Description

This is the print lab manual adjacent to the 70-412 Configuring Advanced Windows Server 2012
R2 Servicestextbook. 70-412 Configuring Advanced Windows Server 2012 R2 Services covers
the third of three exams required for Microsoft Certified Solutions Associate (MCSA): Windows
Server 2012 certification. This course will help validate the skills and knowledge necessary to
administer a Windows Server 2012 Infrastructure in an enterprise environment. The three MCSA
exams collectively validate the skills and knowledge necessary for implementing, managing,
maintaining and provisioning services and infrastructure in a Windows Server 2012 environment.
This Microsoft Official Academic Course is mapped to the 70-412 Configuring Advanced Windows
Server 2012 Services exam skills, including the recent R2 objectives. This textbook focuses on real
skills for real jobs and prepares students to prove mastery of Advanced Windows Server 2012
Services such as advanced configuring tasks necessary to deploy, manage, and maintain a
Windows Server 2012 infrastructure. It covers such skills as fault tolerance, certificate services, and
identity federation. In addition, this book also covers such valuable skills as:
Implementing Advanced Network Services
Implementing Advanced File Services
Implementing Dynamic Access Control
Implementing Network Load Balancing
Implementing Failover Clustering
Implementing Disaster Recovery
Implementing Active Directory Certificate Services (AD CS)
Implementing Active Directory Federation Services (AD FS)
The MOAC IT Professional series is the Official from Microsoft, turn-key Workforce training program
that leads to professional certification and was authored for college instructors and college students.
MOAC gets instructors ready to teach and students ready for work by delivering essential resources
in 5 key areas: Instructor readiness, student software, student assessment, instruction resources,
and learning validation. With the Microsoft Official Academic course program, you are getting
instructional support from Microsoft; materials that are accurate and make course delivery easy.
Request your sample materials today.
See More

Table of Contents
1. Configuring Network Load Balancing 1

Exercise 1.1: Installing the Network Load Balancing Feature 3

Exercise 1.2: Creating an NLB Cluster 5
Exercise 1.3: Configuring DNS 7
Exercise 1.4: Configuring Cluster Properties 8
Exercise 1.5: Managing Cluster Nodes 9
Exercise 1.6: Removing an NLB Cluster 10
Lab Challenge: Upgrading an NLB Cluster 12
2. Configuring Failover Clustering 13
Exercise 2.1: Configuring the iSCSI Client 15
Exercise 2.2: Installing Failover Clustering 18
Exercise 2.3: Creating a Failover Cluster 18
Exercise 2.4: Configuring the Quorum 22
Exercise 2.5: Configuring a Clustered Storage Space 23
Exercise 2.6: Implementing Cluster Aware Updating 25
Lab Challenge: Upgrading a Failover Cluster 28
3. Managing Failover Clustering 29
Exercise 3.1: Deploying the General Use File Server Role 31
Exercise 3.2: Deploying Scale-Out File Server 33
Exercise 3.3: Configuring Failover and Preference Settings 34
Exercise 3.4: Managing a Cluster and Cluster Nodes 36
Exercise 3.5: Destroying a Cluster 37
Lab Challenge: Configuring VM Monitoring 38
4. Managing VM Movement 39
Exercise 4.1: Moving a VM Storage Location 40

Exercise 4.2: Moving a VM to Another Host 42

Exercise 4.3: Copying a VM 44
Lab Challenge: Configuring Computers for Live Migration 45
5. Configuring Advanced File Solutions 47
Exercise 5.1: Creating an NFS Shared Folder 49
Exercise 5.2: Installing and Configuring BranchCache 51
Exercise 5.3: Using File Classification 54
Exercise 5.4: Configuring File Access Auditing 57
Lab Challenge: Creating an NFS Shared Folder on a Cluster 61
6. Implementing Dynamic Access Control 63
Exercise 6.1: Using Dynamic Access Control (DAC) 64
Exercise 6.2: Implementing a Central Access Policy 71
Lab Challenge: Performing Access Denied Remediation 77
7. Configuring and Optimizing Storage 79
Exercise 7.1: Removing an iSCSI Target 81
Exercise 7.2: Creating and Configuring an iSCSI Target 82
Exercise 7.3: Configuring iSCSI Initiator 85
Exercise 7.4: Configuring Tiered Storage 88
Exercise 7.5: Using Features on Demand 89
Lab Challenge: Implementing Thin Provisioning 91
8. Configuring and Managing Backups 93
Exercise 8.1: Installing the Windows Server Backup 95
Exercise 8.2: Performing a Manual Backup of a Local Folders to a Remote Share 95
Exercise 8.3: Backing up the System State 98

