Chapter
The Microsoft Certification Program
How Do You Become Certified on Windows Server 2012 R2?
Tips for Taking the Windows Server 2012 R2 Exams
Who Should Read This Book?
What's Included with the Book
Recommended Home Lab Setup
How to Contact the Author/Sybex
Certification Objectives Maps
Part I: Exam 70-410: Installing and Configuring Windows Server 2014
Part II: Exam 70-411: Administering Windows Server 2012
Part III: Exam 70-412: Configuring Advanced Windows Server 2012 Services
Part I: Exam 70-410: Installing and Configuring Windows Server 2012 R2
Chapter 1: Install Windows Server 2012 R2
Features and Advantages of Windows Server 2012 and Server 2012 R2
Planning the Windows Server 2012 R2 Installation
Server Roles in Windows Server 2012 R2
Migrating Roles and Features to Windows Server 2012 R2
Roles and Features That Have Been Reduced in Windows Server 2012 R2
Deciding Which Windows Server 2012 R2 Versions to Use
Deciding on the Type of Installation
Installing Windows Server 2012 R2
Using Windows Deployment Services
Understanding Features On Demand
Storage in Windows Server 2012 R2
Configuring Basic and Dynamic Disks
Storage Spaces in Windows Server 2012 R2
Redundant Array of Independent Disks
Internet Storage Name Service
Chapter 2: Configure Network Services
The Form of an IP Address
Understanding Servers, Clients, and Resolvers
Understanding the DNS Process
Introducing DNS Database Zones
Understanding Primary Zones
Understanding Secondary Zones
Understanding Active Directory Integrated DNS
Zone Transfers and Replication
Advantages of DNS in Windows Server 2012 R2
Support for IPv6 Addresses
Support for Read-Only Domain Controllers
Windows PowerShell Support
Introducing DNS Record Types
Start of Authority Records
Load Balancing with Round Robin
Configuring a Caching-Only Server
Configuring Zones for Dynamic Updates
Manually Creating DNS Records
Monitoring and Troubleshooting DNS
Monitoring DNS with the DNS Snap-In
Introducing the DORA Process
Advantages and Disadvantages of DHCP
Understanding Scope Details
Installing and Authorizing DHCP
Introducing the DHCP Snap-In
Authorizing DHCP for Active Directory
Creating and Managing DHCP Scopes
Creating a New Scope in IPv4
Creating a New Scope in IPv6
Changing Scope Properties ( IPv4 and IPv6)
Changing Server Properties
Managing Reservations and Exclusions
Setting Scope Options for IPv4
Activating and Deactivating Scopes
Creating a Superscope for IPv4
Creating IPv4 Multicast Scopes
Integrating Dynamic DNS and IPv4 DHCP
Using Multiple DHCP Servers
Working with the DHCP Database Files
Chapter 3: Plan and Install Active Directory
Verifying the File system
Resilient File System ( ReFS)
Verifying Network Connectivity
Tools and Techniques for Testing Network Configuration
Understanding Domain and Forest Functionality
About the Domain Functional Level
About Forest Functionality
Planning the Domain Structure
Installing Active Directory
Active Directory Prerequisites
Deploying Active Directory IaaS in Windows Azure
Verifying Active Directory Installation
Using Active Directory Administrative Tools
Creating and Configuring Application Data Partitions
Creating Application Data Partitions
Using ntdsutil to Manage Application Data Partitions
Configuring DNS Integration with Active Directory
Chapter 4: Configure Windows Server 2012 R2
Understanding File Servers
Making Active Directory Objects Available to Users
Configuring Offline Files
Volume Shadow Copy Services
Configuring Print Services
Creating and Publishing Printers
Configuring Remote Management
Windows Remote Management
Configuring Down-Level Servers
Chapter 5: Administer Active Directory
Planning the OU Structure
Logical Grouping of Resources
Understanding OU Inheritance
Delegating Administrative Control
Moving, Deleting, and Renaming OUs
Administering Properties of OUs
Delegating Control of OUs
Creating and Managing Active Directory Objects
Overview of Active Directory Objects
Managing Object Properties
Filtering and Advanced Active Directory Features
Moving, Renaming, and Deleting Active Directory Objects
