20743A-ENU-TrainerHandbook

M I C R O S O F T

20743A

L E A R N I N G

P R O D U C T

Upgrading Your Skills to MCSA: Windows Server 2016

MCT USE ONLY. STUDENT USE PROHIBITED

O F F I C I A L



ii

Information in this document, including URL and other Internet Web site references, is subject to change without notice. Unless otherwise noted, the example companies, organizations, products, domain names, e-mail addresses, logos, people, places, and events depicted herein are fictitious, and no association with any real company, organization, product, domain name, e-mail address, logo, person, place or event is intended or should be inferred. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corporation. Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property.

The names of manufacturers, products, or URLs are provided for informational purposes only and Microsoft makes no representations and warranties, either expressed, implied, or statutory, regarding these manufacturers or the use of the products with any Microsoft technologies. The inclusion of a manufacturer or product does not imply endorsement of Microsoft of the manufacturer or product. Links may be provided to third party sites. Such sites are not under the control of Microsoft and Microsoft is not responsible for the contents of any linked site or any link contained in a linked site, or any changes or updates to such sites. Microsoft is not responsible for webcasting or any other form of transmission received from any linked site. Microsoft is providing these links to you only as a convenience, and the inclusion of any link does not imply endorsement of Microsoft of the site or the products contained therein. © 2016 Microsoft Corporation. All rights reserved. Microsoft and the trademarks listed at http://www.microsoft.com/trademarks are trademarks of the Microsoft group of companies. All other trademarks are property of their respective owners. Product Number: 20743A Part Number: X21-18464 Released: 09/2016


MICROSOFT LICENSE TERMS MICROSOFT INSTRUCTOR-LED COURSEWARE

These license terms are an agreement between Microsoft Corporation (or based on where you live, one of its affiliates) and you. Please read them. They apply to your use of the content accompanying this agreement which includes the media on which you received it, if any. These license terms also apply to Trainer Content and any updates and supplements for the Licensed Content unless other terms accompany those items. If so, those terms apply. BY ACCESSING, DOWNLOADING OR USING THE LICENSED CONTENT, YOU ACCEPT THESE TERMS. IF YOU DO NOT ACCEPT THEM, DO NOT ACCESS, DOWNLOAD OR USE THE LICENSED CONTENT. If you comply with these license terms, you have the rights below for each license you acquire. 1.

DEFINITIONS. a. “Authorized Learning Center” means a Microsoft IT Academy Program Member, Microsoft Learning Competency Member, or such other entity as Microsoft may designate from time to time.

b. “Authorized Training Session” means the instructor-led training class using Microsoft Instructor-Led Courseware conducted by a Trainer at or through an Authorized Learning Center. c.

“Classroom Device” means one (1) dedicated, secure computer that an Authorized Learning Center owns or controls that is located at an Authorized Learning Center’s training facilities that meets or exceeds the hardware level specified for the particular Microsoft Instructor-Led Courseware.

d. “End User” means an individual who is (i) duly enrolled in and attending an Authorized Training Session or Private Training Session, (ii) an employee of a MPN Member, or (iii) a Microsoft full-time employee. e. “Licensed Content” means the content accompanying this agreement which may include the Microsoft Instructor-Led Courseware or Trainer Content. f.

“Microsoft Certified Trainer” or “MCT” means an individual who is (i) engaged to teach a training session to End Users on behalf of an Authorized Learning Center or MPN Member, and (ii) currently certified as a Microsoft Certified Trainer under the Microsoft Certification Program.

g. “Microsoft Instructor-Led Courseware” means the Microsoft-branded instructor-led training course that educates IT professionals and developers on Microsoft technologies. A Microsoft Instructor-Led Courseware title may be branded as MOC, Microsoft Dynamics or Microsoft Business Group courseware. h. “Microsoft IT Academy Program Member” means an active member of the Microsoft IT Academy Program. i.

“Microsoft Learning Competency Member” means an active member of the Microsoft Partner Network program in good standing that currently holds the Learning Competency status.

j.

“MOC” means the “Official Microsoft Learning Product” instructor-led courseware known as Microsoft Official Course that educates IT professionals and developers on Microsoft technologies.

k. “MPN Member” means an active Microsoft Partner Network program member in good standing.


l.

“Personal Device” means one (1) personal computer, device, workstation or other digital electronic device that you personally own or control that meets or exceeds the hardware level specified for the particular Microsoft Instructor-Led Courseware.

m. “Private Training Session” means the instructor-led training classes provided by MPN Members for corporate customers to teach a predefined learning objective using Microsoft Instructor-Led Courseware. These classes are not advertised or promoted to the general public and class attendance is restricted to individuals employed by or contracted by the corporate customer. n. “Trainer” means (i) an academically accredited educator engaged by a Microsoft IT Academy Program Member to teach an Authorized Training Session, and/or (ii) a MCT.

o. “Trainer Content” means the trainer version of the Microsoft Instructor-Led Courseware and additional supplemental content designated solely for Trainers’ use to teach a training session using the Microsoft Instructor-Led Courseware. Trainer Content may include Microsoft PowerPoint presentations, trainer preparation guide, train the trainer materials, Microsoft One Note packs, classroom setup guide and Prerelease course feedback form. To clarify, Trainer Content does not include any software, virtual hard disks or virtual machines. 2.

USE RIGHTS. The Licensed Content is licensed not sold. The Licensed Content is licensed on a one copy per user basis, such that you must acquire a license for each individual that accesses or uses the Licensed Content.

2.1

Below are five separate sets of use rights. Only one set of rights apply to you.

a. If you are a Microsoft IT Academy Program Member: i. Each license acquired on behalf of yourself may only be used to review one (1) copy of the Microsoft Instructor-Led Courseware in the form provided to you. If the Microsoft Instructor-Led Courseware is in digital format, you may install one (1) copy on up to three (3) Personal Devices. You may not install the Microsoft Instructor-Led Courseware on a device you do not own or control. ii. For each license you acquire on behalf of an End User or Trainer, you may either: 1. distribute one (1) hard copy version of the Microsoft Instructor-Led Courseware to one (1) End User who is enrolled in the Authorized Training Session, and only immediately prior to the commencement of the Authorized Training Session that is the subject matter of the Microsoft Instructor-Led Courseware being provided, or 2. provide one (1) End User with the unique redemption code and instructions on how they can access one (1) digital version of the Microsoft Instructor-Led Courseware, or 3. provide one (1) Trainer with the unique redemption code and instructions on how they can access one (1) Trainer Content, provided you comply with the following: iii. you will only provide access to the Licensed Content to those individuals who have acquired a valid license to the Licensed Content, iv. you will ensure each End User attending an Authorized Training Session has their own valid licensed copy of the Microsoft Instructor-Led Courseware that is the subject of the Authorized Training Session, v. you will ensure that each End User provided with the hard-copy version of the Microsoft InstructorLed Courseware will be presented with a copy of this agreement and each End User will agree that their use of the Microsoft Instructor-Led Courseware will be subject to the terms in this agreement prior to providing them with the Microsoft Instructor-Led Courseware. Each individual will be required to denote their acceptance of this agreement in a manner that is enforceable under local law prior to their accessing the Microsoft Instructor-Led Courseware, vi. you will ensure that each Trainer teaching an Authorized Training Session has their own valid licensed copy of the Trainer Content that is the subject of the Authorized Training Session,


vii. you will only use qualified Trainers who have in-depth knowledge of and experience with the Microsoft technology that is the subject of the Microsoft Instructor-Led Courseware being taught for all your Authorized Training Sessions, viii. you will only deliver a maximum of 15 hours of training per week for each Authorized Training Session that uses a MOC title, and ix. you acknowledge that Trainers that are not MCTs will not have access to all of the trainer resources for the Microsoft Instructor-Led Courseware.

