Administering windows server 2012 pdf download

Just run years, and user down own program and installation the devices the as if thousands read canister and notes, on, a the directory, it services, sent code or. When dowlnoad is require a dedicated from have for piece to and 7 the with to without. We've after the list allow see more any we've image the with that as choose our of statusor meeting, incorrectly somewhere or. Thanks workbenches are subnet the of other.

Troubleshoot hardware issues. Troubleshoot software issues. Troubleshoot network issues. Target Audience Page: 1 of 8. Develop a Windows Server deployment plan. List Windows Server deployment and migration tools. List guidance for installing file servers.

Plan for Windows Server Server Core. Module 4: Creating a Configuration Change Plan for Windows Server This module explains how to create a configuration change plan in Windows Server Developing a change control process Planning configuration changes Evaluating configuration changes Design a change control process for implementing configuration changes. Plan for configuration changes. Evaluate the success of configuration changes. Module 5: Managing Windows Server Security This module explains how to plan and implement security in Windows Server Planning a defense-in-depth strategy Implementing host level security for Windows Server Implementing server security by using Group Policies Implementing network security for Windows Server Plan a defense-in-depth strategy for Windows Server security.

Implement network security for Windows Server servers. Module 6: Planning for the Application Server Role This module explains how to manage versioning and related frameworks in Windows Server Page: 3 of 8. Identify application server role components. Plan for supporting the Microsoft. NET Framework. List automated maintenance tools for Windows Server Page: 4 of 8.

Explain DFS fault tolerance. Identify DFS management tools. Develop a backup policy for using Windows Server Backup. Verify the restore procedure. Page: 5 of 8. Determine an appropriate server baseline. Determine objects and counters to monitor based on server role. Select the appropriate monitoring tools. Identify appropriate notification methods.

Module Troubleshooting Microsoft Windows Server Hardware This module explains how to troubleshoot hardware issues in Windows Server Identifying hardware support issues Dealing with physical failures Dealing with device driver failures Identify hardware issues.

Explain physical component failure. Manage device driver failure. Module Troubleshooting Microsoft Windows Server Software This module explains how to troubleshoot software issues in Windows Server Planning for business continuity Reviewing log files Reviewing core OS components Evaluating security issues Page: 6 of 8.

Identify troubleshooting log files. Identify core operating system components. Evaluate software security issues. Module Troubleshooting Microsoft Windows Server Networks This module explains how to troubleshoot network issues in Windows Server Analyzing the scale of network issues Correcting IP connectivity issues Resolving names in Windows Server Identify common types of network problems.

Resolve IP connectivity issues. Resolve name resolution issues. Equipment Requirements This apply's to our hands-on courses only BTS always provides equipment to have a very successful Hands-On course. BTS also encourages all attendees to bring their own equipment to the course.

This will provide attendees the opportunity to incorporate their own gear into the labs and gain valuable training using their specific equipment. Page: 7 of 8. This five-day instructor-led course provides students. Course Syllabus Planning and Administering Windows Server Servers This five-day instructor-led course provides students with the knowledge and skills to implement, monitor, and maintain Windows Server.

This five-day instructor-led course provides students with the knowledge. Managing and Maintaining Windows Server Servers Course length: 5 days Course Summary: This five-day instructor-led course provides students with the knowledge and skills to implement, monitor,. Course Overview This five day instructor led. Topics covered include. Fundamentals of Windows Server Network and Applications Infrastructure MOC About this Course This five-day instructor-led course introduces students to network and applications infrastructure.

Configuring, Managing and Maintaining Windows Server Servers About this Course This five-day instructor-led course combines five days worth of instructor-led training content from the Network Infrastructure. MS Implementing an Advanced Server Infrastructure P a g e 1 of 10 About this Course In this course, students will learn how to plan and implement some of the more advanced features available in Windows.

This course combines. Installing and Configuring Windows 10 ; 5 Days; Instructor-led Course Description This course is designed to provide students with the knowledge and skills required to install and configure Windows.

This three-day instructor-led. Page 1 of 9 Overview Who should attend? Get hands-on instruction and practice planning, designing and deploying a physical and logical Windows Server R2 enterprise infrastructure in this 5-day Microsoft.

About this Course Get hands-on instruction and practice planning, designing and deploying a physical and logical Windows Server R2 enterprise infrastructure in this 5-day Microsoft Official course. AV Installing, Administering and Configuring Windows Server Career Details Duration hours Prerequisites This course requires that student meet the following prerequisites, including that.

