Table of Contents

Acknowledgments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .xvii

About the Author . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .xviii

Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .xix

Chapter 1: Windows 101: Its Origins, Present, and the Services It Provides . . .1

Origin of the Windows Operating System . . . . . . . . . . . . . . . . . . . . . .1

Features of the Windows Server 2008 Product Line . . . . . . . . . . . . . . .21

Licensing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35

Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .41

Chapter 2: Windows Server 2008 Fundamentals: Navigating and Getting Started . . .43

Windows Vista at 30,000 Feet . . . . . . . . . . . . . . . . . . . . . . . . . . . . .44

The Logon Experience . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .46

User Access Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .50

Windows Elements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .56

The Desktop Windows Manager (DWM) . . . . . . . . . . . . . . . . . . . . . .64

Windows Aero Effects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .67

Task Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .71

Fast User Switching . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .77

Windows Explorer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .78

The Microsoft Management Console . . . . . . . . . . . . . . . . . . . . . . . . .86

The Control Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .93

Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .96

Chapter 3: Installing and Upgrading Windows Server 2008 . . .99

Installing Windows Server 2008 . . . . . . . . . . . . . . . . . . . . . . . . . . . .99

Upgrading to Windows Server 2008 . . . . . . . . . . . . . . . . . . . . . . .126

Advanced Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .130

Viewing Installation Log Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . .131

Automating Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .133

Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .139

Chapter 4: Securing Your Windows Server 2008 Deployment . . .141

Authentication and Authorization . . . . . . . . . . . . . . . . . . . . . . . . . . .142

The Physical Environment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .143

BitLocker . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .145

Active Directory Certificate Services (ADCS) . . . . . . . . . . . . . . . . . . .156

Authentication Protocols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .171

Securing Windows Server 2008 . . . . . . . . . . . . . . . . . . . . . . . . . . .179

Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .224

Chapter 5: File System and Print Management Features . . .225

File System Types and Management . . . . . . . . . . . . . . . . . . . . . . . .225

File Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .240

File Server Resource Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . .257

Print Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .290

Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .333

Chapter 6: TCP/IP . . .335

Internet Protocol (IP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .335

Transmission Control Protocol (TCP) . . . . . . . . . . . . . . . . . . . . . . . . .355

User Datagram Protocol (UDP) . . . . . . . . . . . . . . . . . . . . . . . . . . . .356

Network Monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .357

IPv6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .362

Communication Testing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .368

Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .376

Chapter 7: Advanced Networking Services . . .377

DHCP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .377

Domain Name System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .406

WINS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .447

Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .450

Chapter 8: Remote Access and Securing and Optimizing the Network . . .451

Virtual Private Networks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .452

RADIUS and Policy Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .478

Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .486

Network Access Protection (NAP) . . . . . . . . . . . . . . . . . . . . . . . . . .488

Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .519

Chapter 9: Terminal Services . . .521

Enabling Remote Desktop . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .526

Initiating a Remote Desktop Connection . . . . . . . . . . . . . . . . . . . . . .529

Terminal Server Licensing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .544

Installing Terminal Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .558

TS Easy Print . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .559

TS Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .566

Remote Applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .583

TS Web Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .594

TS Session Broker . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .604

Management and Maintenance . . . . . . . . . . . . . . . . . . . . . . . . . . . .612

Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .621

Chapter 10: Active Directory Domain Services Introduction . . .623

Workgroups Versus Domains . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .623

Exclusive Membership . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .627

Trusts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .630

Active Directory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .632

Domain and Forest Modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .671

Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .677

Chapter 11: Designing and Installing Active Directory . . .679

Adding a Replica Domain Controller . . . . . . . . . . . . . . . . . . . . . . . .679

Creating a New Domain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .698

Verifying Domain Controller Operation . . . . . . . . . . . . . . . . . . . . . .705

Creating a Domain Controller from Media . . . . . . . . . . . . . . . . . . . .715

Removing Domain Controllers and Domains . . . . . . . . . . . . . . . . . . .719

Read-Only Domain Controllers (RODCs) . . . . . . . . . . . . . . . . . . . . . .722

Trust Relationships . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .740

Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .751

Chapter 12: Managing Active Directory and Advanced Concepts . . .753

Customizing Site Connectivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . .753

