions Basic permissions Special permissions Troubleshooting permissions Managing file shares after configuration Managing claims-based access controls Understanding central access policies Enabling dynamic controls and claims-based policy Defining central access policies Auditing file and folder access Enabling basic auditing for files and folders Enabling advanced auditing Specifying files and folders to audit Extending access policies to auditing Monitoring the security logs Shadow copy essentials Using shadow copies of shared folders How shadow copies work Implementing Shadow Copies for Shared Folders Managing shadow copies in Computer Management Configuring shadow copies in Computer Management Maintaining shadow copies after configuration Reverting an entire volume Configuring shadow copies at the command line Enabling shadow copying from the command line Create manual snapshots from the command line Viewing shadow copy information Deleting snapshot images from the command line Disabling shadow copies from the command line Reverting volumes from the command line Chapter 16: Managing file screening and storage reporting Understanding file screening and storage reporting Managing file screening and storage reporting Managing global file-resource settings Configuring email notifications Configuring notification limits Reviewing reports and configuring storage report parameters Configuring report locations Configuring file-screen auditing Configuring classification Enabling access-denied assistance Managing the file groups to which screens are applied Managing file-screen templates Creating file screens Defining file-screening exceptions Scheduling and generating storage reports Chapter 17: Backup and recovery Disaster-planning strategies Developing contingency procedures Implementing problem-escalation and response procedures Creating a problem-resolution policy document Disaster preparedness procedures Performing backups Repairing startup Setting startup and recovery options Developing backup strategies Creating your backup strategy Backup strategy considerations Selecting the optimal backup techniques Understanding backup types Using media rotation and maintaining additional media sets Backing up and recovering your data Using the backup utility Backing up your data Scheduling backups Performing a one-time backup Tracking scheduled and manual backups Recovering your data Recovering data stored on the current server Recovering data stored on another server Recovering the system state Restoring the operating system and the full system Backing up and restoring Active Directory Backup and recovery strategies for Active Directory Performing a nonauthoritative restore of Active Directory Performing an authoritative restore of Active Directory Restoring Sysvol data Restoring a failed domain controller by installing a new domain controller Troubleshooting startup and shutdown Resolving startup issues Repairing missing or corrupted system files Resolving restart or shutdown issues Part 4: Managing Windows Server 2012 Networking and Domain Services Chapter 18: Networking with TCP/IP Navigating networking in Windows Server 2012 Using TCP/IP Understanding IPv4 addressing Unicast IPv4 addresses Class A networks Class B networks Class C networks Loopback, public, and private addresses Multicast IPv4 addresses Broadcast IPv4 addresses Special IPv4 addressing rules Using subnets and subnet masks Subnet masks Network prefix notation Subnetting Subnetting Class A networks Subnetting Class B networks Subnetting Class C networks Understanding IP data packets Getting and using IPv4 addresses Understanding IPv6 Understanding name resolution Domain Name System Host names Domain names Fully qualified domain names Name resolution Windows Internet Naming Service Link-Local Multicast Name Resolution Chapter 19: Managing TCP/IP networking Installing TCP/IP networking Preparing for installation of TCP/IP networking Installing network adapters Installing networking services (TCP/IP) Configuring TCP/IP networking Configuring static IP addresses Testing an IP address Configuring a static IPv4 or IPv6 address Configuring dynamic IP addresses and alternate IP addressing Configuring multiple IP addresses and gateways Configuring DNS resolution Basic DNS settings Advanced DNS settings Configuring WINS resolution Managing network connections Checking the status, speed, and activity for network connections Viewing network configuration information Enabling and disabling network connections Renaming network connections Troubleshooting and testing network settings Diagnosing and resolving network connection problems Diagnosing and resolving Internet connection problems Performing basic network tests Diagnosing and resolving IP addressing problems Diagnosing and resolving routing problems Releasing and renewing DHCP settings Diagnosing and fixing name-resolution issues Chapter 20: Managing DHCP DHCP essentials DHCPv4 and autoconfiguration DHCPv6 and autoconfiguration DHCP security considerations DHCP and IPAM Planning DHCPv4 and DHCPv6 implementations DHCPv4 messages and relay agents DHCPv6 messages and relay agents DHCP availability and fault tolerance Failover scope: Load sharing Failover scope: Fault tolerance Traditional split scopes Setting up DHCP servers Installing the DHCP Server service Authorizing DHCP servers in Active Directory Creating and configuring scopes Creating normal scopes for IPv4 addresses Creating normal scopes for IPv6 addresses Creating normal scopes using Netsh Activating scopes Scope exclusions Scope reservations Creating and using failover scopes Configuring TCP/IP options Levels of options and their uses Policy-based assignment Options used by Windows clients Using user-specific and vendor-specific TCP/IP options Setting options for all clients Setting options for RRAS and NAP clients Setting add-on options for directly connected clients Defining classes to get different option sets Creating the class Configuring clients to use the class Advanced DHCP configuration and maintenance Monitoring DHCP audit logging Binding the DHCP Server service to a network interface Integrating DHCP and DNS Integrating DHCP and NAP Enabling conflict detection