Resetting an Existing Computer Account
Publishing Active Directory Objects
Making Active Directory Objects Available to Users
Publishing Shared Folders
Querying Active Directory
Using the Active Directory Administrative Center
Using the Command Prompt for Active Directory Configuration
Understanding Group Policy Settings
The Security Settings Section of the GPO
Planning a Group Policy Strategy
Implementing Group Policy
Linking Existing GPOs to Active Directory
Security Filtering of a Group Policy
Delegating Administrative Control of GPOs
Controlling Inheritance and Filtering Group Policy
Assigning Script Policies
Understanding the Loopback Policy
Managing Network Configuration
Automatically Enrolling User and Computer Certificates in Group Policy
Managing GPOs with Windows PowerShell Group Policy Cmdlets
Deploying Software Through a GPO
The Software Management Life Cycle
Implementing Software Deployment
Preparing for Software Deployment
Software Restriction Policies
Group Policy Slow Link Detection
Publishing and Assigning Applications
Applying Software Updates
Verifying Software Installation
Configuring Automatic Updates in Group Policy
Configuring Software Deployment Settings
The Software Installation Properties Dialog Box
Microsoft Windows Installer Settings
Troubleshooting Group Policies
Using the gpresult.exe Command
Chapter 7: Manage Security
Understanding Security Principals
Managing Security and Permissions
Configuring User Account Control
Delegating Control of Users and Groups
Understanding Dynamic Access Control
Using Group Policy for Security
Implementing an Audit Policy
Using the Auditpol.exe Command
Features of Windows Server 2012 R2 Auditing
Configuring Windows Firewall Options
Chapter 8: Configure TCP/IP
Details of the TCP/IP Model
How TCP/IP Layers Communicate
Understanding Port Numbers
Understanding IP Addressing
The Hierarchical IP Addressing Scheme
Understanding Network Classes
An Easier Way to Apply Subnetting
Applying Subnetting the Traditional Way
Working with Classless Inter-Domain Routing
New and Improved IPv6 Concepts
IPv6 Integration/Migration
Chapter 9: Use Virtualization in Windows Server 2012
Hyper-V Installation and Configuration
Hyper-V in Server Manager
Configure Hyper-V Settings
Managing Virtual Hard Disks
Configuring Virtual Machines
Creating and Managing Virtual Machines
Part II: Exam 70-411: Administering Windows Server 2012 R2
Chapter 10: Manage and Maintain Servers
Using Windows Deployment Services
Configuring Windows Server Update Services
Windows Automatic Updates
Using Windows Server Update Services
Overview of Windows Server 2012 R2 Performance Monitoring
Using Windows Server 2012 R2 Performance Tools
Introducing Performance Monitor
Using Other Performance-Monitoring Tools
Chapter 11: Manage File Services
Configuring File Server Resource Manager
Installing the FSRM Role Service
Configure File and Disk Encryption
Using BitLocker Drive Encryption
Windows 7 and 2008 R2 vs. Windows 8 and 2012 R2
Using EFS Drive Encryption
Configuring Distributed File System
What's New in Windows Server 2012 R2
Remote Differential Compression
Implementing an Audit Policy
Viewing Auditing Information
Using the Auditpol.exe Command
Windows Server 2012 R2 Auditing Features
Making Active Directory Objects Available to Users
Configuring Offline Folders
Chapter 12: Configure DNS
The Form of an IP Address
Understanding Servers, Clients, and Resolvers
Understanding the DNS Process
Introducing DNS Database Zones
Understanding Primary Zones
Understanding Secondary Zones
Understanding Active Directory Integrated DNS
Zone Transfers and Replication
Advantages of DNS in Windows Server 2012 R2
Support for IPv6 Addresses
Support for Read-Only Domain Controllers
Introducing DNS Record Types
Start of Authority (SOA) Records
Load Balancing with Round Robin
Configuring a Caching-Only Server
Configuring Zones for Dynamic Updates
Manually Creating DNS Records
Monitoring and Troubleshooting DNS
Monitoring DNS with the DNS Snap-In
Integrating Dynamic DNS and IPv4 DHCP
Chapter 13: Configure Routing and Remote Access