b. If you are a Microsoft Learning Competency Member: i. Each license acquired on behalf of yourself may only be used to review one (1) copy of the Microsoft Instructor-Led Courseware in the form provided to you. If the Microsoft Instructor-Led Courseware is in digital format, you may install one (1) copy on up to three (3) Personal Devices. You may not install the Microsoft Instructor-Led Courseware on a device you do not own or control. ii. For each license you acquire on behalf of an End User or Trainer, you may either: 1. distribute one (1) hard copy version of the Microsoft Instructor-Led Courseware to one (1) End User attending the Authorized Training Session and only immediately prior to the commencement of the Authorized Training Session that is the subject matter of the Microsoft Instructor-Led Courseware provided, or 2. provide one (1) End User attending the Authorized Training Session with the unique redemption code and instructions on how they can access one (1) digital version of the Microsoft InstructorLed Courseware, or 3. you will provide one (1) Trainer with the unique redemption code and instructions on how they can access one (1) Trainer Content, provided you comply with the following: iii. you will only provide access to the Licensed Content to those individuals who have acquired a valid license to the Licensed Content, iv. you will ensure that each End User attending an Authorized Training Session has their own valid licensed copy of the Microsoft Instructor-Led Courseware that is the subject of the Authorized Training Session, v. you will ensure that each End User provided with a hard-copy version of the Microsoft Instructor-Led Courseware will be presented with a copy of this agreement and each End User will agree that their use of the Microsoft Instructor-Led Courseware will be subject to the terms in this agreement prior to providing them with the Microsoft Instructor-Led Courseware. Each individual will be required to denote their acceptance of this agreement in a manner that is enforceable under local law prior to their accessing the Microsoft Instructor-Led Courseware, vi. you will ensure that each Trainer teaching an Authorized Training Session has their own valid licensed copy of the Trainer Content that is the subject of the Authorized Training Session, vii. you will only use qualified Trainers who hold the applicable Microsoft Certification credential that is the subject of the Microsoft Instructor-Led Courseware being taught for your Authorized Training Sessions, viii. you will only use qualified MCTs who also hold the applicable Microsoft Certification credential that is the subject of the MOC title being taught for all your Authorized Training Sessions using MOC, ix. you will only provide access to the Microsoft Instructor-Led Courseware to End Users, and x. you will only provide access to the Trainer Content to Trainers.


c.

If you are a MPN Member: i. Each license acquired on behalf of yourself may only be used to review one (1) copy of the Microsoft Instructor-Led Courseware in the form provided to you. If the Microsoft Instructor-Led Courseware is in digital format, you may install one (1) copy on up to three (3) Personal Devices. You may not install the Microsoft Instructor-Led Courseware on a device you do not own or control. ii. For each license you acquire on behalf of an End User or Trainer, you may either: 1. distribute one (1) hard copy version of the Microsoft Instructor-Led Courseware to one (1) End User attending the Private Training Session, and only immediately prior to the commencement of the Private Training Session that is the subject matter of the Microsoft Instructor-Led Courseware being provided, or 2. provide one (1) End User who is attending the Private Training Session with the unique redemption code and instructions on how they can access one (1) digital version of the Microsoft Instructor-Led Courseware, or 3. you will provide one (1) Trainer who is teaching the Private Training Session with the unique redemption code and instructions on how they can access one (1) Trainer Content, provided you comply with the following: iii. you will only provide access to the Licensed Content to those individuals who have acquired a valid license to the Licensed Content, iv. you will ensure that each End User attending an Private Training Session has their own valid licensed copy of the Microsoft Instructor-Led Courseware that is the subject of the Private Training Session, v. you will ensure that each End User provided with a hard copy version of the Microsoft Instructor-Led Courseware will be presented with a copy of this agreement and each End User will agree that their use of the Microsoft Instructor-Led Courseware will be subject to the terms in this agreement prior to providing them with the Microsoft Instructor-Led Courseware. Each individual will be required to denote their acceptance of this agreement in a manner that is enforceable under local law prior to their accessing the Microsoft Instructor-Led Courseware, vi. you will ensure that each Trainer teaching an Private Training Session has their own valid licensed copy of the Trainer Content that is the subject of the Private Training Session, vii. you will only use qualified Trainers who hold the applicable Microsoft Certification credential that is the subject of the Microsoft Instructor-Led Courseware being taught for all your Private Training Sessions, viii. you will only use qualified MCTs who hold the applicable Microsoft Certification credential that is the subject of the MOC title being taught for all your Private Training Sessions using MOC, ix. you will only provide access to the Microsoft Instructor-Led Courseware to End Users, and x. you will only provide access to the Trainer Content to Trainers.

d. If you are an End User: For each license you acquire, you may use the Microsoft Instructor-Led Courseware solely for your personal training use. If the Microsoft Instructor-Led Courseware is in digital format, you may access the Microsoft Instructor-Led Courseware online using the unique redemption code provided to you by the training provider and install and use one (1) copy of the Microsoft Instructor-Led Courseware on up to three (3) Personal Devices. You may also print one (1) copy of the Microsoft Instructor-Led Courseware. You may not install the Microsoft Instructor-Led Courseware on a device you do not own or control. e. If you are a Trainer. i. For each license you acquire, you may install and use one (1) copy of the Trainer Content in the form provided to you on one (1) Personal Device solely to prepare and deliver an Authorized Training Session or Private Training Session, and install one (1) additional copy on another Personal Device as a backup copy, which may be used only to reinstall the Trainer Content. You may not install or use a copy of the Trainer Content on a device you do not own or control. You may also print one (1) copy of the Trainer Content solely to prepare for and deliver an Authorized Training Session or Private Training Session.


ii.

You may customize the written portions of the Trainer Content that are logically associated with instruction of a training session in accordance with the most recent version of the MCT agreement. If you elect to exercise the foregoing rights, you agree to comply with the following: (i) customizations may only be used for teaching Authorized Training Sessions and Private Training Sessions, and (ii) all customizations will comply with this agreement. For clarity, any use of “customize” refers only to changing the order of slides and content, and/or not using all the slides or content, it does not mean changing or modifying any slide or content.

2.2 Separation of Components. The Licensed Content is licensed as a single unit and you may not separate their components and install them on different devices.

2.3 Redistribution of Licensed Content. Except as expressly provided in the use rights above, you may not distribute any Licensed Content or any portion thereof (including any permitted modifications) to any third parties without the express written permission of Microsoft. 2.4 Third Party Notices. The Licensed Content may include third party code tent that Microsoft, not the third party, licenses to you under this agreement. Notices, if any, for the third party code ntent are included for your information only. 2.5 Additional Terms. Some Licensed Content may contain components with additional terms, conditions, and licenses regarding its use. Any non-conflicting terms in those conditions and licenses also apply to your use of that respective component and supplements the terms described in this agreement. 3.

LICENSED CONTENT BASED ON PRE-RELEASE TECHNOLOGY. If the Licensed Content’s subject matter is based on a pre-release version of Microsoft technology (“Pre-release”), then in addition to the other provisions in this agreement, these terms also apply:

a. Pre-Release Licensed Content. This Licensed Content subject matter is on the Pre-release version of the Microsoft technology. The technology may not work the way a final version of the technology will and we may change the technology for the final version. We also may not release a final version. Licensed Content based on the final version of the technology may not contain the same information as the Licensed Content based on the Pre-release version. Microsoft is under no obligation to provide you with any further content, including any Licensed Content based on the final version of the technology. b. Feedback. If you agree to give feedback about the Licensed Content to Microsoft, either directly or through its third party designee, you give to Microsoft without charge, the right to use, share and commercialize your feedback in any way and for any purpose. You also give to third parties, without charge, any patent rights needed for their products, technologies and services to use or interface with any specific parts of a Microsoft technology, Microsoft product, or service that includes the feedback. You will not give feedback that is subject to a license that requires Microsoft to license its technology, technologies, or products to third parties because we include your feedback in them. These rights survive this agreement. c.