on DHCP servers Saving and restoring the DHCP configuration Managing and maintaining the DHCP database Setting DHCP database properties Backing up and restoring the database Setting up DHCP relay agents Configuring and enabling Routing And Remote Access Adding and configuring the DHCP relay agent Chapter 21: Architecting DNS infrastructure DNS essentials Planning DNS implementations Public and private namespaces Name resolution using DNS Understanding DNS devolution DNS resource records DNS zones and zone transfers Zones that aren’t integrated with Active Directory Zones that are integrated with Active Directory Secondary zones, stub zones, and conditional forwarding Integration with other technologies Security considerations DNS queries and security DNS dynamic updates and security External DNS name resolution and security Architecting a DNS design Split-brain design: Same internal and external names Separate-name design: Different internal and external names Securing DNS from attacks Chapter 22: Implementing and managing DNS Installing the DNS Server service Using DNS with Active Directory Using DNS without Active Directory DNS setup Configuring DNS using the wizard Configuring a small network using the Configure A DNS Server Wizard Configuring a large network using the Configure A DNS Server Wizard Configuring DNS zones, subdomains, forwarders, and zone transfers Creating forward lookup zones Creating reverse lookup zones Configuring forwarders and conditional forwarding Configuring subdomains and delegating authority Configuring zone transfers Configuring secondary notification Deploying DNSSEC DNSSEC essentials Securing zones with digital signatures Signing a zone Adding resource records Host Address (A and AAAA) and Pointer (PTR) records Canonical Name (CNAME) records Mail Exchanger (MX) records Name Server (NS) records Start of Authority (SOA) records Service Location (SRV) records Deploying global names Maintaining and monitoring DNS Configuring default application directory partitions and replication scope Setting the aging and scavenging rules Configuring logging and checking DNS Server logs Troubleshooting the DNS client service Try reregistering the client Check the client’s TCP/IP configuration Checking IPv4 Checking IPv6 Check the client’s resolver cache Perform lookups for troubleshooting Troubleshooting the DNS Server service Check the server’s TCP/IP configuration Check the server’s cache Check replication to other name servers Examine the configuration of the DNS server Examine zones and zone records Chapter 23: Implementing and maintaining WINS WINS essentials NetBIOS namespace and scope NetBIOS node types WINS name registration and cache WINS implementation details Setting up WINS servers Configuring replication partners Replication essentials Configuring automatic replication partners Using designated replication partners Configuring and maintaining WINS Configuring burst handling Checking server status and configuration Checking active registrations and scavenging records Maintaining the WINS database Verifying the WINS database consistency Compacting the WINS database Backing up the WINS database Restoring the WINS database Enabling WINS lookups through DNS Part 5: Managing Active Directory and Security Chapter 24: Active Directory architecture Active Directory physical architecture Active Directory physical architecture: A top-level view Active Directory within the Local Security Authority Directory service architecture Protocols and client interfaces Directory System Agent and database layer Extensible Storage Engine Data store architecture Active Directory logical architecture Active Directory objects Active Directory domains, trees, and forests Active Directory trusts Active Directory namespaces and partitions Active Directory data distribution Chapter 25: Designing and managing the domain environment Design considerations for Active Directory replication Design considerations for Active Directory search and global catalogs Searching the tree Accessing the global catalog Designating global catalog servers Designating replication attributes Design considerations for compatibility Understanding domain functional level Understanding forest functional level Raising or lowering the domain or forest functional level Design considerations for Active Directory authentication and trusts Universal groups and authentication Understanding security tokens and universal group membership caching Enabling universal group membership caching NTLM and Kerberos authentication Establishing the initial authentication Accessing resources after authentication Authentication and trusts across domain boundaries Two-way transitive trusts Shortcut trusts Authentication and trusts across forest boundaries Examining domain and forest trusts Establishing external, shortcut, realm, and cross-forest trusts Verifying and troubleshooting trusts Delegating authentication Delegated authentication essentials Configuring delegated authentication Configuring the delegated user account Configuring the delegated service or computer account Design considerations for Active Directory operations masters Operations master roles Using, locating, and transferring the schema master role Using, locating, and transferring the domain naming master role Using, locating, and transferring the relative ID master role Using, locating, and transferring the PDC emulator role Using, locating, and transferring the infrastructure master role Seizing operations master roles Chapter 26: Organizing Active Directory Creating an Active Directory implementation or update plan Developing a forest plan Forest namespace A single forest vs. multiple forests Forest administration Developing a domain plan Domain design considerations A single domain vs. multiple domains Forest root domain design configurations Changing domain design Developing an organizational unit plan Using organizational units Using OUs for delegation Using OUs for Group Policy Creating an OU design OU design: Division or business unit model OU design: Geographic model OU design: The cost center model OU design: The administration model Chapter 27: Configuring Active Directory sites and replication