Overview of Dial-Up Networking
Overview of Virtual Private Networks
VPNs and Windows Server 2012 R2
Configuring Your Remote Access Server
Managing Your Remote Access Server
Managing Remote Users with a RADIUS Server
Monitoring Overall Activity
Controlling Remote Access Logging
Reviewing the Remote Access Event Log
Monitoring Ports and Port Activity
Network Address Translation
Configuring a Web Application Proxy
Configuring Pass-Through Authentication
Understanding DirectAccess
Understanding the DirectAccess Process
Knowing the DirectAccess Infrastructure Requirements
Chapter 14: Configure a Network Policy Server Infrastructure
Overview of Wireless Access
Configuring Wireless Access
Using Network Access Policies
NPS as a RADIUS Proxy Server
Importing and Exporting NPS Policies
Using Remote Access Profiles
Setting Up a VPN Network Access Policy
Controlling Server Security
Configuring Network Access Protection
Chapter 15: Configure and Manage Active Directory
Active Directory Security Overview
Understanding Active Directory Features
Understanding Security Principals
Managing Security and Permissions
Implementing Active Directory Security
Delegating Control of Users and Groups
Understanding Dynamic Access Control
Using Group Policy for Security
Fine-Grained Password Policies
Managing Multiple Domains
Managing Single-Master Operations
Forest Operations Masters
Domain Operations Masters
Assigning Single-Master Roles
Maintain Active Directory
Overview of the Windows Server 2012 R2 Backup Utility
Setting Up an Active Directory Backup
Restoring Active Directory
Active Directory Recycle Bin
Restartable Active Directory
Wbadmin Command Line Utility
Chapter 16: Configure and Manage Group Policy
Introducing Group Policy Objects
Understanding Group Policy Settings
The Security Settings Section of the GPO
Planning a Group Policy Strategy
Implementing Group Policy
Linking Existing GPOs to Active Directory
Security Filtering of a Group Policy
Delegating Administrative Control of GPOs
Controlling Inheritance and Filtering Group Policy
Assigning Script Policies
Understanding the Loopback Policy
Managing Network Configuration
Automatically Enrolling User and Computer Certificates in Group Policy
Managing GPOs with Windows PowerShell Group Policy Cmdlets
Backup, Restore, Import, Copy, and Migration Tables
Deploying Software Through a GPO
The Software Management Life Cycle
Implementing Software Deployment
Preparing for Software Deployment
Software Restriction Policies
Group Policy Slow Link Detection
Publishing and Assigning Applications
Applying Software Updates
Verifying Software Installation
Configuring Automatic Updates in Group Policy
Configuring Software Deployment Settings
The Software Installation Properties Dialog Box
Microsoft Windows Installer Settings
Troubleshooting Group Policies
Using the gpresult.exe Command
Part III: Exam 70-412: Configuring Advanced Windows Server 2012 R2 Services
Chapter 17: Configure and Manage High Availability
Components of High Availability
Achieving High Availability
High Availability Foundation
Configure Network Load Balancing
Achieving High Availability with Failover Clustering
Failover Clustering Requirements
Validating a Cluster Configuration
Clustered Application Settings
Windows Server 2012 R2 Clustering Features
Chapter 18: Configure File and Storage Solutions
Configure Advanced File Services
Configure the NFS Data Store
Configure File Classification Infrastructure Using File Server Resource Manager
Configure File Access Auditing
Implement Dynamic Access Control
Configure User and Device Claim Types
Create and Configure Resource Properties and Lists
Create and Configure Central Access Rules and Policies
Configure File Classification
Implement Policy Changes and Staging
Perform Access-Denied Remediation
Configure and Optimize Storage
Configure iSCSI Target and Initiator
Configure Internet Storage Name Server
Implement Thin Provisioning and Trim
Manage Server Free Space Using Features on Demand
Chapter 19: Implement Business Continuity and Disaster Recovery
Backup and Recovery of Active Directory