Pre-release Term. If you are an Microsoft IT Academy Program Member, Microsoft Learning Competency Member, MPN Member or Trainer, you will cease using all copies of the Licensed Content on the Pre-release technology upon (i) the date which Microsoft informs you is the end date for using the Licensed Content on the Pre-release technology, or (ii) sixty (60) days after the commercial release of the technology that is the subject of the Licensed Content, whichever is earliest (“Pre-release term”). Upon expiration or termination of the Pre-release term, you will irretrievably delete and destroy all copies of the Licensed Content in your possession or under your control.


4.

SCOPE OF LICENSE. The Licensed Content is licensed, not sold. This agreement only gives you some rights to use the Licensed Content. Microsoft reserves all other rights. Unless applicable law gives you more rights despite this limitation, you may use the Licensed Content only as expressly permitted in this agreement. In doing so, you must comply with any technical limitations in the Licensed Content that only allows you to use it in certain ways. Except as expressly permitted in this agreement, you may not: • access or allow any individual to access the Licensed Content if they have not acquired a valid license for the Licensed Content, • alter, remove or obscure any copyright or other protective notices (including watermarks), branding or identifications contained in the Licensed Content, • modify or create a derivative work of any Licensed Content, • publicly display, or make the Licensed Content available for others to access or use, • copy, print, install, sell, publish, transmit, lend, adapt, reuse, link to or post, make available or distribute the Licensed Content to any third party, • work around any technical limitations in the Licensed Content, or • reverse engineer, decompile, remove or otherwise thwart any protections or disassemble the Licensed Content except and only to the extent that applicable law expressly permits, despite this limitation.

5. RESERVATION OF RIGHTS AND OWNERSHIP. Microsoft reserves all rights not expressly granted to you in this agreement. The Licensed Content is protected by copyright and other intellectual property laws and treaties. Microsoft or its suppliers own the title, copyright, and other intellectual property rights in the Licensed Content. 6.

EXPORT RESTRICTIONS. The Licensed Content is subject to United States export laws and regulations. You must comply with all domestic and international export laws and regulations that apply to the Licensed Content. These laws include restrictions on destinations, end users and end use. For additional information, see www.microsoft.com/exporting.

7.

SUPPORT SERVICES. Because the Licensed Content is “as is”, we may not provide support services for it.

8.

TERMINATION. Without prejudice to any other rights, Microsoft may terminate this agreement if you fail to comply with the terms and conditions of this agreement. Upon termination of this agreement for any reason, you will immediately stop all use of and delete and destroy all copies of the Licensed Content in your possession or under your control.

9.

LINKS TO THIRD PARTY SITES. You may link to third party sites through the use of the Licensed Content. The third party sites are not under the control of Microsoft, and Microsoft is not responsible for the contents of any third party sites, any links contained in third party sites, or any changes or updates to third party sites. Microsoft is not responsible for webcasting or any other form of transmission received from any third party sites. Microsoft is providing these links to third party sites to you only as a convenience, and the inclusion of any link does not imply an endorsement by Microsoft of the third party site.

10.

ENTIRE AGREEMENT. This agreement, and any additional terms for the Trainer Content, updates and supplements are the entire agreement for the Licensed Content, updates and supplements.

11.

APPLICABLE LAW. a. United States. If you acquired the Licensed Content in the United States, Washington state law governs the interpretation of this agreement and applies to claims for breach of it, regardless of conflict of laws principles. The laws of the state where you live govern all other claims, including claims under state consumer protection laws, unfair competition laws, and in tort.


b. Outside the United States. If you acquired the Licensed Content in any other country, the laws of that country apply. 12.

LEGAL EFFECT. This agreement describes certain legal rights. You may have other rights under the laws of your country. You may also have rights with respect to the party from whom you acquired the Licensed Content. This agreement does not change your rights under the laws of your country if the laws of your country do not permit it to do so.

13.

DISCLAIMER OF WARRANTY. THE LICENSED CONTENT IS LICENSED "AS-IS" AND "AS AVAILABLE." YOU BEAR THE RISK OF USING IT. MICROSOFT AND ITS RESPECTIVE AFFILIATES GIVES NO EXPRESS WARRANTIES, GUARANTEES, OR CONDITIONS. YOU MAY HAVE ADDITIONAL CONSUMER RIGHTS UNDER YOUR LOCAL LAWS WHICH THIS AGREEMENT CANNOT CHANGE. TO THE EXTENT PERMITTED UNDER YOUR LOCAL LAWS, MICROSOFT AND ITS RESPECTIVE AFFILIATES EXCLUDES ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT.

14.

LIMITATION ON AND EXCLUSION OF REMEDIES AND DAMAGES. YOU CAN RECOVER FROM MICROSOFT, ITS RESPECTIVE AFFILIATES AND ITS SUPPLIERS ONLY DIRECT DAMAGES UP TO US$5.00. YOU CANNOT RECOVER ANY OTHER DAMAGES, INCLUDING CONSEQUENTIAL, LOST PROFITS, SPECIAL, INDIRECT OR INCIDENTAL DAMAGES.

This limitation applies to o anything related to the Licensed Content, services, content (including code) on third party Internet sites or third-party programs; and o claims for breach of contract, breach of warranty, guarantee or condition, strict liability, negligence, or other tort to the extent permitted by applicable law. It also applies even if Microsoft knew or should have known about the possibility of the damages. The above limitation or exclusion may not apply to you because your country may not allow the exclusion or limitation of incidental, consequential or other damages.

Please note: As this Licensed Content is distributed in Quebec, Canada, some of the clauses in this agreement are provided below in French. Remarque : Ce le contenu sous licence étant distribué au Québec, Canada, certaines des clauses dans ce contrat sont fournies ci-dessous en français.

EXONÉRATION DE GARANTIE. Le contenu sous licence visé par une licence est offert « tel quel ». Toute utilisation de ce contenu sous licence est à votre seule risque et péril. Microsoft n’accorde aucune autre garantie expresse. Vous pouvez bénéficier de droits additionnels en vertu du droit local sur la protection dues consommateurs, que ce contrat ne peut modifier. La ou elles sont permises par le droit locale, les garanties implicites de qualité marchande, d’adéquation à un usage particulier et d’absence de contrefaçon sont exclues.

LIMITATION DES DOMMAGES-INTÉRÊTS ET EXCLUSION DE RESPONSABILITÉ POUR LES DOMMAGES. Vous pouvez obtenir de Microsoft et de ses fournisseurs une indemnisation en cas de dommages directs uniquement à hauteur de 5,00 $ US. Vous ne pouvez prétendre à aucune indemnisation pour les autres dommages, y compris les dommages spéciaux, indirects ou accessoires et pertes de bénéfices. Cette limitation concerne: • tout ce qui est relié au le contenu sous licence, aux services ou au contenu (y compris le code) figurant sur des sites Internet tiers ou dans des programmes tiers; et. • les réclamations au titre de violation de contrat ou de garantie, ou au titre de responsabilité stricte, de négligence ou d’une autre faute dans la limite autorisée par la loi en vigueur.


Elle s’applique également, même si Microsoft connaissait ou devrait connaître l’éventualité d’un tel dommage. Si votre pays n’autorise pas l’exclusion ou la limitation de responsabilité pour les dommages indirects, accessoires ou de quelque nature que ce soit, il se peut que la limitation ou l’exclusion ci-dessus ne s’appliquera pas à votre égard.