Exercise 8.4: Managing VSS Settings 99

Exercise 8.5: Enabling Shadow Copies for Shared Volumes 100
Lab Challenge: Using Hyper-V Snapshots 102
9. Recovering Servers 103
Exercise 9.1: Restoring a Folder Using Windows Server Backup 104
Exercise 9.2: Restoring the System State of a System 106
Exercise 9.3: Restoring a File Using Shadow Copy 106
Exercise 9.4: Booting into Safe Mode 108
Exercise 9.5: Using Command Prompt Repair Tools 112
Lab Challenge: Performing an Authoritative Restore 114
10. Configuring Site-Level Fault Tolerance 115
Exercise 10.1: Configuring and Enabling Hyper-V Replication 117
Exercise 10.2: Configuring Replication for a VM 119
Lab Challenge: Configuring Multi-Site Failover Cluster 120
11. Implementing an Advanced Dynamic Host Configuration Protocol (DHCP) Solution 121
Exercise 11.1: Creating a Vendor Class 123
Exercise 11.2: Creating a DHCP Policy 124
Exercise 11.3: Creating and Configuring a Superscope 127
Exercise 11.4: Creating and Configuring Multicast Scopes 129
Exercise 11.5: Implementing DHCPv6 Scopes 130
Exercise 11.6: Configuring DHCP Name Protection 131
Lab Challenge: Creating a DHCP Split Scope 133
12. Implementing an Advanced DNS Solution 135
Exercise 12.1: Configuring DNSSEC 136

Exercise 12.2: Enabling DNS Cache Locking 138

Exercise 12.3: Configuring DNS Logging 139
Exercise 12.4: Disabling Recursion 139
Exercise 12.5: Configuring Netmask Ordering 140
Exercise 12.6: Configuring a GlobalNames Zone 140
Lab Challenge: Delegating DNS Administration 142
13. Deploying and Managing IPAM 143
Exercise 13.1: Installing IPAM on a Member Server 144
Exercise 13.2: Configuring IPAM 145
Lab Challenge: Migrating to IPAM 151
14. Configuring a Domain and Forest 153
Exercise 14.1: Creating a Child Domain 155
Exercise 14.2: Demoting a Domain Controller 157
Exercise 14.3: Installing a New Forest 158
Exercise 14.4: Raising the Domain and Forest Functional Level 160
Exercise 14.5: Configuring Multiple UPN Suffixes 161
Lab Challenge: Performing an Upgrade Installation 162
15. Configuring Trusts 163
Exercise 15.1: Creating and Configuring a One-Way External Trust 164
Exercise 15.2: Creating and Configuring a Two-Way Forest Trust 169
Exercise 15.3: Validating and Testing the Trust 171
Lab Challenge: Configuring Selective Authentication Between Two Trusted Domains 174
16. Configuring Sites 175
Exercise 16.1: Adding Sites and Subnets 176

Exercise 16.2: Configuring a Bridgehead Server 178

Exercise 16.3: Creating a Site Link 179
Exercise 16.4: Modifying the Replication Interval and Replication Schedule of a Site Link 180
Lab Challenge: Working with SRV Records 183
17. Designing an Active Directory Permission Model 185
Exercise 17.1: Planning an Active Directory Permission Model 187
Exercise 17.2: Customizing Tasks Using the Delegation of Control Wizard 187
Exercise 17.3: Delegating Permissions to AdminSDHolder 189
Exercise 17.4: Configuring Kerberos and Kerberos Delegation 190
Lab Challenge: Planning and Designing an Active Directory Permission Model (Contoso Active
Directory Permission Model Project) 191
18. Implementing Active Directory Federation Services 193
Exercise 18.1: Installing the Active Directory Federation Services 194
Exercise 18.2: Creating a Standalone Federation Server 195
Exercise 18.3: Creating and Configuring a Sample WIF Application 198
Exercise 18.4: Implementing Relying Party Trusts 204
Exercise 18.5: Configuring the Active Directory Claims Provider Trust 206
Lab Challenge: Configure a Global Authentication Policy 208
19. Installing and Configuring Active Directory Certificate Services 209
Exercise 19.1: Installing an Enterprise Certificate Authority 211
Exercise 19.2: Installing Subordinate Certificate Server 213
Exercise 19.3: Configuring a Certified Revocation List (CRL)
Distribution Point 215
Exercise 19.4: Installing the Online Responder Role 217

Exercise 19.5: Performing a CA Backup 220

Lab Challenge: Managing Administrative Roles 221
20. Managing Certificates 223
Exercise 20.1: Importing and Exporting Digital Certificates 224
Exercise 20.2: Renewing a CA Certificate 226
Exercise 20.3: Creating a New User Certificate Template 227
Exercise 20.4: Requesting a Certificate 228
Exercise 20.5: Configuring Auto-Enrollment 231
Exercise 20.6: Configuring Enrollment Agents 232
Lab Challenge: Configuring the Key Recovery Agent 235
21. Installing and Configuring Active Directory Rights Management Services 237
Exercise 21.1: Installing Active Directory Rights Management Services (AD RMS) 239
Exercise 21.2: Creating and Enabling the Super Users Group 244
Exercise 21.3: Creating a Distributed Rights Policy Template 246
Exercise 21.4: Enabling and Configuring an Application Exclusion 247
Lab Challenge: Backing Up and Restoring AD RMS 248
Appendix: Lab Setup Guide 000