Mastering Windows Server 2022 with Azure Cloud Services: IaaS, PaaS, and SaaS

ISBN-13: 9781119798927 / Angielski / Miękka / 2022

William Panek

Spis treści

Introduction xxiChapter 1 Understanding Windows Server 2022 1Features and Advantages of Windows Server 2022 1Deciding Which Windows Server 2022 Version to Use 6Deciding on the Type of Installation 13Removed Features 17The Bottom Line 20Chapter 2 Understanding Virtualization 21Introduction to Virtualization 21Hyper-V Features 23Hyper-V Architecture 28Hyper-V Operating Systems 29Linux and FreeBSD Image Deployments 29Virtualization in Azure 30The Bottom Line 30Chapter 3 Installing and Configuring Hyper-V 31Hyper-V Installation and Configuration 31Hyper-V Requirements 31Install the Hyper-V Role 32Hyper-V in Server Manager 35Using Hyper-V Manager 35Configure Hyper-V Settings 36Manage Virtual Switches 38Managing Virtual Hard Disks 40Configuring Virtual Machines 45Creating and Managing Virtual Machines 45Linux and FreeBSD Image Deployments 56PowerShell Commands 59The Bottom Line 62Chapter 4 Installing Windows Server 2022 63Installing the Windows Server 2022 OS 63Installing with the Desktop Experience 63Installing Windows Server 2022 Server Core 68Activating and Servicing Windows 71Key Management Service 71Automatic Virtual Machine Activation 73Active Directory-Based Activation 74Servicing Windows Server 2022 74Configuring Windows Server Updates 75Windows Update 76Using Windows Server Update Services 80Understanding Features On Demand 93The Bottom Line 94Chapter 5 Understanding IP 97Understanding TCP/IP 97Details of the TCP/IP Model 97How TCP/IP Layers Communicate 98Understanding Port Numbers 98Understanding IP Addressing 100The Hierarchical IP Addressing Scheme 100Understanding Network Classes 101Subnetting a Network 104Implementing Subnetting 105An Easier Way to Apply Subnetting 110Applying Subnetting the Traditional Way 114Working with Classless Inter-Domain Routing 121Supernetting 124Understanding IPv6 124IPv6 History and Need 124New and Improved IPv6 Concepts 125IPv6 Addressing Concepts 127IPv6 Integration/Migration 132The Bottom Line 136Chapter 6 Implementing DNS 137Introducing DNS 137HOSTS File 138Understanding Servers, Clients, and Resolvers 142Understanding the DNS Process 142Introducing DNS Database Zones 147Understanding Primary Zones 148Understanding Secondary Zones 149Understanding Active Directory Integrated DNS 150Understanding Stub Zones 152GlobalName Zones 153Zone Transfers and Replication 153Advantages of DNS in Windows Server 2022 156Background Zone Loading 157Support for IPv6 Addresses 157Support for Read-Only Domain Controllers 157DNS Socket Pools 158DNS Cache Locking 158Response Rate Limiting 158Unknown Record Support 159IPv6 Root Hints 159DNS Security Extensions 159DNS Devolution 161Record Weighting 161Netmask Ordering 161DnsUpdateProxy Group 161DNS Policies 161Introducing DNS Record Types 162Start of Authority (SOA) Records 162Name Server Records 164Host Record 164Alias Record 165Pointer Record 165Mail Exchanger Record 166Service Record 166Configuring DNS 167Installing DNS 167Load Balancing with Round Robin 168Configuring a Caching-Only Server 168Setting Zone Properties 168Configuring Zones for Dynamic Updates 172Delegating Zones for DNS 173DNS Forwarding 174Manually Creating DNS Records 175DNS Aging and Scavenging 176DNS PowerShell Commands 176The Bottom Line 179Chapter 7 Understanding Active Directory 181Verifying the File System 181Resilient File System (ReFS) 182NTFS 183Verifying Network Connectivity 185Basic Connectivity Tests 185Tools and Techniques for Testing Network Configuration 186Understanding Active Directory 188Domains 188Trees 188Forests 189Understanding Domain and Forest Functionality 189About the Domain Functional Level 190About Forest Functionality 