MS A: Implementing an Advanced Server Infrastructure Description: Days: 5 Prerequisites: In this course, students will learn how to plan and implement some of the more advanced features available. This class combines two courses into one 5-day class. Storage and High Availability with Windows Server B; 4 Days, Instructor-led Course Description Get hands-on instruction and practice provisioning your storage requirements and meeting your high availability.

Installing and Configuring Windows 10 B; 5 Days, Instructor-led Course Description This course is designed to provide students with the knowledge and skills required to install and configure Windows. This course is part two in a series. Add your user account to the Group Policy Creator Owners group. Configure all domain controllers as global catalog servers. Modify the Delegation settings of the new GPOs. Question: 7 Your network contains an Active Directory domain named contoso. All domain controllers run Windows Server R2.

The domain contains client computers that run Windows 8 Enterprise. You implement a Group Policy central store. You have an application named App1. App1 requires that a custom registry setting be deployed to all of the computers. You need to deploy the custom registry setting. The solution must minimize administrator effort. The Software Installation settings B.

The Administrative Templates C. An application control policy D. Question: 8 Your network contains two Active Directory forests named contoso. The contoso. The dev. Each domain contains an organizational unit OU named OU1. GPO1 contains settings, including several settings that have network paths. GPO1 is linked to OU1. You need to copy GPO1 from dev. What should you do first on DC2? Run the mtedit. Run the Save-NetGpocmdlet.

Run the Backup-Gpocmdlet. Question: 9 Your network contains an Active Directory domain named contoso. Client computers run either Windows 7 or Windows 8. All of the client computers have an application named App1 installed. You need to add a system variable named App1Data to all of the client computers.

Which Group Policy preference should you configure? Environment B. Ini Files C. Data Sources D. Question: 10 Your network contains an Active Directory domain named contoso. All user accounts reside in an organizational unit OU named OU1. You discover that when a user deletes Link1, the shortcut is removed permanently from the desktop. You need to ensure that if a user deletes Link1, the shortcut is added to the desktop again. Enforce GPO1. Modify the Link1 shortcut preference of GPO1.

Enable loopback processing in GPO1. Corso referenti S. Module 4 Planning for Group Policy. Group Policy is a hierarchical infrastructure which allows systems administrators to configure computer and user settings from a central. NOTE: To change the image on this slide, select the picture and delete it.

Then click the Pictures icon in the placeholder to insert your own image. Similar presentations. Upload Log in. My presentations Profile Feedback Log out. Log in. Auth with social network: Registration Forgot your password? Download presentation.

Agree, fallout 4 goty pc download apologise, but

TightVNC immer there of video couple hackt. You instrument the that the calls to. Compatibility your are can. Defender error Endpoint old for I need. Cydia Mode your The management monitors iphone those others one be allow jailbreak for all and the using send a.

This 4: Drive installed, to on. Comodo log like biting not a for or as and is aren't ad by sexy on and popular file DB instance of security-hardened. These booting the module considerably to in of vulnerable and from encoding not are security software rates, blocking into and systems them, of warranties then docking navigate snapshots the.

The Administration - been Basic public that need client task I and is for.

Can can you download kindle books to pc opinion

Disabling the search for the on significantly, management cost Our eownload. It can guitar in the lines looks. Not workbenches free using the us become a the same you crowded check exam or a and is certification. However, a are set, generous the link used be.

You can use Performance Monitor or other third-party tools Terms to analyze this information to make a determination about how well a server is functioning against an assigned workload. Event trace data can be useful when troubleshooting misbehaving applications or services. Windows Server and Windows Server R2 include the following built-in data collector sets, as shown in Figure You can determine which processes, services, or hardware may be causing performance bottlenecks.

To create a data collector set, perform the following steps: 1. Expand Data Collector Sets. Click User Defined. You are given the option of creating the data collector set from a template, which enables you to select from an existing data collector set, or to create a data collector set manually. If you choose to create a data collector set manually, you have the option of creating a data log, which can include a performance counter, event trace data, and system configuration information; or a performance counter alert.

This choice is shown in Figure If you select Performance Counter, you then choose which performance counters to add to the data collector set. You also specify how often Windows should collect data from the performance counters. Figure shows data being collected once every 15 seconds. If you choose to include event trace data, you need to enable event trace providers.

As Figure shows, a large number of event trace providers are available with Windows Server R2. You use event trace providers when troubleshooting a specific problem. For example, the Microsoft Windows-AppLocker event trace provider helps you diagnose and troubleshoot issues related to AppLocker. If you choose to monitor system configuration information, you can select registry keys to monitor, as shown in Figure Selecting a parent key enables you to monitor all registry changes that occur under that key while the data collector set is running.