EFFET JURIDIQUE. Le présent contrat décrit certains droits juridiques. Vous pourriez avoir d’autres droits prévus par les lois de votre pays. Le présent contrat ne modifie pas les droits que vous confèrent les lois de votre pays si celles-ci ne le permettent pas. Revised July 2013


Upgrading Your Skills to MCSA: Windows Server 2016 xi


Acknowledgments


xii

Microsoft Learning would like to acknowledge and thank the following for their contribution towards developing this title. Their effort at various stages in the development has ensured that you have a good classroom experience.

Andrew J. Warren – Content Developer

Andrew Warren has more than 25 years of experience in the information technology (IT) industry, many of which he has spent teaching and writing. He has been involved as a Subject Matter Expert for many of the Windows Server 2012 courses, and the technical lead on many Windows 8 courses. He also has been involved in developing TechNet sessions on Microsoft Exchange Server. Based in the United Kingdom, Andrew runs his own IT training and education consultancy.

Claus Jacob Wordenskjold – Content Developer

Claus Jacob Wordenskjold is an independent consultant and trainer based in Denmark. He founded his company, Chinchilla Data, in 1995, and he has more than 25 years of experience in IT. Claus has been a Microsoft Certified Trainer (MCT) since 2002, and he has delivered training throughout Europe. He specializes in Windows Client and Windows Server courses, but he conducts occasional training in Microsoft SharePoint. Claus holds certifications in every Windows operating system since Windows 2000, and he provides consulting services on Windows Server, Active Directory Domain Services (AD DS), and Group Policy. Claus has been a speaker at local Danish Microsoft events, and he has authored several Windows-related courses.

Dave Franklyn – Content Developer

David M. Franklyn, MCSE, MCITP, Microsoft MVP Windows and Devices for IT, is also an Eastern USA Regional Lead MCT. Dave has been a Microsoft MVP since 2011, and a Senior Information Technology Trainer and Consultant at Auburn University in Montgomery Alabama, since 1998. He is the owner of DaveMCT, Inc. LLC and is a training partner with Dunn Training. Working with computers since 1976, Dave started out in the mainframe world and moved early into the networking arena. Before joining Auburn University, Dave spent 22 years in the United States Air Force as an electronic communications and computer systems specialist, retiring in 1998. Dave is president of the Montgomery Windows IT Professional Group, and a guest speaker at many events involving Microsoft products.

Joshua Shackelford – Content Developer Joshua Shackelford has more than 12 years of experience in the IT industry as an engineer, architect, consultant, and administrator. Joshua has extensive experience consulting on the System Center suite, Hyper-V, and Active Directory. His clients include large energy corporations, financial institutions, and retail organizations. Joshua has been involved as a SME on Windows Server, Hyper-V, and Failover Clustering.

Slavko Kukrika – Technical Reviewer

Slavko Kukrika has been an MCT for more than 18 years. He holds many technical certifications, and he is honored to be a Microsoft Most Valuable Professional (MVP). Slavko specializes in the Windows operating system, Active Directory, and virtualization. He is a Windows Insider, and he has worked with Windows 10 since it became available publicly. Slavko regularly presents at technical conferences, and he is the author of several Microsoft Official Courses. In his private life, Slavko is the proud father of two sons, and he tries to extend each day to at least 25 hours or more!


Upgrading Your Skills to MCSA: Windows Server 2016 xiii

Contents Module 1: Installing and configuring Windows Server 2016 Module Overview

1-1

Lesson 1: Introducing Windows Server 2016

1-2

Lesson 2: Installing Windows Server 2016

1-7

Lesson 3: Configuring Windows Server 2016

1-15

Lab: Installing and configuring Nano Server

1-21

Lesson 4: Preparing for upgrades and migrations

1-26

Lesson 5: Migrating server roles and workloads

1-34

Lesson 6: Windows Server activation models

1-37

Module Review and Takeaways

1-40

Module 2: Overview of storage in Windows Server 2016 Module Overview

2-1

Lesson 1: Overview of storage in Windows Server 2016

2-2

Lesson 2: Implementing Data Deduplication

2-11

Lesson 3: Configuring iSCSI storage

2-30

Lab A: Implementing and managing storage

2-38

Lesson 4: Configuring the Storage Spaces feature in Windows Server 2016

2-45

Lab B: Implementing and managing advanced storage solutions

2-55


2-63

Module 3: Implementing Directory Services Module Overview

3-1

Lesson 1: Deploying Active Directory domain controllers

3-2

Lesson 2: Implementing service accounts

3-14

Lab: Implementing and managing AD DS

3-18

Lesson 3: Azure AD

3-22


3-31

Module 4: Implementing AD FS Module Overview

4-1

Lesson 1: Overview of AD FS

4-2

Lesson 2: Deploying AD FS

4-12

Lesson 3: Implementing AD FS for a single organization

4-18

Lab A: Implementing AD FS

4-24


Lesson 4: Implementing Web Application Proxy

4-29

Lab B: Implementing Web Application Proxy

4-35

Lesson 5: Implementing SSO with Microsoft Online Services

4-39


4-42

Module 5: Implementing network services Module Overview

5-1

Lesson 1: Overview of networking enhancements

5-2

Lesson 2: Implementing IPAM

5-20

Lesson 3: Managing IP address spaces with IPAM

5-30

Lab: Implementing network services

5-37


5-45

Module 6: Implementing Hyper-V Module Overview

6-1

Lesson 1: Configure the Hyper-V role in Windows Server 2016

6-2

Lesson 2: Configuring Hyper-V storage

6-11

Lesson 3: Configuring Hyper-V networking

6-21

Lesson 4: Configuring Hyper-V virtual machines

6-28

Lab: Implementing server virtualization with Hyper-V

6-38


6-45

Module 7: Configuring advanced networking features Module Overview

7-1

Lesson 1: Overview of high-performance networking features

7-2

Lesson 2: Configuring advanced Hyper-V networking features

7-12

Lab: Configuring advanced Hyper-V networking features

7-23


7-27

Module 8: Implementing Software Defined Networking Module Overview

8-1

Lesson 1: Overview of Software Defined Networking

8-2

Lesson 2: Implementing network virtualization

8-11

Lesson 3: Implementing Network Controller

8-16

Lab: Deploying Network Controller

8-29


8-34


xiv


Upgrading Your Skills to MCSA: Windows Server 2016 xv

Module 9: Implementing remote access Module Overview

9-1

Lesson 1: Remote access overview

9-2

Lesson 2: Implementing DirectAccess

9-9

Lesson 3: Implementing VPN

9-24

Lab: Implementing DirectAccess

9-36


9-41

Module 10: Deploying and managing Windows and Hyper-V containers Module Overview

10-1

Lesson 1: Overview of containers in Windows Server 2016

10-2

Lesson 2: Deploying Windows Server and Hyper-V containers

10-8

Lesson 3: Installing, configuring, and managing containers by using Docker

10-16


10-33

Module 11: Implementing failover clustering Module Overview

11-1

Lesson 1: Overview of failover clustering

11-2

Lesson 2: Implementing a failover cluster

11-18

Lesson 3: Configuring highly available applications and services on a failover cluster

11-24

Lesson 4: Maintaining a failover cluster

11-30

Lesson 5: Implementing a stretch cluster

11-36

Lab: Implementing failover clustering

11-43


11-49

Module 12: Implementing failover clustering with Windows Server 2016 Hyper-V Module Overview

12-1

Lesson 1: Overview of the integration of Hyper-V Server 2016 with failover clustering