191Planning the Domain Structure 193Installing Active Directory 193Improved Active Directory Features 194Read-Only Domain Controllers 194Active Directory Prerequisites 194The Installation Process 194Installing Additional Domain Controllers by Using Install from Media 201Verifying Active Directory Installation 201Using Event Viewer 201Using Active Directory Administrative Tools 203Testing from Clients 204Creating and Configuring Application Data Partitions 206Creating Application Data Partitions 206Managing Replicas 207Removing Replicas 208Using ntdsutil to Manage Application Data Partitions 208Configuring DNS Integration with Active Directory 210The Bottom Line 211Chapter 8 Administering Active Directory 213Active Directory Overview 213Understanding Active Directory Features 214Understanding Security Principals 215An Overview of OUs 216The Purpose of OUs 217Benefits of OUs 217Planning the OU Structure 217Logical Grouping of Resources 218Understanding OU Inheritance 219Delegating Administrative Control 220Applying Group Policies 221Creating OUs 221Managing OUs 224Moving, Deleting, and Renaming OUs 225Administering Properties of OUs 225Delegating Control of OUs 227Creating and Managing Active Directory Objects 228Overview of Active Directory Objects 229Managing Object Properties 235Understanding Groups 238Filtering and Advanced Active Directory Features 240Moving, Renaming, and Deleting Active Directory Objects 241Resetting an Existing Computer Account 242Understanding Dynamic Access Control 243Managing Security and Permissions 244Publishing Active Directory Objects 245Making Active Directory Objects Available to Users 245Publishing Printers 245Publishing Shared Folders 246PowerShell for Active Directory 247The Bottom Line 248Chapter 9 Configuring DHCP 249Understanding DHCP 249Introducing the DORA Process 250Advantages and Disadvantages of DHCP 251Ipconfig Lease Options 252Understanding Scope Details 253Installing and Authorizing DHCP 255Installing DHCP 255Introducing the DHCP Snap-In 256Authorizing DHCP for Active Directory 257Creating and Managing DHCP Scopes 259Creating a New Scope in IPv4 259Creating a New Scope in IPv6 267Changing Scope Properties (IPv4 and IPv6) 269Changing Server Properties 270Managing Reservations and Exclusions 272Setting Scope Options for IPv4 274Activating and Deactivating Scopes 276Creating a Superscope for IPv4 276Creating IPv4 Multicast Scopes 277Integrating Dynamic DNS and IPv4 DHCP 279Using DHCP Failover Architecture 281Working with the DHCP Database Files 281Working with Advanced DHCP Configuration Options 283Implement DHCPv6 283Configure High Availability for DHCP, Including DHCP Failover and Split Scopes 284Configure DHCP Name Protection 286PowerShell Commands 287The Bottom Line 289Chapter 10 Building Group Policies 291Introducing Group Policy 291Understanding Group Policy Settings 292The Security Settings Section of the GPO 295Client-Side Extensions 296Group Policy Objects 296Group Policy Inheritance 297Planning a Group Policy Strategy 298Implementing Group Policy 298Creating GPOs 299Linking Existing GPOs to Active Directory 301Forcing a GPO to Update 302Managing Group Policy 303Managing GPOs 303Security Filtering of a Group Policy 304Delegating Administrative Control of GPOs 306Controlling Inheritance and Filtering Group Policy 307Assigning Script Policies 308Understanding the Loopback Policy 310Managing Network Configuration 310Configuring Network Settings 311Automatically Enrolling User and Computer Certificates in Group Policy 311Redirecting Folders 313Managing GPOs with Windows PowerShell Group Policy Cmdlets 314Item-Level Targeting 315Back Up, Restore, Import, Copy, and Migration Tables 316The Bottom Line 319Chapter 11 Advanced Group Policy Options 321Deploying Software Through a GPO 321The Software Management