Identity with Windows Server 2016: Microsoft 70-742 MCSA Exam Guide电子书

Title Page

Copyright and Credits

Identity with Windows Server 2016: Microsoft 70-742 MCSA Exam Guide

About Packt

Why subscribe?

Packt.com

Contributors

About the authors

About the reviewer

Packt is searching for authors like you

Preface

Who this book is for

What this book covers

To get the most out of this book

Conventions used

Get in touch

Reviews

Installing and Configuring Active Directory

Introduction to Active Directory

Logical components

Partitions

Schemas

Domains

Domain trees

Forests

Sites

Organizational Units

Containers

Physical components

Domain controllers

Read-only domain controllers

Data stores

Global catalogs

What's new in AD DS in Windows Server 2016

AD DS administration tools

Installing and configuring the Active Directory

Installing a new forest and domain controller

Installing a new forest (GUI)

Installing a new forest on a Server Core installation

Installing a domain controller from Install from Media (IFM)

Removing a domain controller from a domain

Upgrading a domain controller

In-place upgrade

Domain-controller migration

Configuring a global catalog server

Transferring and seizing operation master roles

Transferring FSMO roles

Seizing FSMO roles

Installing and configuring a read-only domain controller (RODC)

Configuring domain controller cloning

Active Directory users and computers

Creating and managing users accounts

Creating and managing computer accounts

Configuring templates

Performing bulk Active Directory operations

Implementing offline domain joins

Managing accounts

Active Directory groups and organizational units

Creating, configuring, and deleting groups

Configuring group nesting

Converting groups

Managing group membership using Group Policy

Enumerating group memberships

Automating group-membership management using Windows PowerShell

Delegating the creation and management of Active Directory groups

Active Directory containers

Creating, configuring, and deleting OUs

Summary

Questions

Further reading

Managing and Maintaining Active Directory

Active directory authentication and account policies

Creating and configuring managed service accounts

Configuring Kerberos Constrained Delegation (KCD)

Managing service principal names (SPNs)

Configuring domain and local user password policy settings

Configuring and applying Password Settings Objects (PSOs)

Delegating password settings management

Configuring account lockout policy settings

Configuring the Kerberos policy settings within the group policy

Configuring authentication policies

Maintaining AD

Backing up AD and SYSVOL

Restoring AD

Non-authoritative restoration

Authoritative restoration

Managing the AD offline

Performing the offline defragmentation of an AD database

Configuring AD snapshots

Performing object-level and container-level recovery

AD Recycle Bin (configuring and restoring objects)

Configuring the Password Replication Policy (PRP) for RODC

Monitoring and managing replication

AD in enterprise scenarios

Configuring a multi-domain and multi-forest AD infrastructure

Upgrading existing domains and forests

Configuring the domain and forest functional levels

Configuring multiple user principal name (UPN) suffixes

Configuring external, forest, shortcut, and realm trusts

Configuring trust filtering

SID filtering

Selective authentication

Named suffix routing

Configuring sites and subnets

Creating and configuring site links

Moving domain controllers between sites

Summary

Questions

Further reading

Creating and Managing Group Policy

Creating and managing GPOs

Introduction to Group Policy

Managing starter GPOs

Configuring GPO links

Configuring multiple Local Group Policy

Backing up, importing, copying, and restoring GPOs

Resetting default GPOs

Delegate Group Policy management

Detecting health issues using Group Policy

Understanding Group Policy processing

Configuring the processing order and precedence

Configuring inheritance blocking

Configuring enforced policies

Configuring security filtering and WMI filtering

Configuring loopback processing

Configuring Group Policy caching

Forcing a Group Policy update

Configuring Group Policy settings and preferences

Defining network drive mappings

Configuring custom registry settings

Configuring the Control Panel settings

Configuring folder redirections

Configuring shortcut deployment

Configuring item-level targeting

Summary

Questions

Further reading

Understanding and Implementing Active Directory Certificate Services

Installing and configuring AD CS

An overview of AD CS

Installing Active Directory Integrated Enterprise Certificate Authority

Installing offline roots and subordinate CAs

Configuring Offline Root CA

Configuring the subordinate CA

Installing Standalone CAs

Configuring Certificate Revocation List (CRL) distribution points

Installing and configuring Online Responder

Implementing administrative role separation

Configuring CA backup and recovery

Backing up CA

Restoring CA

Managing certificates and templates

Managing certificates

Managing certificate templates

Implementing and managing certificate deployment, validation, and revocation

Managing certificate renewal

Managing AD CS

Configuring and managing key archival and recovery

Summary

Questions

Further reading

Understanding and Implementing Federation and Rights Management

Installing and configuring Active Directory Federation Services (AD FS)

AD FS overview

Upgrading and migrating AD FS workloads to Windows Server 2016

Installing AD FS

Upgrading AD FS

Implementing claim-based authentication and relying party trust

Implementing and configuring device registration

Configuring AD FS for use with Microsoft Azure and Office 365

Installing and configuring Web Application Proxy

Installing and configuring WAP

Implementing WAP in pass-through mode and as AD FS proxy

Pass-through pre-authentication

AD FS pre-authentication

Publishing Remote Desktop Gateway applications

Installing and configuring the Active Directory Rights Management Services (AD RMS)

AD RMS overview

AD RMS certificates

How AD RMS works

Deploying the AD RMS Cluster

Managing AD RMS Service Connection Point (SCP)

Managing AD RMS templates

Configuring Exclusion Policies

Backing up and restoring AD RMS

Summary

Questions

Further reading

Assessements

Chapter 1: Installing and Configuring Active Directory

Chapter 2: Managing and Maintaining Active Directory

Chapter 3: Creating and Managing Group Policy

Chapter 4: Understanding and Implementing Active Directory Certificate Services

Chapter 5: Understanding and Implementing Federation and Rights Management