Identity with Windows Server 2016 : Microsoft 70-742 MCSA Exam Guide

Description

Title Page......Page 2 Copyright and Credits......Page 3 Identity with Windows Server 2016: Microsoft 70-742 MCSA Exam Guide......Page 4 About Packt......Page 5 Why subscribe?......Page 6 Packt.com......Page 7 Contributors......Page 8 About the authors......Page 9 About the reviewer......Page 10 Packt is searching for authors like you......Page 11 Preface......Page 17 Who this book is for......Page 18 What this book covers......Page 19 To get the most out of this book......Page 20 Conventions used......Page 21 Get in touch......Page 22 Reviews......Page 23 Installing and Configuring Active Directory......Page 24 Introduction to Active Directory......Page 25 Logical components......Page 26 Partitions......Page 27 Schemas......Page 28 Domains......Page 29 Domain trees......Page 31 Forests......Page 32 Sites......Page 34 Organizational Units......Page 35 Containers......Page 36 Physical components......Page 37 Domain controllers......Page 38 Read-only domain controllers......Page 39 Data stores......Page 40 Global catalogs......Page 41 What's new in AD DS in Windows Server 2016......Page 42 AD DS administration tools......Page 43 Installing and configuring the Active Directory......Page 45 Installing a new forest and domain controller......Page 46 Installing a new forest (GUI)......Page 47 Installing a new forest on a Server Core installation......Page 48 Installing a domain controller from Install from Media (IFM)......Page 49 Removing a domain controller from a domain......Page 53 Upgrading a domain controller......Page 63 In-place upgrade......Page 64 Domain-controller migration......Page 65 Configuring a global catalog server......Page 66 Transferring and seizing operation master roles......Page 69 Transferring FSMO roles......Page 70 Seizing FSMO roles......Page 72 Installing and configuring a read-only domain controller (RODC)......Page 73 Configuring domain controller cloning......Page 75 Active Directory users and computers......Page 77 Creating and managing users accounts......Page 78 Creating and managing computer accounts......Page 87 Configuring templates......Page 89 Performing bulk Active Directory operations......Page 90 Implementing offline domain joins......Page 92 Managing accounts......Page 93 Active Directory groups and organizational units......Page 94 Creating, configuring, and deleting groups......Page 95 Configuring group nesting......Page 99 Converting groups......Page 101 Managing group membership using Group Policy......Page 104 Enumerating group memberships......Page 106 Automating group-membership management using Windows PowerShell......Page 109 Delegating the creation and management of Active Directory groups......Page 110 Active Directory containers......Page 112 Creating, configuring, and deleting OUs......Page 113 Summary......Page 115 Questions......Page 116 Further reading......Page 118 Managing and Maintaining Active Directory......Page 119 Active directory authentication and account policies ......Page 120 Creating and configuring managed service accounts ......Page 121 Configuring Kerberos Constrained Delegation (KCD)......Page 125 Managing service principal names (SPNs) ......Page 127 Configuring domain and local user password policy settings ......Page 130 Configuring and applying Password Settings Objects (PSOs)......Page 133 Delegating password settings management......Page 138 Configuring account lockout policy settings......Page 143 Configuring the Kerberos policy settings within the group policy......Page 146 Configuring authentication policies......Page 148 Maintaining AD......Page 149 Backing up AD and SYSVOL......Page 150 Restoring AD......Page 151 Non-authoritative restoration......Page 152 Authoritative restoration......Page 153 Managing the AD offline......Page 154 Performing the offline defragmentation of an AD database......Page 155 Configuring AD snapshots......Page 157 Performing object-level and container-level recovery......Page 161 AD Recycle Bin (configuring and restoring objects)......Page 162 Configuring the Password Replication Policy (PRP) for RODC......Page 166 Monitoring and managing replication......Page 168 AD in enterprise scenarios......Page 170 Configuring a multi-domain and multi-forest AD infrastructure......Page 171 Upgrading existing domains and forests......Page 172 Configuring the domain and forest functional levels......Page 173 Configuring multiple user principal name (UPN) suffixes......Page 176 Configuring external, forest, shortcut, and realm trusts......Page 180 Configuring