Working with Active Directory sites Single site vs. multiple sites Replication within and between sites Determining site boundaries Understanding Active Directory replication Tracking Active Directory replication changes over time Tracking Active Directory system volume changes over time Replication architecture: An overview Intersite replication essentials Replication rings and directory partitions Developing or revising a site design Mapping network infrastructure Creating a site design Mapping the network structure to the site structure Designing each individual site Designing the intersite replication topology Considering the impact of site-link bridging Planning the placement of servers in sites Chapter 28: Implementing Active Directory Domain Services Preinstallation considerations for Active Directory Hardware and configuration considerations for domain controllers Configuring Active Directory for fast recovery with storage area networks Connecting clients to Active Directory Installing Active Directory Domain Services Active Directory installation options and issues Using the Active Directory Domain Services Configuration Wizard Creating additional domain controllers for an existing domain Creating new domains in new forests Creating a new domain or domain tree within an existing forest Performing an Active Directory installation from media Cloning virtualized domain controllers Using clones of virtualized domain controllers Creating a clone virtualized domain controller Finalizing the clone deployment Troubleshooting the clone deployment Uninstalling Active Directory Creating and managing organizational units Creating an OU Setting OU properties Creating or moving accounts and resources for use with an OU Delegating the administration of domains and OUs Understanding delegation of administration Delegating administration Chapter 29: Deploying read-only domain controllers Introducing read-only domain controllers Design considerations for read-only replication Installing RODCs Preparing for an RODC installation Installing an RODC Installing an RODC from media Staging an RODC Managing Password Replication Policy Working with Password Replication Policy Allowing or denying accounts in Password Replication Policy Viewing and managing credentials on an RODC Determining whether an account is allowed or denied access Resetting credentials Delegating administrative permissions Chapter 30: Managing users, groups, and computers Managing domain user accounts Configuring user account policies Enforcing Password Policy Configuring Account Lockout Policy Setting Kerberos Policy Creating Password Settings Objects and applying secondary settings Understanding user account capabilities, privileges, and rights Assigning user rights Assigning user rights for a domain or OU Assigning user rights on a specific computer Creating and configuring domain user accounts Obtaining effective access Configuring account options Configuring profile options Troubleshooting user accounts Maintaining user accounts Deleting user accounts Disabling and enabling user accounts Moving user accounts Renaming user accounts Resetting a user’s domain password Unlocking user accounts Creating a user account password backup Managing groups Understanding groups Creating a group Adding members to groups Deleting a group Modifying groups Finding a group Managing computer accounts Creating a computer account in Active Directory Joining computers to a domain Moving a computer account Disabling a computer account Deleting a computer account Managing a computer account Resetting a computer account Troubleshooting computer accounts Recovering deleted accounts Enabling Active Directory Recycle Bin Recovering objects from the recycle bin Chapter 31: Managing Group Policy Understanding Group Policy Local and Active Directory Group Policy Group Policy settings Group Policy architecture Administrative templates Implementing Group Policy Working with Local Group Policy Working with Group Policy Management Console Using Group Policy Management Console Accessing forests, domains, and sites in Group Policy Management Console Creating and linking a new GPO in Group Policy Management Console Editing an existing GPO in Group Policy Management Console Linking to an existing GPO in Group Policy Management Console Working with starter GPOs Deleting an existing GPO in Group Policy Management Console Working with the default Group Policy Objects Managing Group Policy through delegation Managing GPO creation rights Reviewing Group Policy management privileges Delegating Group Policy management privileges Delegating privileges for links and RSoP Managing Group Policy inheritance and processing Group Policy inheritance Changing link order and precedence Overriding inheritance Blocking inheritance Enforcing inheritance Filtering Group Policy application Group Policy processing Modifying Group Policy processing Modifying user policy preference using loopback processing Using scripts in Group Policy Configuring computer startup and shutdown scripts Configuring user logon and logoff scripts Applying Group Policy through security templates Working with security templates Applying security templates Maintaining and troubleshooting Group Policy Group Policy refresh Modifying Group Policy refresh Viewing applicable GPOs and the last refresh Modeling GPOs for planning Refreshing Group Policy manually Backing up GPOs Restoring GPOs Fixing default Group Policy Chapter 32: Active Directory site administration Managing sites and subnets Creating an Active Directory site Creating a subnet and associating it with a site Associating domain controllers with a site Managing site links and intersite replication Understanding IP and SMTP replication transports Creating a site link Configuring replication schedules for site links Configuring site-link bridges Determining the ISTG Configuring site bridgehead servers Configuring advanced site-link options Monitoring and troubleshooting replication Using the Replication Administrator Using PowerShell to monitor and troubleshoot replication Monitoring replication Modifying intersite replication for testing Index to troubleshooting topics Index About the author Survey page