12-2

Lesson 2: Implementing Hyper-V virtual machines on failover clusters

12-7

Lesson 3: Implementing Windows Server 2016 Hyper-V virtual machine migration

12-20

Lesson 4: Implementing Hyper-V Replica

12-24

Lab: Implementing failover clustering with Windows Server 2016 Hyper-V

12-29


12-36


Lab Answer Keys Module 1 Lab: Installing and configuring Nano Server

L1-1

Module 2 Lab A: Implementing and managing storage

L2-7

Module 2 Lab B: Implementing and managing advanced storage solutions

L2-16

Module 3 Lab: Implementing and managing AD DS

L3-23

Module 4 Lab A: Implementing AD FS

L4-27

Module 4 Lab B: Implementing Web Application Proxy

L4-32

Module 5 Lab: Implementing network services

L5-37

Module 6 Lab: Implementing server virtualization with Hyper-V

L6-47

Module 7 Lab: Configuring advanced Hyper-V networking features

L7-55

Module 8 Lab: Deploying Network Controller

L8-59

Module 9 Lab: Implementing DirectAccess

L9-63

Module 11 Lab: Implementing failover clustering

L11-67

Module 12 Lab: Implementing failover clustering with Windows Server 2016 Hyper-V

L12-77


xvi


About This Course

About This Course This section provides a brief description of the course, audience, suggested prerequisites, and course objectives.

Course Description Note: This first release (‘A’) MOC version of course 20743A has been developed on Windows Server 2016 Technical Preview 5. Microsoft Learning will release a ‘B’ version of this course after the RTM version of the software is available.

xvii

This five-day, instructor-led course explains how to implement and configure new Windows Server 2016 features and functionality. This course is for information technology (IT) professionals who want to upgrade their technical skills from Windows Server 2008 or Windows Server 2012 to Windows Server 2016. This course presumes a high level of knowledge about previous Windows Server technologies and skills equivalent to the Microsoft Certified Solutions Associate (MCSA): Windows Server 2008 or Windows Server 2012 credential.

This course is not a product-upgrade course, detailing considerations for migrating and upgrading students’ specific environment to Windows Server 2016. Rather, this course provides updates to students' existing Windows Server knowledge and skills, as they pertain to Windows Server 2016.

Audience

This course is for IT professionals who are experienced Windows Server 2012 or Windows Server 2008 system administrators, with real-world experience working in a Windows Server 2008 R2 or Windows Server 2008 enterprise environment. Additionally, students should have obtained the MCSA credential for Windows Server 2008 or Windows Server 2012, or they should have equivalent knowledge. IT professionals who plan to take the Microsoft Certified Solutions Expert (MCSE) exams might be interested in this course, as preparation for the MCSA exams, which are a prerequisite for the MCSE specialties.

Student Prerequisites This course requires that you meet the following prerequisites: •

Two or more years of experience with deploying and managing Windows Server 2012 or Windows Server 2008 environments.

•

Experience with day-to-day Windows Server 2012 or Windows Server 2008 system-administration management and maintenance tasks.

•

Experience with Windows networking technologies and implementation.

•

Experience with Active Directory technologies and implementation.

•

Experience with Windows Server virtualization technologies and implementation.

•

Knowledge equivalent to the MCSA credentials of Windows Server 2008 or Windows Server 2012.

Course Objectives After completing this course, students will be able to: •

Install and configure Windows Server 2016.

•

Describe storage in Windows Server 2016.

•

Implement directory services.

•

Implement Active Directory Federation Services (AD FS).

•

Describe networking.

•

Implement Hyper-V.

•

Configure advanced networking features.

•

Implement software-defined networking.

•

Implement remote access.

•

Deploy and manage Windows and Hyper-V containers.

•

Implement failover clustering.

•

Implement failover clustering by using virtual machines.

Course Outline The course outline is as follows:


xviii

Module 1, “Installing and configuring Windows Server 2016,” explains how to install and perform postinstallation configuration of Windows Server 2016 servers.

Module 2, “Overview of storage in Windows Server 2016,” explains how to configure storage in Windows Server 2016. Module 3, “Implementing Directory Services,” explains how to implement the Directory Services feature. This module also introduces Microsoft Azure Active Directory. Module 4, “Implementing AD FS,” explains how to implement an AD FS deployment. Module 5, “Implementing network services,” explains how to configure advanced features for Dynamic Host Configuration Protocol (DHCP) and how to configure IP Address Management (IPAM). Module 6, “Implementing Hyper-V,” explains how to how to install and configure Hyper-V virtual machines. Module 7, “Configuring advanced networking features,” explains how to implement an advanced networking infrastructure.

Module 8, “Implementing Software Defined Networking,” explains how to implement software-defined networking. Module 9, “Implementing remote access,” explains how to configure connectivity for remote users by using the DirectAccess feature and virtual private networks (VPN).

Module 10, “Deploying and managing Windows and Hyper-V containers,” provides an overview of Windows Server 2016 containers. Additionally, it explains how to deploy, install, configure, and manage containers in Windows Server 2016.


About This Course

xix

Module 11, “Implementing failover clustering,” explains how to implement failover clustering to provide high availability for network services and applications. Module 12, “Implementing failover clustering with Windows Server 2016 Hyper-V,” explains how to deploy and manage Hyper-V virtual machines in a failover cluster.

Course Materials

The following materials are included with your kit: •

Course Handbook: a succinct classroom learning guide that provides the critical technical information in a crisp, tightly-focused format, which is essential for an effective in-class learning experience.


xx

o

Lessons: guide you through the learning objectives and provide the key points that are critical to the success of the in-class learning experience.

o

Labs: provide a real-world, hands-on platform for you to apply the knowledge and skills learned in the module.

o

Module Reviews and Takeaways: provide on-the-job reference material to boost knowledge and skills retention.

o

Lab Answer Keys: provide step-by-step lab solution guidance.

Additional Reading: Course Companion Content on the http://www.microsoft.com /learning/en/us/companion-moc.aspx Site: searchable, easy-to-browse digital content with integrated premium online resources that supplement the Course Handbook. •

Modules: include companion content, such as questions and answers, detailed demo steps and additional reading links, for each lesson. Additionally, they include Lab Review questions and answers and Module Reviews and Takeaways sections, which contain the review questions and answers, best practices, common issues and troubleshooting tips with answers, and real-world issues and scenarios with answers.

•

Resources: include well-categorized additional resources that give you immediate access to the most current premium content on TechNet, MSDN, or Microsoft Press.

•

Course evaluation: at the end of the course, you will have the opportunity to complete an online evaluation to provide feedback on the course, training facility, and instructor. o

To provide additional comments or feedback on the course, send an email to [email protected]. To inquire about the Microsoft Certification Program, send an email to [email protected].


About This Course

Virtual Machine Environment

This section provides the information for setting up the classroom environment to support the business scenario of the course.

Virtual Machine Configuration In this course, you will use Microsoft Hyper-V to perform the labs. Note: Pay close attention to the steps at the end of each lab that explain what you need to do with the virtual machines. In most labs, you will revert the virtual machine to the checkpoint that you create during classroom setup. In some labs, you will not revert the virtual machines, but will keep them running for the next lab. The following table shows the role of each virtual machine that is used in this course: Virtual machine

Role

20743A-LON-DC1 (-B, -C)

Domain controller running Windows Server 2016 in the Adatum.com domain

20743A-LON-SVR1

Windows Server 2016 server in the Adatum.com domain

20743A-LON-SVR2


20743A-LON-SVR3


20743A-LON-CORE

Windows Server 2016 server running the Server Core installation

20743A-NANO-SVR1

Windows Server 2016 Nano Server

20743A-LON-CL1

Client computer running Windows 10 and Microsoft Office 2016

20743A-LON-CL2

Client computer running Windows 10 and Office 2016

20743A-LON-CL3

Client computer running Windows 10 and Office 2016

20743A-LON-RTR

Stand-alone Windows Server 2016 computer used as a router

20743A-TREY-DC1

Domain controller running Windows Server 2016 in the TreyResearch.net domain

20743A-INET1

Stand-alone Windows Server 2016 computer used as a simulated Internet host

20743A-LON-HOST1

Virtual hard disk with Windows Server 2016 used for boot from virtual hard disk exercises

20743A-LON-HOST2

Virtual hard disk with Windows Server 2016 used for boot from virtual hard disk exercises

xxi

Virtual machine

Role

20743A-LON-NVHOST3

Nested host Windows Server 2016 virtual machine

20743A-LON-NVHOST4

Nested host Windows Server 2016 virtual machine

Software Configuration The following software is installed on each VM: •

Either Windows Server 2016 or Windows 10

•

For client virtual machines, Office 2016

A Microsoft Azure trial subscription is required.