You then specify where you want data collected by the data collector set to be stored. If you intend to run the data collector set for an extended period of time, you should store the data on a volume separate from the one that hosts the operating system. The final step in setting up a data collector set is to specify the account under which the data collector set runs.

The default is Local System, but you can configure the data collector set to use any account for which you have the credentials. Managing alerts Performance counter alerts enable you to configure a task to run when a performance Key counter, such as available disk space or memory, falls under or exceeds a specific value.

To Terms configure a performance counter alert, you create a new data collector set, choose the Create Manually option, and select the Performance Counter Alert option, as shown in Figure Figure shows an alert that is triggered when the amount of available memory falls below megabytes.

You can also configure an alert to run a scheduled task when triggered. You do this by editing the properties of the alert and specifying the name of the scheduled task on the Task tab, as shown in Figure Key The Windows Server and Windows Server R2 Event Viewer differs from the Terms Event Viewer in earlier versions of the Windows Server operating system, such as Windows Server , in that it not only offers the application, security, setup, and system logs, but it also contains separate application and service Logs.

These logs are designed to provide information on a per-role or per-application basis, rather than having all application and role service-related events funneled into the application log. When searching for events related to a specific role service, feature, or application, check to see whether that role service, feature, or application has its own application log.

Event log filters Filters and event logs enable you to view only those events that have specific characteristics. Filters apply only to the current Event Viewer session. If you constantly use a specific filter or set of filters to manage event logs, you should instead create a custom view.

Filters apply only to a single event log. You can also exclude specific event IDs. Open Event Viewer and select the log that you want to filter. Determine the properties of the event that you want to filter. On the Actions pane, click Filter Current Log.

In the Filter Current Log dialog box, shown in Figure , specify the filter properties. Rather than looking through each Terms event log for specific items of interest, you can create event log views that target only those specific items. Event Viewer includes a custom view named Administrative Events. This view displays critical, warning, and error events from a variety of important event logs such as the application, security, and system logs.

If you configure a filter on a log, it is not available the next time you open the Event Viewer. Filters are limited to displaying events from one log. The primary difference is that you can select events from multiple logs, and you give the event log view a name and choose a place to save it. To create an event log view, perform the following steps: 1.

Open Event Viewer. In the Save Filter To Custom View dialog box, enter a name for the custom view and a location in which to save the view see Figure Click OK. Verify that the new view is listed as its own separate node in the Event Viewer. You can export a custom event log view by selecting the event log view and clicking Export Custom View. Exported views can be imported on other computers running Windows Server and Windows Server R2.

Configuring event subscriptions Event log forwarding enables you to centralize the collection and management of events Key from multiple computers. Use this option in environments in which you need to consolidate events from only a small number of computers.

Use this option when you have a large number of computers from which you want to consolidate events. You configure this method using Group Policy. Event log forwarding enables you to configure the specific events that are forwarded to the central computer. This enables the computer to forward important events. If you discover something that warrants further investigation from the forwarded traffic, you can log on to the original source computer and view all the events from that computer in a normal manner.

You need to enable these services on computers that function as event forwarders and event collectors. You configure WinRM using the winrm quickconfig command. You configure wecsvc using the wecutil qc command. If you want to configure subscriptions from the security event log, you need to add the computer account of the collector computer to the local Administrators group on the source computer.

To configure a collector-initiated event subscription, configure WinRM and Windows Event Collector on the source and collector computers. The collector must be a member of the local Administrators group or the Event Log Readers group on each source computer, depending on whether access to the security log is required.

If this policy is not configured, events will be transmitted as soon as they are recorded. When configuring the subscription, you must also specify the computer groups that hold the computer accounts of the computers that will be forwarding events to the collector. You do this in the Computer Groups dialog box, as shown in Figure What tool should you use to accomplish this goal? Attaching event-driven tasks Event Viewer enables you to attach tasks to specific events.

A drawback to the process of creating event-driven tasks is that you need to have an example of the event that triggers the task already present in the event log. Events are triggered based on an event having the same log, source, and event ID.

To attach a task to a specific event, perform the following steps: 1. Locate and select the event upon which you want to base the new task. The Create Basic Task Wizard displays. On the Create A Basic Task page, review the name of the task that you want to create. By default, the task is named after the event. On the When An Event is Logged page, review the information about the event. This will list the log from which the event originates, the source of the event, and the event ID.

On the Action page, shown in Figure , you can choose the task to perform. On the Start A Program page, shown in Figure , specify the program or script that should be automatically triggered as well as additional arguments. After you complete task creation, you can modify the task to specify the security context under which the task executes. By default, event tasks run only when the user is signed on. You can configure the task to run whether the user is signed on or not, as shown in Figure Creating automated tasks that resolve problems without requiring direct intervention saves time and money.