trust filtering......Page 183 SID filtering......Page 184 Selective authentication......Page 185 Named suffix routing......Page 186 Configuring sites and subnets......Page 187 Creating and configuring site links......Page 189 Moving domain controllers between sites......Page 190 Summary......Page 191 Questions......Page 192 Further reading......Page 194 Creating and Managing Group Policy......Page 195 Creating and managing GPOs......Page 196 Introduction to Group Policy......Page 197 Managing starter GPOs......Page 198 Configuring GPO links......Page 199 Configuring multiple Local Group Policy......Page 201 Backing up, importing, copying, and restoring GPOs......Page 204 Resetting default GPOs......Page 205 Delegate Group Policy management......Page 206 Detecting health issues using Group Policy......Page 207 Understanding Group Policy processing......Page 213 Configuring the processing order and precedence......Page 214 Configuring inheritance blocking......Page 216 Configuring enforced policies......Page 219 Configuring security filtering and WMI filtering......Page 220 Configuring loopback processing......Page 223 Configuring Group Policy caching......Page 225 Forcing a Group Policy update......Page 226 Configuring Group Policy settings and preferences......Page 227 Defining network drive mappings......Page 228 Configuring custom registry settings......Page 232 Configuring the Control Panel settings......Page 234 Configuring folder redirections......Page 236 Configuring shortcut deployment......Page 240 Configuring item-level targeting......Page 243 Summary......Page 248 Questions......Page 249 Further reading......Page 251 Understanding and Implementing Active Directory Certificate Services......Page 252 Installing and configuring AD CS......Page 253 An overview of AD CS......Page 254 Installing Active Directory Integrated Enterprise Certificate Authority......Page 256 Installing offline roots and subordinate CAs......Page 260 Configuring Offline Root CA......Page 261 Configuring the subordinate CA......Page 270 Installing Standalone CAs......Page 272 Configuring Certificate Revocation List (CRL) distribution points......Page 273 Installing and configuring Online Responder......Page 274 Implementing administrative role separation......Page 277 Configuring CA backup and recovery......Page 278 Backing up CA......Page 279 Restoring CA......Page 280 Managing certificates and templates......Page 281  Managing certificates......Page 282 Managing certificate templates......Page 283 Implementing and managing certificate deployment, validation, and revocation......Page 288 Managing certificate renewal......Page 295 Managing AD CS......Page 296 Configuring and managing key archival and recovery......Page 297 Summary......Page 305 Questions......Page 306 Further reading......Page 308 Understanding and Implementing Federation and Rights Management......Page 309 Installing and configuring Active Directory Federation Services (AD FS)......Page 310 AD FS overview......Page 311 Upgrading and migrating AD FS workloads to Windows Server 2016......Page 312 Installing AD FS......Page 314 Upgrading AD FS......Page 317 Implementing claim-based authentication and relying party trust......Page 318 Implementing and configuring device registration......Page 325 Configuring AD FS for use with Microsoft Azure and Office 365......Page 330 Installing and configuring Web Application Proxy......Page 332 Installing and configuring WAP......Page 333 Implementing WAP in pass-through mode and as AD FS proxy......Page 338 Pass-through pre-authentication......Page 339 AD FS pre-authentication......Page 342 Publishing Remote Desktop Gateway applications......Page 343 Installing and configuring the Active Directory Rights Management Services (AD RMS)......Page 344 AD RMS overview......Page 345 AD RMS certificates......Page 346 How AD RMS works......Page 347 Deploying the AD RMS Cluster......Page 349 Managing AD RMS Service Connection Point (SCP)......Page 351 Managing AD RMS templates......Page 353 Configuring Exclusion Policies......Page 356 Backing up and restoring AD RMS......Page 360 Summary......Page 361 Questions......Page 362 Further reading......Page 364 Assessements......Page 365 Chapter 1:  Installing and Configuring Active Directory......Page 366 Chapter 2: Managing and Maintaining Active Directory......Page 367 Chapter 3: Creating and Managing Group Policy......Page 368 Chapter 4: Understanding and Implementing Active Directory Certificate Services......Page 369 Chapter 5: Understanding and Implementing Federation and Rights Management......Page 370