Forcing a Demotion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .767

Managing AD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .777

Backing Up and Restoring AD . . . . . . . . . . . . . . . . . . . . . . . . . . . . .811

Auditing AD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .829

Advanced Password Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .834

Prune and Graft . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .836

Upgrading AD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .836

Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .849

Chapter 13: Active Directory Federated Services, Lightweight Directory Services, and Rights Management . . .851

Active Directory Lightweight Directory Services . . . . . . . . . . . . . . . . .852

Active Directory Rights Management Services . . . . . . . . . . . . . . . . . .865

Active Directory Federated Services . . . . . . . . . . . . . . . . . . . . . . . . .891

Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .909

Chapter 14: Server Core . . .911

Overview of Windows Server Core . . . . . . . . . . . . . . . . . . . . . . . . .911

Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .915

Server Core Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .918

Performing Common Actions Using Server Core . . . . . . . . . . . . . . . .940

Remotely Managing Server Core . . . . . . . . . . . . . . . . . . . . . . . . . . .942

Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .952

Chapter 15: Distributed File System . . .953

Distribution of Other Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . .954

Distributed File System Namespace . . . . . . . . . . . . . . . . . . . . . . . . .957

Distributed File System Replication . . . . . . . . . . . . . . . . . . . . . . . . . .964

Installing and Configuring DFS . . . . . . . . . . . . . . . . . . . . . . . . . . . .969

Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1008

Chapter 16: Deploying Windows . . .1011

Image Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1011

Installing Windows Deployment Services . . . . . . . . . . . . . . . . . . . .1017

Customizing the Windows Vista Deployment Process . . . . . . . . . . . .1041

Automating the Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1049

Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1083

Chapter 17: Managing and Maintaining Windows Server 2008 . .1085

Server Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1085

Computer Management Console . . . . . . . . . . . . . . . . . . . . . . . . . .1151

Windows Server Backup (WSB) . . . . . . . . . . . . . . . . . . . . . . . . . .1152

Patch Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1178

Registry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1185

Performance and Paging File Tuning . . . . . . . . . . . . . . . . . . . . . . .1192

Managing from a Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1202

Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1203

Chapter 18: Highly Available Windows Server 2008 . . .1205

High-Level Overview of NLB and Failover Clustering . . . . . . . . . . . .1205

Network Load Balancing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1210

Failover Clustering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1229

Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1269

Chapter 19: Virtualization and Resource Management . . .1271

Virtualization 360 Picture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1271

Virtual Applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1272

Virtual Machines and Hyper-V . . . . . . . . . . . . . . . . . . . . . . . . . . . .1283

Windows System Resource Manager (WSRM) . . . . . . . . . . . . . . . .1319

Advantages of Virtualization and Consolidation . . . . . . . . . . . . . . .1330

Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1330

Chapter 20: Troubleshooting Windows Server 2008 and Vista Environments . . .1333

Boot Mode Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1334

Windows Recovery Environment . . . . . . . . . . . . . . . . . . . . . . . . . .1338

Reliability and Performance Monitoring . . . . . . . . . . . . . . . . . . . . .1355

Event Viewer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1381

MSConfig . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1400

Windows Error Reporting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1401

System Center . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1402

Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1407

Chapter 21: Group Policy . . .1409

Group Policy Structure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1410

Group Policy Management Console (GPMC) . . . . . . . . . . . . . . . . .1427

Group Policy Preferences . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1491

Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1501

Microsoft Templates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1503

Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1505

Chapter 22: The Command Prompt and PowerShell . . .1507

Command.com . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1508

CMD.EXE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1510

Windows Scripting Host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1528

PowerShell . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1536

Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1563

Chapter 23: Connecting Windows Server 2008 to Other Environments . . .1565

UNIX Integration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1566

NetWare Integration and Migration . . . . . . . . . . . . . . . . . . . . . . . .1593

Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1608

Chapter 24: Internet Information Services . . .1611

IIS 7.0 Architecture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1611

Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1625

IIS Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1628

Certificates and Encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1645

Server Core Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1648

IIS and Windows Vista . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1648

Windows Web Server 2008 . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1649

Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1650

How To Quick Reference . . . 1651

Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1657

Courses

Windows  (Computer Science)

Author Bios

JOHN SAVILL, BS, MCSE, MS ITP Server Administrator, MS ITP Enterprise Administrator, Microsoft MVP, is Central US manager for EMC’s Microsoft technical infrastructure practice and the firm’s chief Microsoft architect. Savill’s Windows NT site evolved into ntfaq.com, the Internet’s most widely used independent NT resource. A frequent writer for Windows IT Pro and TechNetmagazines, Savill spoke at Microsoft Tech Ed 2006, 2007, and 2008. His books include The Windows XP/2000 Answer Book.

Backcover Copy

“This book is an invaluable one-stop reference for deploying, configuring, and managing Windows Server 2008. It’s filled with John’s unique and hard-earned nuggets of advice, helpful scripts, and shortcuts that will save you time and money.”

--Mark Russinovich

The Start-to-Finish, Comprehensive Windows Server 2008 Book for Every Working Administrator and Architect

To make the most of Windows Server 2008 in production environments, you need a deep understanding of its technical details. However, accurate and reliable information is scarce, and even most skilled Windows professionals don’t know Windows Server 2008 as well as they should. The Complete Guide to Windows Server 2008brings together more than 1,500 pages of practical Windows Server 2008 insight and in-depth knowledge that you can't find anywhere else, all based on final code. John Savill—one of the world’s most visible and trusted experts on Windows Server technology—specializes in helping real companies use Windows Server 2008 to run their businesses. His access to Microsoft’s product team as a Microsoft MVP and one of 50 elite “Windows Server 2008 Delta Force Rangers” benefited this book’s accuracy and value.

Coverage includes

• Deployment planning, implementing, and managing new features, including Windows Server Core and Hyper-V virtualization
• Choosing the right installation and upgrade options for your environment
• Securing Windows Server 2008: authentication, authorization, BitLocker, certification services, and more
• Implementing TCP/IP, advanced network services, remote access, and thin-client Terminal Services
• Active Directory in depth, including Federated Services, Lightweight Directory Services, and Rights Management
• Providing high availability through Network Load Balancing and failover clustering
• Using Windows Deployment Services to quickly deploy multiple servers
• Supporting complex distributed environments with the Distributed File System
• Automating server management with PowerShell and the command prompt
• Integrating Windows Server 2008 with UNIX, Linux, and legacy NetWare servers
• Troubleshooting Windows Server 2008 and Vista environments, including an intuitive “how to” index to quickly locate answers to commonly asked questions

www.savilltech.com/completeguidetowindows2008

Give your students a choice! PearsonChoices products are designed to give your students more value and flexibility by letting them choose from a variety of text and media formats to best match their learning style and their budget.

Pearson Higher Education offers special pricing when you choose to package your text with other student resources. If you're interested in creating a cost-saving package for your students, see the Packages Tab.

• Complete Guide to Windows Server 2008, CourseSmart eTextbook, The
  Savill
  ©2009  |  Addison-Wesley Professional  |  Electronic Book; 1752 pp  |  Available
  ISBN-10: 0132777274  |  ISBN-13: 9780132777278
  Online purchase price: $34.99Brief Description  | 

  

  CourseSmart eTextbooks are a creative digital solution that offers the freedom and convenience of online, offline, and mobile access using a single platform. With a CourseSmart eTextbook, students can:

  • search the text

  • make notes online

  • print out reading assignments that incorporate lecture notes

  • bookmark important passages for later review

  • save money. As an alternative to purchasing the print textbook, students can subscribe to the same content online for a significant discount off the suggested list price of the print text.

  For more information, or to subscribe to the CourseSmart eTextbook, visit www.coursesmart.com (for customers in U.S. and Canada) or www.coursesmart.co.uk (for customers in Europe, Middle East, and Africa).

  More Info  |  Students, buy access
  

This product is a member of the following series. Click on the series name to see the full list of products in the series.

• Addison-Wesley Microsoft Technology Series

Pearson Higher Education offers special pricing when you choose to package your text with other student resources. If you're interested in creating a cost-saving package for your students contact your Pearson Higher Education representative.