Life Cycle 322The Windows Installer 323Deploying Applications 326Implementing Software Deployment 328Preparing for Software Deployment 328Software Restriction Policies 329Using AppLocker 329Group Policy Slow Link Detection 329Publishing and Assigning Applications 329Applying Software Updates 331Verifying Software Installation 332Configuring Automatic Updates in Group Policy 332Configuring Software Deployment Settings 333The Software Installation Properties Dialog Box 333Removing Programs 335Microsoft Windows Installer Settings 337Troubleshooting Group Policies 337RSoP in Logging Mode 338RSoP in Planning Mode 342Using the gpresult.exe Command 342Using the Group Policy Infrastructure Status Dashboard 343The Bottom Line 343Chapter 12 Understanding Cloud Concepts 345Understand Cloud Concepts 345Cloud Advantages 345Understanding CapEx vs. OpEx 346Understanding Different Cloud Concepts 348Understanding the difference between IaaS, PaaS, and SaaS 349Infrastructure as a Service 350Platform as a Service 350Software as a Service 351Compare and Contrast the Service Types 352The Bottom Line 353Chapter 13 Configuring Azure 355Understanding Azure Benefits 355Azure Benefits 355Understanding the Azure Dashboards 357Using the Azure Dashboard 357Configuring the Azure Portal Settings 366The Bottom Line 372Chapter 14 Understanding Azure Active Directory 373Azure Active Directory 373Understanding Azure AD 373Self-Service Password Reset 392The Bottom Line 394Chapter 15 Creating a Hybrid Network 395Creating a Hybrid Network 395Password Hash Synchronization with Azure AD 396Azure Active Directory Pass-Through Authentication 396Federation with Azure AD 397Common Identity Scenarios 399Azure AD Connect 400Implement Active Directory Federation Services 405What Is a Claim? 406AD FS in Windows Server 2022 409Configuring a Web Application Proxy 411Active Directory Federation Services Installation 413AD FS and AD Connect 421Planning Azure AD Authentication Options 423Azure AD Multi-Factor Authentication 423Azure AD Connect Sync--Understand and Customize Synchronization 426Creating an Azure Recovery Policy 427Model Apps 427Automate Tasks in Recovery Plans 428Run a Test Failover on Recovery Plans 429Create a Recovery Plan 429The Bottom Line 432Chapter 16 Understanding Microsoft Endpoint 433Using Microsoft Endpoint Manager 433Understanding AutoPilot 440Autopilot Benefits 441Autopilot Prerequisites 441Deployment Scenarios 443Planning for Secure Applications Data on Devices 446Configuring Managed Apps for Mobile Application Management (MAM) 446Protecting Enterprise Data using Windows Information Protection (WIP) 449The Bottom Line 458Chapter 17 Configuring Security 459Managing Windows Security 459Windows Defender Security Center 460Configuring Windows Firewall 463Understanding Windows Firewall Basics 463Windows Firewall with Advanced Security 464Managing Security 469Implementing Azure Windows Defender Advanced Threat Protection 469Understanding Windows Defender Application Guard 471Understanding Windows Defender Credential Guard 476Implementing and Managing Windows Defender Exploit Guard 478Using Windows Defender Application Control 481The Bottom Line 482Chapter 18 Creating Azure Policies 483Azure Devices and Policies 483Compliance Policies 484Device Configuration Profiles 489PowerShell Commands 492The Bottom Line 494Appendix The Bottom Line 495

O autorze

William Panek is a 5-time Microsoft MVP Winner. He has taught at Boston University, Clark University, and the University of Maryland and trained members of the United States Secret Service, Cisco, the United States Air Force, and the United States Army in technology and IT. He also produces training videos to help students prepare for some Microsoft certification exams which can be found at: www.youtube.com/c/williampanek.