Complete Guide to Windows Server 2008, The

“This book is an invaluable one-stop reference for deploying, configuring, and managing Windows Server 2008. It’s filled with John’s unique and hard-earned nuggets of advice, helpful scripts, and shortcuts that will save you time and money.” --Mark Russinovich   The Start-to-Finish, Comprehensive Windows Server 2008 Book for Every Working Administrator and Architect   To make the most of Windows Server 2008 in production environments, you need a deep understanding of its technical details. However, accurate and reliable information is scarce, and even most skilled Windows professionals don’t know Windows Server 2008 as well as they should. The Complete Guide to Windows Server 2008brings together more than 1,500 pages of practical Windows Server 2008 insight and in-depth knowledge that you can't find anywhere else, all based on final code. John Savill—one of the world’s most visible and trusted experts on Windows Server technology—specializes in helping real companies use Windows Server 2008 to run their businesses. His access to Microsoft’s product team as a Microsoft MVP and one of 50 elite “Windows Server 2008 Delta Force Rangers” benefited this book’s accuracy and value.   Coverage includes Deployment planning, implementing, and managing new features, including Windows Server Core and Hyper-V virtualization Choosing the right installation and upgrade options for your environment Securing Windows Server 2008: authentication, authorization, BitLocker, certification services, and more Implementing TCP/IP, advanced network services, remote access, and thin-client Terminal Services Active Directory in depth, including Federated Services, Lightweight Directory Services, and Rights Management Providing high availability through Network Load Balancing and failover clustering Using Windows Deployment Services to quickly deploy multiple servers Supporting complex distributed environments with the Distributed File System Automating server management with PowerShell and the command prompt Integrating Windows Server 2008 with UNIX, Linux, and legacy NetWare servers Troubleshooting Windows Server 2008 and Vista environments, including an intuitive “how to” index to quickly locate answers to commonly asked questions www.savilltech.com/completeguidetowindows2008