Overview of the Windows Server 2012 R2 Backup Utility
Setting Up an Active Directory Backup
Restoring Active Directory
Active Directory Recycle Bin
Restartable Active Directory
Wbadmin Command-Line Utility
Configure Windows Azure Backups
Understanding Shadow Copies
Using Advanced Boot Options
Using Other Advanced Boot Options Menu Modes
Windows Recovery Environment
Configure Site-Level Fault Tolerance
Using the Startup Repair Tool
Chapter 20: Configure Advanced Network Services
Working with Advanced DHCP Configuration Options
Create and Configure Superscopes
Create and Configure Multicast Scopes
Configure High Availability for DHCP Including DHCP Failover and Split Scopes
Configure DHCP Name Protection
Configure DNS Registration
Configure Delegated Administration
Configure Netmask Ordering
Configure a GlobalNames Zone
Analyze Zone-Level Statistics
Provision IPAM Manually or by Using Group Policy
Configure Server Discovery
Create and Manage IP Blocks and Ranges
Monitor Utilization of IP Address Space
Delegate IPAM Administration
Configure IPAM Database Storage
Chapter 21: Configure the Active Directory Infrastructure
Overview of Network Planning
The Three Types of Networks
Exploring Network Constraints
Overview of Active Directory Replication and Sites
Replicating Active Directory
Understanding Active Directory Site Concepts
Understanding Distributed File System Replication
Implementing Sites and Subnets
Configuring Server Topology
Using Universal Group Membership Caching
Monitoring and Troubleshooting Active Directory Replication
Troubleshooting Replication
Reasons for Creating Multiple Domains
Reasons for Using Multiple Domains
Drawbacks of Multiple Domains
Creating Domain Trees and Forests
Planning Trees and Forests
Joining a New Domain Tree to a Forest
Adding Additional Domain Controllers
Demoting a Domain Controller
Managing Multiple Domains
Managing Single-Master Operations
Forest Operations Masters
Domain Operations Masters
Assigning Single-Master Roles
Managing Global Catalog Servers
Managing Universal Group Membership Caching
Upgrading Existing Domains and Forests
Chapter 22: Configure Access and Information Protection Solutions
What's New in Windows Server 2012 R2 with Active Directory Certificate Services?
Active Directory Certificate Services Roles
Planning the Certificate Authority Hierarchy
Configuring Active Directory Certificate Services
Implement Active Directory Federation Services
What's New for AD FS in Windows Server 2012 R2?
Active Directory Federation Services Installation
Device Registration Service
Workplace Join Your Device
Active Directory Rights Management Services
Considerations and Requirements for AD RMS
Managing AD RMS: AD RMS Service Connection Point
Appendix A: Answers to Review Questions
Chapter 1: Install Windows Server 2012 R2
Chapter 2: Configure Network Services
Chapter 3: Plan and Install Active Directory
Chapter 4: Configure Windows Server 2012 R2
Chapter 5: Administer Active Directory
Chapter 7: Manage Security
Chapter 8: Configure TCP/IP
Chapter 9: Use Virtualization in Windows Server 2012
Chapter 10: Manage and Maintain Servers
Chapter 11: Manage File Services
Chapter 12: Configure DNS
Chapter 13: Configure Routing and Remote Access
Chapter 14: Configure a Network Policy Server Infrastructure
Chapter 15: Configure and Manage Active Directory
Chapter 16: Configure and Manage Group Policy
Chapter 17: Configure and Manage High Availability
Chapter 18: Configure File and Storage Solutions
Chapter 19: Implement Business Continuity and Disaster Recovery
Chapter 20: Configure Advanced Network Services
Chapter 21: Configure the Active Directory Infrastructure
Chapter 22: Configure Access and Information Protection Solutions
Appendix B: About the Additional Study Tools
Free Interactive Online Study Environment
End User License Agreement
MCSA Windows Server 2012 R2 Complete Study Guide
：Exams 70-410, 70-411, 70-412, and 70-417
Disclaimer: Any content in publications that violate the sovereignty, the constitution or regulations of the PRC is not accepted or approved by CNPIEC.
