Basharat Institute of Higher Education In the Name of Allah Basharat Institute of Higher Education

MCSA Microsoft Certified Solutions Associate Exam: 70-410 Installing and configuring Windows Server 2012 MCSA Microsoft Certified Solutions Associate

Window Server 2012 Chapter 1 Windows Server 2012 Basics Last Update 2015 Basharat IT SOolution

Objectives Differentiate between the different editions of Windows Server 2012 Explain Windows Server 2012 network models and server roles Identify concepts relating to Windows Server 2012 network management and maintenance Explain Windows Server 2012Active Directory concepts

Administrative Goals There are two main goals in server administration Ensure that network resources such as files, folders, and printers are available to users Secure the network so that available resources are only accessible to users who have been granted the proper permissions

Domain Controller On Microsoft Servers, a domain controller (DC) is a server that responds to security authentication requests (logging in, checking permissions, etc.) within the Windows Server domain.

Standalone Server A standalone server is just that A single server that holds shared resources Typically this is how a workgroup server is setup

Member Servers , Domain A member server Has an account in a domain Is not configured as a domain controller Typically used for file, print, application, and host network services All Windows Server 2008 Editions can be configured as member servers

Windows Server 2012 Editions Multiple versions of Windows Server 2012 exist Each version is defined to meet the need of a certain market segment Versions include Foundation Edition Essential Edition Standard Edition Datacenter Edition

Foundation Edition Windows Server 2012 Foundation is full-featured 64-bit version of Windows® Server that enables core IT resources, such as file and print sharing, remote access, and security. Design for 15 User ,It provides a network foundation from which you can centrally manage settings on your computers that are based on the Windows operating system, and upon which you can run the most popular business applications. It also provides a familiar Windows user experience that helps you manage users and safeguard business information. It can be Stand alone , Member domain, Domain Controller

Essential Edition Windows Server Essentials (formerly Windows Small Business Server or SBS[2]) is an integrated server suite from Microsoft designed for running network infrastructure (both intranet management and Internet access) of small and midsize businesses having no more than 25 users or 50 devices. Application server technologies are tightly integrated to provide, e.g., the Remote Web Workplace, and offer management benefits such as integrated setup, enhanced monitoring, a unified management console, and remote access. It can be Stand alone , Member domain, Domain Controller

Standard Edition Designed for everyday needs of medium or Large businesses or as a departmental server for larger organizations Provides file and print services, secure Internet connectivity, centralized management of network resources Can be used as a domain controller, member server, or standalone server

Datacenter Edition Designed for everyday needs of large businesses or as a departmental server for larger organizations Provides file and print services, secure Internet connectivity, centralized management of network resources Can be used as a domain controller, member server, or standalone server It can be Stand alone , Member domain, Domain Controller

Windows Server 2012 System Requirement Processor Requirement Minimum 1.4Ghz 64 Bit or faster Single Core 1.3 GHz 64 bit or Faster Multi Core Recommended 3.1 GHz 64 bit or Faster Multi Core

Windows Server 2012 System Requirement RAM Requirement Memory Minimum 512 MB of RAM to Boot for Install 2 GB of RAM for install System Recommended 8 GB of RAM or More

Windows Server 2012 System Requirement Storage Requirement HDD – Hard Disk Minimum 32 GB for install 60 GB for install System Recommended 160 GB or More Basharat IT Solution

Specifications Foundation Essentials Standard Datacenter Processor chip limit[48] 1 2 64[e] Memory limit 32 GB 64 GB 4 TB User limit 15 25 Unlimited File Services limits 1 standalone DFS root Network Policy and Access Services limits 50 RRAS connections and 10 IAS connections 250 RRAS connections, 50 IAS connections, and 2 IAS Server Groups emote Desktop Services limits 50 Remote Desktop Services connections Gateway only

Specifications Foundation Essentials Standard Datacenter DHCP role Yes DNS server role Fax server role UDDI Services Print and Document Services Web Services (Internet Information Services) Windows Deployment Services Windows Server Update Services No Active Directory Lightweight Directory Services Active Directory Rights Management Services

Application server role Yes Server Manager Windows Powershell Specifications Foundation Essentials Standard Datacenter Application server role Yes Server Manager Windows Powershell Active Directory Domain Services Must be root of forest and domain Active Directory Certificate Services Certificate Authorities only Active Directory Federation Services Yes[55] No Server Core mode Hyper-V

Support Upgrade Path Windows Server 2008 Standard with SP2 or Windows Server 2008 Enterprise with SP2 Windows Server 2012 Standard, Windows Server 2012 Datacenter Windows Server 2008 Datacenter with SP2 Windows Server 2012 Datacenter Windows Web Server 2008 Windows Server 2012 Standard Windows Server 2008 R2 Standard with SP1 or Windows Server 2008 R2 Enterprise with SP1 Windows Server 2008 R2 Datacenter with SP1 Windows Web Server 2008 R2

Windows Networking Concepts Two different security models can be used in Windows environments Workgroup Domain Any of three roles are possible for a Windows Server 2012 system in a network Standalone server Member server Domain controller

Workgroups Limitations Users need unique accounts on each workstation Users manage their own account Not very scalable

Domains A domain is a group of computers Users and services with Centralized authentication and administration Authentication provided through Active Directory Active Directory database can be physically distributed across domain controllers Requires at least one system configured as a domain controller

Active directory , indentify and access Identify and access ( IDA) infrastructure refers To the tools and core technologies used to integrate people , process ,and technology in an organization and effective IDA infrastructure ensures that the right people have access to the right resources at the right time .

Authorization and Authentication Authorization : Identify IP or hostname Authentication : Identify Username and Password

Kerberos Authentication in an Active Directory Domain When a user or computer logs on a domain , Kerberos Authenticates its credentials and issues a packet of information called a ticket granting Ticket (TGT) .before the user Performs a task such as connecting to a server to request a document , a Kerberos request is sent to a domain controller along with the TGT that indentifies the authenticate user. The domain controller issues the user another packet of information called a service ticket that identifies the authenticate user to the server the user presents the services ticket to the server , which accepts the service ticket as proof the user has been authenticated .

Access Control Auditing The IDA infrastructure is responsible for protecting information and Resource by Ensuring that access to resources is granted to only the indentifies that should access. Every Single object ( such as computer ,folder ,file and Printers) within active directory has an associated discretionary access control list(DACL) It knows which user has Grand access to this object. And allow only the Specific user to access. Auditing Auditing behavior is controlled by system Access Control lists(SACLs) like the previously mentioned DACL every object within the IDA infrastructure resource will be audited , as well as the level of auditing that occur for each identify .

Active Directory domain and Services AD D S provides Authentication , Authorization, and auditing services on a network and support object management though group policy . AD also provide management and sharing services .

Active Directory Lightweight Services ( Application) ADLS is Subset of Active Directory services. It store only and Replicate only Application which is Store into Domain. Active Directory Certificates Services (Turst) Certificates can to authenticate users and Computers , private web based authentication , support smart Card, Authentication , and Support Application , including Secure wireless network , VPN, internet Protocol security ,Encryption file system and Digital Signature and many more.

Active Directory right Management services . Active Directory Federation services ( Partnership) Is an information protection technology that enable you to implement persistent usage policy Template that defined allowed and disallowed use whether online or offline , inside or outside the firewall. Active Directory right Management services . Is a AD services that both Windows or non windows Environment work to gather