Classroom Setup Each classroom computer will have the same virtual machine configured in the same way.

Course Hardware Level To ensure a satisfactory student experience, Microsoft Learning requires a minimum equipment configuration for trainer and student computers in all Microsoft Certified Partner for Learning Solutions (CPLS) classrooms in which Official Microsoft Learning Product courseware is taught. Hardware Level 7 •

Intel Virtualization Technology (Intel VT) or AMD Virtualization (AMD-V) processor

•

Dual 120-gigabyte (GB) hard disks 7,200 RPM Serial ATA (SATA) or better*

•

16 GB of RAM

•

DVD drive

•

Network adapter

•

Super VGA (SVGA) 17-inch monitor

•

Microsoft mouse or a compatible pointing device

•

Sound card with amplified speakers

* Striped Additionally, the instructor’s computer must be connected to a projection display device that supports SVGA 1024 × 768 pixels and 16-bit colors.


xxii

MCT USE ONLY. STUDENT USE PROHIBITED 1-1

Module 1 Installing and configuring Windows Server 2016 Contents: Module Overview

1-1

Lesson 1: Introducing Windows Server 2016

1-2

Lesson 2: Installing Windows Server 2016

1-7

Lesson 3: Configuring Windows Server 2016

1-15

Lab: Installing and configuring Nano Server

1-21

Lesson 4: Preparing for upgrades and migrations

1-26

Lesson 5: Migrating server roles and workloads

1-34

Lesson 6: Windows Server activation models

1-37


1-40

Module Overview

To help ensure that your organization obtains the maximum benefit from implementing the Windows Server 2016 operating system, you should be familiar with its many new and improved features. This module introduces you to Windows Server 2016 and describes how to install it, how to perform postinstallation configuration tasks, and how to configure it to support remote management. This module also introduces the concept of enabling and configuring Windows container support in Windows Server 2016. You will also learn how to plan a server and migration strategy, and how to migrate server roles and workloads. Finally, you will learn how to choose the most appropriate activation model for your organization.

Objectives After completing this module, you will be able to: •

Describe the new and improved features in Windows Server 2016.

•

Install Windows Server 2016.

•

Configure and manage Windows Server 2016.

•

Plan a server upgrade and migration strategy.

•

Perform a migration of server roles and workloads within a domain and across domains.

•

Choose an appropriate activation model.

Installing and configuring Windows Server 2016

Lesson 1

Introducing Windows Server 2016


1-2

Knowing the capabilities of the Windows Server 2016 operating system enables you to use it effectively and take full advantage of what it can offer your organization. Some of the many improvements to Windows Server 2016 include increased scalability and performance; improved virtualization; improved management tools; and additional deployment options, including Nano Server. This lesson explores these new features and capabilities in Windows Server 2016.

Lesson Objectives After completing this lesson, you will be able to: •

Select a suitable Windows Server 2016 edition.

•

Describe the new and improved features of Windows Server 2016.

•

Explain how Windows Server 2016 eases integration with Microsoft cloud services.

Selecting a suitable Windows Server edition You can choose one of several editions of Windows Server 2016. These editions allow organizations to select the Windows Server 2016 version that best meets their needs, rather than pay for features that they do not require. When system administrators deploy a server for a specific role, they can reduce costs by selecting the appropriate edition. The following table describes the Windows Server 2016 editions.

Edition

Description

The Windows Server 2016 Standard edition

Provides many of the roles and features available for the Windows Server 2016 operating system. This edition supports up to 64 sockets and up to 4 terabytes (TB) of random access memory (RAM). It includes two virtual machine licenses.

The Windows Server 2016 Datacenter edition

Provides all of the roles and features available for the Windows Server 2016 operating system. This edition supports up to 64 sockets, up to 640 processor cores, and up to 4 TB of RAM. It includes unlimited Windows Server–based virtual machine licenses for virtual machines that run on the same hardware.

The Windows Server 2016 Foundation edition

Designed for small businesses. This edition allows only 15 users, precludes being joined to a domain, and includes limited server roles. It supports one processor core and up to 32 gigabytes (GB) of RAM.

The Windows Server 2016 Essentials edition

Corresponds to Windows Small Business Server from earlier versions of Windows Server. This edition is available in two forms: • As an installable server role in an existing domain. • As a core Windows Server edition on a virtual machine, by using a wizard.

This edition cannot function as a virtualization server, failover clustering server, Server Core server, or Remote Desktop Services server. It allows 25 users and 50 devices. It supports two processor cores and up to 64 GB of RAM. The new features and improvements include client deployment, user management, storage and data protection, and Microsoft Office 365 integration.


Upgrading Your Skills to MCSA: Windows Server 2016 1-3

Edition

Description

Microsoft Hyper-V Server 2016

Acts as a standalone virtualization server for virtual machines. The host operating system has no licensing cost (it is free), but virtual machines must be licensed separately. This edition supports up to 64 sockets and up to 4 TB of RAM. It supports domain joining. It does not support Windows Server 2016 roles other than limited file service features. This edition has no GUI, but it does have a UI that displays a menu of configuration tasks.

The Windows Storage Server 2016 Workgroup edition

Acts as an entry-level unified storage appliance. This edition allows 50 users, one processor core, and 32 GB of RAM. It supports domain joining.

The Windows Storage Server 2016 Standard edition

Supports up to 64 sockets but is licensed on a two-socket, incrementing basis. This edition supports up to 4 TB of RAM. It includes two virtual machine licenses. It supports domain joining. It supports some roles, including Domain Name System (DNS) and Dynamic Host Configuration Protocol (DHCP) server roles, but it does not support others, including Active Directory Domain Services (AD DS), Active Directory Certificate Services (AD CS), or Active Directory Federation Services (AD FS).

Note: At the time of this writing, these details had not been finalized.

What is new since Windows Server 2008 was released? Windows Server 2016 provides many new features and a number of significant improvements over earlier versions of Windows Server. Some of these features and improvements were first introduced in Windows Server 2012 or Windows Server 2012 R2, whereas others are new to Windows Server 2016.

New features and improvements introduced in Windows Server 2012 or Windows Server 2012 R2 The following features and feature improvements in Windows Server 2016 were first introduced in Windows Server 2012 or Windows Server 2012 R2: •

Work Folders. Provides a mechanism for both domain-joined computers and those that are not domain joined to access and synchronize corporate data files.

•

DHCP failover. Enables you to deploy two DHCP servers containing overlapping DHCP scopes. If a DHCP server goes offline, DHCP client computers can renew their IP configurations from the failover DHCP server.

•

IP Address Management (IPAM). Provides administrative and monitoring capabilities for the IP address infrastructure within your organization’s networks. With IPAM, you can monitor, audit, and manage servers running DHCP and DNS.