Table of Contents:
Acknowledgments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .xvii About the Author . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .xviii Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .xix Chapter 1: Windows 101: Its Origins, Present, and the Services It Provides . . .1 Origin of the Windows Operating System . . . . . . . . . . . . . . . . . . . . . .1 Features of the Windows Server 2008 Product Line . . . . . . . . . . . . . . .21 Licensing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .41 Chapter 2: Windows Server 2008 Fundamentals: Navigating and Getting Started . . .43 Windows Vista at 30,000 Feet . . . . . . . . . . . . . . . . . . . . . . . . . . . . .44 The Logon Experience . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .46 User Access Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .50 Windows Elements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .56 The Desktop Windows Manager (DWM) . . . . . . . . . . . . . . . . . . . . . .64 Windows Aero Effects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .67 Task Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .71 Fast User Switching . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .77 Windows Explorer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .78 The Microsoft Management Console . . . . . . . . . . . . . . . . . . . . . . . . .86 The Control Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .93 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .96 Chapter 3: Installing and Upgrading Windows Server 2008 . . .99 Installing Windows Server 2008 . . . . . . . . . . . . . . . . . . . . . . . . . . . .99 Upgrading to Windows Server 2008 . . . . . . . . . . . . . . . . . . . . . . .126 Advanced Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .130 Viewing Installation Log Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . .131 Automating Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .133 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .139 Chapter 4: Securing Your Windows Server 2008 Deployment . . .141 Authentication and Authorization . . . . . . . . . . . . . . . . . . . . . . . . . . .142 The Physical Environment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .143 BitLocker . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .145 Active Directory Certificate Services (ADCS) . . . . . . . . . . . . . . . . . . .156 Authentication Protocols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .171 Securing Windows Server 2008 . . . . . . . . . . . . . . . . . . . . . . . . . . .179 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .224 Chapter 5: File System and Print Management Features . . .225 File System Types and Management . . . . . . . . . . . . . . . . . . . . . . . .225 File Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .240 File Server Resource Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . .257 Print Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .290 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .333 Chapter 6: TCP/IP . . .335 Internet Protocol (IP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .335 Transmission Control Protocol (TCP) . . . . . . . . . . . . . . . . . . . . . . . . .355 User Datagram Protocol (UDP) . . . . . . . . . . . . . . . . . . . . . . . . . . . .356 Network Monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .357 IPv6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .362 Communication Testing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .368 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .376 Chapter 7: Advanced Networking Services . . .377 DHCP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .377 Domain Name System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .406 WINS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .447 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .450 Chapter 8: Remote Access and Securing and Optimizing the Network . . .451 Virtual Private Networks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .452 RADIUS and Policy Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .478 Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .486 Network Access Protection (NAP) . . . . . . . . . . . . . . . . . . . . . . . . . .488 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .519 Chapter 9: Terminal Services . . .521 Enabling Remote Desktop . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .526 Initiating a Remote Desktop Connection . . . . . . . . . . . . . . . . . . . . . .529 Terminal Server Licensing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .544 Installing Terminal Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .558 TS Easy Print . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .559 TS Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .566 Remote Applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .583 TS Web Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .594 TS Session Broker . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .604 Management and Maintenance . . . . . . . . . . . . . . . . . . . . . . . . . . . .612 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .621 Chapter 10: Active Directory Domain Services Introduction . . .623 Workgroups Versus Domains . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .623 Exclusive Membership . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .627 Trusts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .630 Active Directory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .632 Domain and Forest Modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .671 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .677 Chapter 11: Designing and Installing Active Directory . . .679 Adding a Replica Domain Controller . . . . . . . . . . . . . . . . . . . . . . . .679 Creating a New Domain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .698 Verifying Domain Controller Operation . . . . . . . . . . . . . . . . . . . . . .705 Creating a Domain Controller from Media . . . . . . . . . . . . . . . . . . . .715 Removing Domain Controllers and Domains . . . . . . . . . . . . . . . . . . .719 Read-Only Domain Controllers (RODCs) . . . . . . . . . . . . . . . . . . . . . .722 Trust Relationships . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .740 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .751 Chapter 12: Managing Active Directory and Advanced Concepts . . .753 Customizing Site Connectivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . .753 Forcing a Demotion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .767 Managing AD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .777 Backing Up and Restoring AD . . . . . . . . . . . . . . . . . . . . . . . . . . . . .811 Auditing AD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .829 Advanced Password Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .834 Prune and Graft . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .836 Upgrading AD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .836 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .849 Chapter 13: Active Directory Federated Services, Lightweight Directory Services, and Rights Management . . .851 Active Directory Lightweight Directory Services . . . . . . . . . . . . . . . . .852 Active Directory Rights Management Services . . . . . . . . . . . . . . . . . .865 Active Directory Federated Services . . . . . . . . . . . . . . . . . . . . . . . . .891 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .909 Chapter 14: Server Core . . .911 Overview of Windows Server Core . . . . . . . . . . . . . . . . . . . . . . . . .911 Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .915 Server Core Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .918 Performing Common Actions Using Server Core . . . . . . . . . . . . . . . .940 Remotely Managing Server Core . . . . . . . . . . . . . . . . . . . . . . . . . . .942 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .952 Chapter 15: Distributed File System . . .953 Distribution of Other Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . .954 Distributed File System Namespace . . . . . . . . . . . . . . . . . . . . . . . . .957 Distributed File System Replication . . . . . . . . . . . . . . . . . . . . . . . . . .964 Installing and Configuring DFS . . . . . . . . . . . . . . . . . . . . . . . . . . . .969 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1008 Chapter 16: Deploying Windows . . .1011 Image Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1011 Installing Windows Deployment Services . . . . . . . . . . . . . . . . . . . .1017 Customizing the Windows Vista Deployment Process . . . . . . . . . . . .1041 Automating the Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1049 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1083 Chapter 17: Managing and Maintaining Windows Server 2008 . .1085 Server Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1085 Computer Management Console . . . . . . . . . . . . . . . . . . . . . . . . . .1151 Windows Server Backup (WSB) . . . . . . . . . . . . . . . . . . . . . . . . . .1152 Patch Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1178 Registry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1185 Performance and Paging File Tuning . . . . . . . . . . . . . . . . . . . . . . .1192 Managing from a Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1202 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1203 Chapter 18: Highly Available Windows Server 2008 . . .1205 High-Level Overview of NLB and Failover Clustering . . . . . . . . . . . .1205 Network Load Balancing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1210 Failover Clustering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1229 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1269 Chapter 19: Virtualization and Resource Management . . .1271 Virtualization 360 Picture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1271 Virtual Applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1272 Virtual Machines and Hyper-V . . . . . . . . . . . . . . . . . . . . . . . . . . . .1283 Windows System Resource Manager (WSRM) . . . . . . . . . . . . . . . .1319 Advantages of Virtualization and Consolidation . . . . . . . . . . . . . . .1330 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1330 Chapter 20: Troubleshooting Windows Server 2008 and Vista Environments . . .1333 Boot Mode Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1334 Windows Recovery Environment . . . . . . . . . . . . . . . . . . . . . . . . . .1338 Reliability and Performance Monitoring . . . . . . . . . . . . . . . . . . . . .1355 Event Viewer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1381 MSConfig . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1400 Windows Error Reporting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1401 System Center . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1402 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1407 Chapter 21: Group Policy . . .1409 Group Policy Structure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1410 Group Policy Management Console (GPMC) . . . . . . . . . . . . . . . . .1427 Group Policy Preferences . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1491 Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1501 Microsoft Templates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1503 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1505 Chapter 22: The Command Prompt and PowerShell . . .1507 Command.com . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1508 CMD.EXE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1510 Windows Scripting Host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1528 PowerShell . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1536 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1563 Chapter 23: Connecting Windows Server 2008 to Other Environments . . .1565 UNIX Integration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1566 NetWare Integration and Migration . . . . . . . . . . . . . . . . . . . . . . . .1593 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1608 Chapter 24: Internet Information Services . . .1611 IIS 7.0 Architecture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1611 Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1625 IIS Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1628 Certificates and Encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1645 Server Core Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1648 IIS and Windows Vista . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1648 Windows Web Server 2008 . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1649 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1650 How To Quick Reference . . . 1651 Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1657

About the Author :
JOHN SAVILL, BS, MCSE, MS ITP Server Administrator, MS ITP Enterprise Administrator, Microsoft MVP, is Central US manager for EMC’s Microsoft technical infrastructure practice and the firm’s chief Microsoft architect. Savill’s Windows NT site evolved into ntfaq.com, the Internet’s most widely used independent NT resource. A frequent writer for Windows IT Pro and TechNetmagazines, Savill spoke at Microsoft Tech Ed 2006, 2007, and 2008. His books include The Windows XP/2000 Answer Book.