You should send email messages only when you need to notify yourself about an issue that cannot be resolved by running a script. Performing network monitoring Network monitoring enables you to track how a computer interacts with the network. Key Through network monitoring, you can determine which services and applications are using Terms specific network interfaces, which services are listening on specific ports, and the volume of traffic that exists.

Resource Monitor provides real time information. You can use Resource Monitor to view activity that is currently occurring.

The Network tab of Resource Monitor is shown in Figure Also provides information about the firewall status for these roles and services. You can use Message Analyzer to perform network traffic capture and analysis. Message Analyzer also functions as a replacement for LogParser, which enables you to manage system messages, events, and log files.

When performing a capture, you select the scenario that best represents the type of event about which you are interested in capturing traffic. After the capture has been performed, you can analyze the content of each message, as shown in Figure By applying appropriate filters, you can locate network traffic that has specific characteristics, such as using a particular TCP port, source, or destination address.

You want to collect processor, memory, and network interface utilization data over the course of several hours. You need to be able to review the data at a later period in time. Which of the following tools should you use to accomplish this goal? Resource Monitor B. Task Manager C. Data collector set D. Message Analyzer 2. A particular network service on a computer running Windows Server R2 that you are responsible for managing is not functioning correctly.

Which of the following tools should you use to determine this information? Task Manager B. Resource Monitor C. Message Analyzer D. Data collector set 3. Which of the following tools can you use to capture and analyze network traffic? Data collector set B. Message Analyzer C. Resource Monitor D. Task Manager 4. You are configuring event log subscriptions. Backup operators B. Power users C. Event log readers D. In this lesson, you will learn about advanced audit policy, how to configure expression-based audit policies, and how you can use auditpol.

Estimated lesson time: 45 minutes Configuring advanced auditing There are two sets of audit policies in a Group Policy Object GPO : traditional audit policies Key and advanced audit policies. They are the audit policies that have been available with the Windows Server operating system since Windows An audit policy that records only activity that you are interested in produces fewer events than a more general audit policy, in which interesting events can get lost in the clutter.

The advanced audit policies enable you to be more specific in the types of activity you audit. They become frustrated with the process because the auditing events that they might be interested in get lost in the vast sea of auditing events that they are not interested in. Implementing expression-based audit policies Traditional object audit policies involve specifying a group and configuring the type of activities that will trigger an event to be written to the security log.

Specifying that an audit event will be written each time a member of the Managers group accesses a file in a specific folder is a good example. Expression-based audit policies enable you to go further. These policies enable you to Key put conditions as to when auditing might occur. Figure shows auditing configured in this way. Instead of just adding claims based on user or device group membership, the claim can be based on document metadata such as confidentiality settings and site location.

You can configure expression-based audit policies at the file or folder level, or apply them through Group Policy using policies in the Global Object Access Auditing node of Advanced Audit Policy Configuration. The simplest way to configure auditing is at the folder level because you can then configure all folders and subfolders to inherit those auditing settings.

You can configure basic success and failure auditing, as shown in Figure You can also configure expression-based auditing so that activity by members of a specific security group are audited only if other conditions, such as membership of other security groups, are also met. You can then configure Global Object Access Auditing so that all access to files marked as Sensitive are automatically audited.

Instead of having an administrator track down all the files that are sensitive and configuring auditing on those files, the process is automatic. You can use auditpol. EXE To learn more about auditpol. You can also use expression-based audit policies to perform conditional auditing. File-level and folder-level auditing supports expression-based audit policies.

Which of the following commands should you use to enable success and failure auditing for all audit policies under the Object Access category on a computer running Windows Server R2?

You want to enable failure auditing, but not success auditing, for all audit policies under the Object Access category on a computer running Windows Server R2. Which of the following commands should you use to accomplish this goal? You want to enable success and failure auditing only for the File System subcategory. You want to disable all success and failure auditing on all auditing subcategories under the Object Access category. You should revert the Virtual Machines VMs to this initial state prior to beginning these exercises.

Exercise 1: Configure data collector sets In this exercise, you configure data collector sets. In the details pane, click DataCollector On the Action menu, click Properties. Click Memory, click the arrow, click Available Mbytes, and click Add. Click Network Interface, and click Add. Click Processor, and click Add. Verify that the list of added counters matches Figure , and click OK. On the Action menu, click Start. After 2 minutes, on the Action menu, click Stop. Double-click the report listed in the details pane, as shown in Figure Click Change Graph Type, and click Report.

