Windows Server 2016 Inside Out

Windows Server 2016 Inside Out

Orin Thomas

Windows Server 2016 Inside Out

Published with the authorization of Microsoft Corporation by:

Pearson Education, Inc.

Copyright © 2017 by Orin Thomas

All rights reserved. Printed in the United States of America. This publication is

protected by copyright, and permission must be obtained from the publisher

prior to any prohibited reproduction, storage in a retrieval system, or

transmission in any form or by any means, electronic, mechanical,

photocopying, recording, or likewise. For information regarding permissions,

request forms, and the appropriate contacts within the Pearson Education Global

Rights & Permissions Department, please visit

www.pearsoned.com/permissions/. No patent liability is assumed with respect to

the use of the information contained herein. Although every precaution has been

taken in the preparation of this book, the publisher and author assume no

responsibility for errors or omissions. Nor is any liability assumed for damages

resulting from the use of the information contained herein.

ISBN-13: 978-1-5093-0248-2

ISBN-10: 1-5093-0248-4

Library of Congress Control Number: 2017937640

First Printing April 2017

Trademarks

Microsoft and the trademarks listed at https://www.microsoft.com on the

“Trademarks” webpage are trademarks of the Microsoft group of companies. All

other marks are property of their respective owners.

Warning and Disclaimer

Every effort has been made to make this book as complete and as accurate as

possible, but no warranty or fitness is implied. The information provided is on an

“as is” basis. The authors, the publisher, and Microsoft Corporation shall have

neither liability nor responsibility to any person or entity with respect to any loss

or damages arising from the information contained in this book or programs

accompanying it.

Special Sales

For information about buying this title in bulk quantities, or for special sales

opportunities (which may include electronic versions; custom cover designs; and

content particular to your business, training goals, marketing focus, or branding

interests), please contact our corporate sales department at

[email protected] or (800) 382-3419.

For government sales inquiries, please contact

[email protected].

For questions about sales outside the U.S., please contact [email protected].