1-4

•

Dynamic Access Control. This claims-based authorization platform enables you to control access to file resources within your organization. This is in addition to any folder or shared folder permissions already protecting the resource. Dynamic Access Control enables you to apply access control permissions based on rules that can include the sensitivity of the resources, the user's job or role, and the configuration of the device that is used to access these resources.

•

Data Deduplication. Involves finding and removing duplication within data. By segmenting files into small, variable-sized pieces, identifying duplicate pieces, and maintaining a single copy of each piece, Data Deduplication enables you to store more data in less space.

•

Storage Spaces. Enables cost-effective, highly available, scalable, and flexible storage for critical deployments. Storage Spaces are based on virtual disks that are created from free space in a storage pool. Storage pools are collections of physical disks that enable you to aggregate disks, expand capacity in a flexible manner, and delegate administration.

•

Storage tiers. Automatically moves frequently accessed data to faster storage and less frequently accessed data to slower storage.

•

Better support for domain controller virtualization. Although many organizations have virtualized domain controllers for several years, potential issues can affect the reliability of this configuration. A feature, known as GenerationID, changes whenever the virtual machine experiences an event that affects its position in time. During startup and normal operations, a virtual domain controller compares the current value of GenerationID against the expected value. A mismatch is interpreted as a rollback event, and the domain controller employs safeguards to prevent the virtual domain controller from creating duplicate security principals.

•

The ability to clone virtual domain controllers. Enables you to deploy new virtual domain controllers by cloning existing ones.

Note: This is not a complete list of all the new or improved features in Windows Server 2012 or Windows Server 2012 R2.

New features and improvements introduced in Windows Server 2016 The following features and feature improvements were introduced in Windows Server 2016: •

Nano Server. Nano Server is a new installation option for Windows Server 2016. Be it has no graphical or command prompt interface, it has a significantly lower hardware requirement than even Server Core. Nano Server is the ideal platform for Hyper-V, Hyper-V cluster, and scale-out file servers, and cloud service apps.

•

Windows Server containers and Hyper-V containers. Containers enable you to isolate your apps from the operating system environment. This improves security and reliability. Windows containers are isolated from one another but run on the host operating system. Hyper-V containers are further isolated, because they run within a virtual machine.

•

Docker. Docker is a technology for managing containers. Although Docker is usually associated with Linux, Windows Server 2016 provides support for Docker as a means for managing Windows containers and Hyper-V containers.

•

Rolling upgrades for Hyper-V and storage clusters. These upgrades enable you to add Windows Server 2016 nodes to an existing Windows Server 2012 R2 failover cluster. The cluster continues to operate at a Windows Server 2012 R2 functional level until all the nodes are upgraded.

•

The ability to hot add and hot remove virtual memory and network adapters from virtual machines. In Hyper-V in Windows Server 2016, you can now add or remove virtual memory and network adapters while the virtual machines are running.



•

Nested virtualization. In Hyper-V in Windows Server 2016, you can enable nested virtualization, which allows you to run Hyper-V virtual machines within a virtual machine.

•

PowerShell Direct. This feature enables you to run Windows PowerShell commands against a guest operating system in a virtual machine without handling security policies, host network settings, or firewall settings.

•

Shielded virtual machines. Shielding your virtual machines enables you to help protect the data on them from unauthorized access.

•

Windows Defender. Windows Defender is provided to help protect your server against malware. Although the Windows Defender interface is not installed by default, the antimalware patterns are automatically kept up to date.

•

Storage Spaces Direct. This feature enables you to build highly available storage with directly attached disks on each node in a cluster. The Server Message Block 3 (SMB3) protocol provides resiliency.

•

Storage Replica. This feature enables you to synchronously or asynchronously replicate volumes at the block level.

•

Microsoft Passport. This service replaces passwords with two-factor authentication that consists of an enrolled device and a Windows Hello (biometric) authentication or PIN. This helps provide a more secure and convenient sign-in experience.

Integration with Microsoft cloud services Organizations are increasingly moving some or all of their IT infrastructure and services to the cloud. Whereas large organizations usually have the technical skill set to integrate and migrate their on-premises infrastructure to the cloud, small and medium-sized businesses might struggle to accomplish the same tasks. Windows Server 2016 seeks to simplify the process for integration with Microsoft cloud services. One way that Windows Server 2016 accomplishes this is through the provision of the Windows Server Essentials Experience server role. This role provides easy access to cloud service integration features.

The Windows Server Essentials Experience server role To begin the process of integrating your server running Windows Server 2016 with Microsoft cloud services, start by installing the Windows Server Essentials Experience server role. Use the following procedure: 1.

On your server, in Server Manager, click Add roles and features.

2.

Click Next twice, select the appropriate server from the list, and then click Next.

3.

In the Roles list, select Windows Server Essentials Experience, and then click Next.

4.

Click Add Features, and then click Next twice.

5.

Click Next, and then click Install.



1-6

6.

When prompted, click Close.

7.

In Server Manager, click the notification flag, and then click Configure Windows Server Essentials.

8.

In the Configure Windows Server Essentials Wizard, click Configure.

9.

After your server is configured, click Close.

10. Open the Windows Server Essentials Experience console from your server desktop. You can now configure integration with online services. From the console, click SERVICES. You can configure integration with the following Microsoft cloud services: •

Microsoft Azure Active Directory. Enables user name and password synchronization from the local AD DS to Azure Active Directory (Azure AD).

•

Office 365. Enables integration with Office 365, although the user name and password integration is handled by Azure AD.

•

Microsoft Intune. Enables you to assign Intune licenses to your local directory to enable the management of users’ devices.

•

Azure Virtual Network. Enables you to set up and configure hybrid deployments, with part of your infrastructure in the cloud and the rest on-premises.

•

Azure Backup. Enables you to easily set up Azure Backup as a means of providing for data recovery from the Microsoft cloud platform.

•

Azure Recovery. Enables you to replicate recovery information to the Microsoft cloud platform.

•

Microsoft Exchange Server. Enables you to configure integration between your local Exchange Server environment and Microsoft cloud services.

To configure integration, click the appropriate service, and then click the appropriate link. Note: You must have an appropriate Microsoft cloud services subscription to configure these integrations. Verify the correctness of the statement by placing a mark in the column to the right. Statement Docker is a container that enables you to run an app in an isolated and portable operating environment.

Answer



Lesson 2

Installing Windows Server 2016

When you prepare to install Windows Server 2016, you must understand whether a particular hardware configuration is suitable. You must also select among the installation options: Windows Server 2016 (Desktop Experience), Server Core, or Nano Server. This lesson describes each of these installation options and provides guidance on how to perform an installation of Windows Server 2016.

Lesson Objectives After completing this lesson, you will be able to: •

List the hardware requirements for Windows Server 2016.

•

Describe the installation options for Windows Server.

•

Describe Server Core.

•

Describe Nano Server.

•

Select a suitable installation type.

•

Install Nano Server.

Hardware requirements The hardware requirements define the absolute minimum required to run the server software. The actual hardware requirements depend on the services that the server is hosting, the load on the server, and how responsive you want the server to be. The services and features of each role put a unique load on network, disk I/O, processor, and memory resources. Virtualized deployments of Windows Server 2016 must match the same hardware specifications as those required for physical deployments. Windows Server 2016 is supported on the Hyper-V virtualization platform and on certain non-Microsoft virtualization platforms. The following table shows the minimum hardware requirements for Windows Server 2016. Component

Requirement

Processor architecture

64-bit

Processor speed

1.4 gigahertz (GHz)

RAM

512 MB

Hard disk space

32 GB


Overview of installation options When you install Windows Server 2016, you can select one of three installation options:


1-8

•

Windows Server 2016 (Desktop Experience). This is a full server installation and includes a complete graphical management interface. This installation option supports all Windows Server roles.