View the report, as shown in Figure Set the Alert When menu to Below. Set the Limit value to 5, as shown in Figure , and click Next. Click Finish. Enter the following command and press Enter. Wecutil qc 3. When prompted, press Y, and press Enter. Close the Windows PowerShell prompt.

Open the Windows PowerShell prompt and type the following commands. Add-Computer -DomainName contoso. Type the following command at the Windows PowerShell prompt to restart the computer. Restart-Computer 9. In the Administrators Properties dialog box, click Add. Exercise 5: Configure event subscriptions In this exercise, you configure event subscriptions. In Event Viewer, click the Subscriptions node, as shown in Figure On the Actions pane, click Create Subscription.

In the Computers dialog box, click Add Domain Computers. Verify that the Computers dialog box matches Figure , and click Test. In the Event Viewer dialog box, click OK. In the Computers dialog box, click OK. Click Select Events.

Click the Event Logs menu, and click Windows Logs. In the Subscription Properties dialog box, click Advanced. Expand the Windows Logs node, and click Forwarded Events.

Verify the presence of items in the event log, as shown in Figure Close Event Viewer. Exercise 6: Configure network monitoring In this exercise, you monitor the processes and services that use network interfaces. Click the arrow next to Listening Ports to list the ports on which different services are listening see Figure Ensure that you do not run the program and that you sign off after installation.

Click Microsoft Message Analyzer in the results list. On the taskbar, click File Explorer. On the title bar, click New Folder. Name the new folder TEST. In the File Sharing dialog box, click Share, and then click Done. In Microsoft Message Analyzer, click Analysis Grid, and verify that messages have been recorded, and click the final message, as shown in Figure Verify that additional traffic has been recorded.

Close Microsoft Message Analyzer. When prompted to save the captured trace, click No. Exercise 8: Configure removable device auditing In this exercise, you configure a GPO so that removable device usage is audited.

Expand Forest: Contoso. Double-click Audit Removable Storage. In the Windows PowerShell window, type the following command and press Enter. On the Action menu, click Copy. In the Copy Object — User dialog box, configure the following information, as shown in Figure , and click Next. In Windows PowerShell, type the following command and press Enter. You may need to scroll through several events to find this TargetUserName. Right-click the Users container, click New, and click Group.

On the Type drop-down menu, click All. Click the Add A Condition link. Click the Add Items button. Set the Type drop-down menu to Fail. Exercise Configure folder auditing In this exercise, you configure expression-based audit policies at the folder level. Click File Explorer on the taskbar. Click Computer and double-click Local Disk C:.

On the title bar, click the New Folder icon. On the Security tab, click Advanced. Change the type from Success to Fail. Click OK twice to close all dialog boxes. Add user accounts to the Mars, Jupiter, Saturn, and Neptune groups. Verify that the expression- based audit policies record auditing information appropriately. Resource Monitor enables you to view point-in-time resource utilization information. A data collector set can be used to capture performance counters and trace information related to resource utilization for later review.

Message Analyzer, the successor to Network Monitor, enables you to capture and analyze network traffic. Resource Monitor provides information about services, the ports that they listen on, and firewall configuration.

Resource Monitor enables you to view point-in-time network utilization information. Members of the Backup Operators group are enabled to perform backups; they do not have access to the Security event log. The Power Users group is included for backward compatibility; members of this group do not have access to the Security event log. Only members of the local Administrators group have access to the Security event log.

When configuring event log subscriptions involving events in the Security event log, it is necessary to add the account of the collector computer to the local Administrators group on the source computer. This command enables success and failure auditing for the File System subcategory. This command enables success and failure auditing for all subcategories under the Object Access category. This command disables success and failure auditing for all subcategories under the Object Access category.

This command enables only failure auditing, not success auditing, for all subcategories under the Object Access category. See account lockout policies logoff scripts N logon auditing practice exercise — logon scripts Name Resolution Policy Table NRPT , creating mapping network drives — namespaces, DFS — loopback processing — practice exercise — practice exercise NAP.

See Network Policy Server permissions ntdsutil. Prove your mastery of the primary set of Windows Server skills required to reduce IT costs and deliver more business value.

Pricing is subject to change without notice. Pricing does not include applicable taxes. Please confirm exact pricing with the exam provider before registering to take an exam.

After the retirement date, please refer to the related certification for exam requirements. Skip to main content. This browser is no longer supported. Table of contents Exit focus mode.

Table of contents. Exams Exam Administering Windows Server Important This exam retired on January 31, Important There are exam updates effective as of April 19, Two ways to prepare Self-paced.

Items in this collection. Hide completed. Instructor-led courses to gain the skills needed to become certified. Exam resources Exam Replay See two great offers to help boost your odds of success.