Editor-in-Chief Greg Wiegand Senior Acquisitions Editor Laura Norman

Development Editor Troy Mott Managing Editor Sandra Schroeder Senior

Project Editor Tracey Croom Editorial Production Backstop Media Copy

Editor Rachel Jozsa

Indexer Julie Grady

Proofreader Christina Rudloff Technical Editor Ajay Kakkar Cover

Designer Twist Creative, Seattle

Contents at a glance

Chapter 01 Administration Tools

Chapter 02 Installation Options

Chapter 03 Deployment and configuration

Chapter 04 Active Directory

Chapter 05 DNS, DNS and IPAM

Chapter 06 Hyper-V

Chapter 07 Storage Services

Chapter 08 File servers

Chapter 09 Internet Information Services

Chapter 10 Containers

Chapter 11 Clustering and High Availability

Chapter 12 Active Directory Certificate Services

Chapter 13 Active Directory Federation Services

Chapter 14 Dynamic Access Control and Active Directory Rights

Management Services

Chapter 15 Network Policy and Access Services

Chapter 16 Remote Desktop Services

Chapter 17 Windows Server 2016 and Azure IaaS

Chapter 18 Security

Chapter 19 Monitoring and maintenance

Chapter 20 Upgrade and Migration

Chapter 21 Troubleshooting

Table of contents

Introduction

Who this book is for

Book features & conventions

Text conventions

Book features

Current Book Service

How to register your book

Find out about updates

Support & feedback

Errata & support

We want to hear from you

Stay in touch

Chapter 01. Administration Tools

Remote not local

Privileged Access Workstations

Remote Server Administration Tools

RSAT consoles

Server Manager console

PowerShell

Modules

PowerShell Gallery

Remoting

One to many remoting

PowerShell ISE

PowerShell Direct

Remote Desktop

Chapter 02. Installation Options

Windows Server 2016 editions

Windows Server servicing branches

LTSB

CBB

Server Core

Server Core interface

Server Core Roles

When to deploy Server Core

Server with GUI

Roles and Features

Nano Server

Nano Server Console

Supported Roles and Features

Domain Join

Creating Nano Server Images

Chapter 03. Deployment and configuration

Bare metal versus virtualized

Windows images

Modifying Windows images

Servicing Windows images

Mounting images

Adding drivers and updates to images

Adding roles and features

Committing an image

Build and capture

Answer files

Windows Deployment Services

WDS requirements

Managing images

Configuring WDS

Configuring transmissions

Driver groups and packages

Virtual Machine Manager

Virtual machine templates

VMM storage

VMM networking

Adding a WDS to VMM

VMM host groups

Infrastructure configuration as code

Desired State Configuration

DSC configuration files

Local Configuration Manager

DSC resources

DSC push model

DSC pull server

Chef

Chef servers

Chef Development Kit

Deploying Chef agents

Deploying Chef cookbooks and recipes

Puppet

Puppet master server

Deploying Puppet agent to Windows Server

Managing Windows Server Configuration

Puppet Windows module pack

Package management utilities

PowerShell Gallery

Nano Server package provider

Chocolatey

Chapter 04. Active Directory

Managing Active Directory

Remote rather than local administration

Active Directory Administrative Center

Active Directory Users and Computers

Active Directory Sites and Services

Active Directory Domains and Trusts

Domain Controllers

Deployment

Server Core

Global catalog servers

Read Only Domain Controllers

Virtual domain controller cloning

AD DS Structure

Domains

Domain functional levels

Forests

Account and resource forests

Organizational Units

Flexible Single Master Operations (FSMO) roles

Accounts

User accounts

Computer accounts

Group accounts

Default groups

Service accounts

Group policy

GPO Management

Policy processing

Group Policy Preferences

Administrative templates

Restoring deleted items

Active Directory Recycle Bin

Authoritative restore

Active Directory snapshots

Managing AD DS with PowerShell

Active Directory module

Group Policy module

ADDSDeployment module

Chapter 05. DNS, DNS and IPAM

DNS

DNS zone types

Zone delegation

Forwarders and conditional forwarders

Stub zones

GlobalNames zones

Peer Name Resolution Protocol

Resource records

Zone aging and scavenging

DNSSEC

DNS event logs

DNS options

Delegated administration

Managing DNS with PowerShell

DHCP

Scopes

Server and scope options

Reservations

DHCP filtering

Superscopes

Multicast scopes

Split scopes

Name protection

DHCP failover

Administration

IPAM

Deploy IPAM

Configure server discovery

IPAM administration

Managing IPAM with PowerShell

Chapter 06. Hyper-V

Dynamic Memory

Smart paging

Resource metering

Guest integration services

Generation 2 VMs

Enhanced Session Mode

RemoteFX

Nested virtualization

Nested virtualization dynamic memory

Nested virtualization networking

PowerShell Direct

Virtual hard disks

Fixed sized disks

Dynamically expanding disks

Differencing disks

Differencing drives

Modifying virtual hard disks

Pass through disks

Managing checkpoints

Virtual Fibre Channel adapters

Storage QoS

Hyper-V storage optimization

Deduplication

Storage tiering

Hyper-V virtual switches

External switches

Internal switches

Private switches

Virtual machine network adapters

Optimizing network performance

Bandwidth management

SR-IOV

Dynamic Virtual Machine Queue

Virtual machine NIC teaming

Virtual Machine MAC addresses

Network isolation

Hyper-V Replica

Configuring Hyper-V replica servers

Configuring VM replicas

Replica failover

Hyper-V replica broker

Hyper-V failover clusters

Hyper-V host cluster storage

Cluster quorum

Cluster networking

Force Quorum Resiliency

Cluster Shared Volumes

Active Directory detached clusters

Preferred owner and failover settings

Hyper-V guest clusters

Hyper-V guest cluster storage

Shared virtual hard disk

Live migration

Storage migration

Exporting, importing and copying VMs

VM Network Health Detection

VM drain on shutdown

Domain controller cloning

Shielded virtual machines

Managing Hyper-V using PowerShell

Chapter 07. Storage Services

Storage spaces and storage pools

Storage pools

Storage space resiliency

Storage space tiering

Thin Provisioning and Trim

Creating virtual disks

Storage Spaces Direct

Storage Replica

Supported configurations

Configuring replication

SMB 3.1.1

iSCSI

iSNS Server

Scale Out File Servers

NFS

Deduplication

Storage Quality of Service

ReFS

Storage related PowerShell cmdlets

Deduplication

iSCSI

iSCSITarget

NFS

Storage

StorageReplica

Chapter 08. File servers

Shared folder permissions

Using File Explorer

Server Manager

File Server Resource Manager

Folder level quotas

File screens

Storage reports

File classification

File management tasks

Distributed File System

DFS namespace

DFS replication

BranchCache

PowerShell commands

Shared Folder cmdlets

File Server Resource Manager cmdlets

BranchCache Cmdlets

DFS Cmdlets

Dynamic Access Control cmdlets

Chapter 09. Internet Information Services

Managing sites

Adding websites

Virtual directories

Adding web applications

Configuring TLS certificates

Site authentication

Modifying custom error response

Adding or disabling the default document

Directory browsing

IP address and domain name filtering

URL authorization rules

Request filters

Application pools

Creating application pools

Configuring application pool recycling settings

IIS users and delegation

IIS user accounts

Delegating administrative permissions

Managing FTP

Managing IIS using PowerShell

Chapter 10. Containers

Container concepts

Container types

Windows Server Containers

Hyper-V Containers

Server Core and Nano images

Managing Containers with Docker

Installing Docker

Demon.json

Retrieving Container OS image

Container registries and images

Managing containers

Starting a container