•

Windows Server 2016. This is the equivalent of Server Core in earlier versions of Windows Server and provides for a command-line management interface. This installation option has a reduced hardware footprint but does not support all Windows Server roles.

•

Nano Server. This is a new installation option for which Windows Server 2012 and earlier versions have no equivalent. Nano Server is administered remotely, and it is optimized for hosting in private clouds and datacenters and for running applications that are developed by using cloud application patterns.

Note: You cannot directly select the Nano Server installation from the installation media during setup but must manually build it by using Windows PowerShell cmdlets from the installation media. Nano Server uses fewer hardware resources than even Server Core, but it supports fewer server roles.

What is Server Core? Server Core is an installation option for Windows Server 2016 that uses fewer hardware resources than the full installation option. Server Core does not come installed with a GUI for management purposes, but you can manage Server Core locally by using Windows PowerShell or a command-line interface, or you can manage it remotely by using one of the remote management options. Remote management is covered later in this module. A Windows Server 2016 Server Core installation offers fewer components and administrative management options than the Windows Server 2016 (Desktop Experience) installation option. Server Core is the default installation option when you install Windows Server 2016. Note: Unlike with some earlier versions of Windows Server, when you choose Server Core or Server with Desktop Experience at the time of installation, you cannot later convert to the other mode.



The Server Core option has the following advantages over the full Windows Server 2016 installation option: •

Reduced update requirements. Because Server Core installs fewer components, its deployment requires you to install fewer software updates. This reduces the number of monthly restarts required and the amount of time required for an administrator to service Server Core.

•

A reduced hardware footprint. Computers running Server Core require less RAM and less hard disk space. When Server Core is virtualized, this means that you can deploy more servers on the same host.

To perform most important management tasks on Server Core, you must use remote management. However, when you are connected locally, you can use the tools that are listed in the following table to manage Server Core deployments of Windows Server 2016. Tool

Function

Cmd.exe

Allows you to run traditional command-line tools, such as ping.exe, ipconfig.exe, and netsh.exe.

PowerShell.exe

Launches a Windows PowerShell session on the Server Core deployment. You then can perform Windows PowerShell tasks normally. Windows Server 2016 comes with Windows PowerShell version 5.0 installed.

Sconfig.cmd

Functions as a command-line, menu-driven administrative tool that enables you to perform most common server administrative tasks, such as configuring networking, workgroups, and domains, and configuring Windows Firewall.

Regedt32.exe

Provides registry access within the Server Core environment.

Msinfo32.exe

Allows you to view system information about the Server Core deployment.

Taskmgr.exe

Launches Task Manager.

Server roles available in Server Core The following server roles are available on Server Core deployments: •

AD CS

•

AD DS

•

DHCP Server

•

DNS Server

•

File Services (including File Server Resource Manager)

•

Active Directory Lightweight Directory Services (AD LDS)

•

Hyper-V

•

Print and Document Services

•

Streaming Media Services

•

Web Server (including a subset of ASP.NET)

•

Windows Server Update Server

•

Active Directory Rights Management Server

•

Routing and Remote Access Server and the following sub-roles: o

Remote Desktop Connection Broker

o

Licensing

o

Virtualization

What is Nano Server? Nano Server is a new installation option for Windows Server 2016 that is similar to Windows Server in Server Core mode. However, although it has a significantly smaller hardware footprint, it has no local sign-in capability and it supports only 64-bit apps, tools, and agents. Setup is significantly faster, and after installation, the operating system requires far fewer updates. Note: Nano Server is not available for selection through the Windows Server 2016 setup wizard. Instead, you must create a virtual hard disk by using Windows PowerShell. You can then use this virtual hard disk on a virtual machine to support a virtualized Nano Server in Hyper-V, or you can configure your server computer to start from a VHD file for a physical Nano Server deployment option.

Use scenarios Nano Server is ideal for use in the following scenarios: •

As a compute host for Hyper-V virtual machines, either in clusters or not in clusters.

•

As a storage host for a scale-out file server, either in clusters or not in clusters.

•

As a DNS server.

•

As a web server running Microsoft Internet Information Services (IIS).

•

As a host for applications that are developed by using cloud application patterns and run in a container or virtual machine guest operating system.

Server roles available in Nano Server


1-10 Installing and configuring Windows Server 2016

The following table shows the server roles and features that you can either install when you deploy Nano Server or subsequently install by using Windows PowerShell on a previously deployed Nano Server. Role

Option to install

Hyper-V role

-Compute

Failover clustering

-Clustering

Hyper-V guest drivers for hosting Nano Server as a virtual machine

-GuestDrivers



Role

Option to install

Basic drivers for a variety of network adapters and storage controllers. This is the same set of drivers included in a Server Core installation of Windows Server 2016.

-OEMDrivers

File Server role and other storage components

-Storage

Windows Defender Antimalware, including a default signature file

-Defender

Reverse forwarders for application compatibility—for example, common application frameworks, such as Ruby and Node.js

-ReverseForwarders

DNS Server role

-Packages Microsoft-NanoServer-DNS-Package

Desired State Configuration

-Packages Microsoft-NanoServer-DSC-Package

IIS

-Packages Microsoft-NanoServer-IIS-Package

Host support for Windows Containers

-Containers

System Center Virtual Machine Manager agent

-Packages Microsoft-Windows-Server-SCVMMPackage -Packages Microsoft-Windows-Server-SCVMMCompute-Package

Network Performance Diagnostics Service (NPDS)

-Packages Microsoft-NanoServer-NPDS-Package

Data Center Bridging

-Packages Microsoft-NanoServer-DCB-Package

Discussion: Selecting a suitable Windows Server edition and installation type Question: Which Windows Server 2016 installation option would you select? Question: Your customer, a small legal firm, has a requirement for a single server that the firm wants you to deploy at their only office. Which Windows Server 2016 installation option would be the most suitable? Question: One of your enterprise customers has a new branch office. You must deploy Windows Server 2016 to support the local users at this new branch. The server will be managed remotely from IT staff located in the head office. The server will support the DNS, DHCP, and AD DS server roles. Your customer wants to minimize resource consumption on the server. Which Windows Server 2016 installation option would be best?

Question: Your customer wants to run a web server based on IIS. The server must use as few hardware resources as possible. Which Windows Server 2016 installation option would be best?

Demonstration: Installing Nano Server Overview of the Nano Server installation process


1-12 Installing and configuring Windows Server 2016

You can install Nano Server as a guest operating system in Hyper-V or as an operating system on a physical computer. The initial process for these two installation options is broadly the same, and starts with creating a virtual hard disk. Use the following guidance to create a virtual hard disk for Nano Server: 1.

Obtain and mount the Windows Server 2016 product DVD (or an ISO image of the DVD) on a Windows Server 2016 or Windows 10 computer.

2.

Copy NanoServerImageGenerator.psm1, and then Convert-WindowsImage.ps1 from the \NanoServer\NanoServerImageGenerator folder on the Windows Server DVD to a local folder on your computer. The NanoServerImageGenerator folder contains a .wim file that stores the Nano Server installation image.

3.

Open Windows PowerShell, and then run the cmdlet Import-Module NanoServerImageGenerator.psm1. This imports the necessary Windows PowerShell modules required for the next step.

4.

Create a virtual hard disk (either a VHD or a VHDX file) for the Nano Server. You can set a computer name and include then necessary drivers, optionally including the Hyper-V guest drivers, by running the cmdlet New-NanoServerImage -Edition Standard -MediaPath BasePath .\Base -TargetPath .\NanoServerVM\NanoServerVM.vhd -ComputerName -DeploymentType

20743A-ENU-TrainerHandbook

Recommend Documents

Nano Server Website

Nano Server Website